{"report_id":"72a30c60-643c-4b9f-9686-dcae9d49545a","version":0,"status":"done","tags":[],"date":"2026-08-19T22:28:15Z","url":{"schema":"http","addr":"indonnsiax-llyandnaz.gocernoe.com/","fqdn":"indonnsiax-llyandnaz.gocernoe.com","domain":"gocernoe.com","tld":"com"},"ip":{"addr":"104.21.48.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"indonnsiax-llyandnaz.gocernoe.com/","fqdn":"indonnsiax-llyandnaz.gocernoe.com","domain":"gocernoe.com","tld":"com"},"title":"𝗗𝗔𝗡𝗔 | 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗖𝗮𝗿𝗲 𝗗𝗔𝗡𝗔","dom":{"size":20257,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4768)","md5":"66cadc1584230d5081a604c60aac0c25","sha1":"483680b529078a31c7d653db38ce8431bf6e6923","sha256":"269a14b3d723d58fab9213cab3d3b8a6a46e7f08e186f00350e563d52c6caa20","sha512":"26385ce5abe9c5651e4e695c71c387b3ef85c001d8c8ed37c8ede598d755edb87b6b1b872a971fc84b7f8cc1b8c52cbf6f6f30a9aef34ce57d8946d2b8be9f64","ssdeep":"384:DxFr/Oa9Gvjxa0SESrOAG22FGFmFsFJo5ENgOicKxX:dl0tYOAG22FGFmFsFJ8qgWKxX","tlshash":"4a92759399421017241684d93757ab4a3587e2078e2ac8917fcd439abfde6e09cfb3cd","dom_hash":"domhashd543d2902e455eaa76f5d82eec2643aa","first_seen":"2026-08-19T02:13:51.834792Z","last_seen":"2026-08-19T22:28:21.869498Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"indonnsiax-llyandnaz.gocernoe.com/","fqdn":"indonnsiax-llyandnaz.gocernoe.com","domain":"gocernoe.com","tld":"com"},"ip":{"addr":"104.21.48.180","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-22T22:28:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegra.ph","ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":2920,"first_seen":"2016-03-03T04:27:14Z","last_seen":"2026-08-12T20:18:38.907109Z","alert_count":0,"request_count":13,"received_data":485504,"sent_data":7436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":6877,"sent_data":541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"e-formulir.mwebs.id","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":0,"first_seen":"2023-08-26T17:19:56Z","last_seen":"2026-08-19T02:13:48.487055Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":590,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":1,"received_data":19541,"sent_data":610,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.ionicframework.com","ip":{"addr":"104.26.7.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-02","domain_rank":164865,"first_seen":"2014-02-05T17:09:16Z","last_seen":"2026-08-15T07:26:01.41331Z","alert_count":0,"request_count":1,"received_data":52655,"sent_data":536,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}]},{"fqdn":"encrypted-tbn0.gstatic.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-31T02:32:18Z","last_seen":"2026-08-13T19:57:18.571379Z","alert_count":0,"request_count":1,"received_data":12356,"sent_data":619,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.dana.id","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-07-14","domain_rank":103065,"first_seen":"2018-07-06T01:48:16Z","last_seen":"2026-08-12T13:34:57.576622Z","alert_count":0,"request_count":1,"received_data":102056,"sent_data":551,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-16T23:03:23.649094Z","alert_count":0,"request_count":6,"received_data":251429,"sent_data":3371,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"indonnsiax-llyandnaz.gocernoe.com","ip":{"addr":"172.67.155.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-07","domain_rank":0,"first_seen":"2026-08-19T02:13:47.725504Z","last_seen":"2026-08-19T02:13:47.725504Z","alert_count":5,"request_count":1,"received_data":15502,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:3.3.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-08-17T08:32:32.247147Z","alert_count":0,"request_count":1,"received_data":123459,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-16T22:46:07.924415Z","alert_count":0,"request_count":1,"received_data":90481,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-20T13:31:32.139807Z","times_seen":267928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-20T13:09:59.329664Z","times_seen":112000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indonnsiax-llyandnaz.gocernoe.com/","fqdn":"indonnsiax-llyandnaz.gocernoe.com","domain":"gocernoe.com","tld":"com"},"ip":{"addr":"172.67.155.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e0330a91f898f8dca2d25621beb7291","sha1":"92c4a38c3da7de8ee9e746c682941543afca83af","sha256":"52ee5f3479345c5c490da435b10185d78bc6556a97570cd102df341b4da6bf03","sha512":"b0aa0178bad425c434c32b548d022f4167352b1aa5781d93f37f852129699d7d095e43415c760857d4f2a5157a8c8bbf3c93a06dec4c00336c9b201f5e41538e","ssdeep":"","tlshash":"51d09b1b60ad6031093774045fbfb4045f677807140db9e47a4c17944f1d3196023544","size":210,"data":"","first_seen":"2026-06-08T01:51:52.830632Z","last_seen":"2026-08-20T13:09:59.353461Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indonnsiax-llyandnaz.gocernoe.com/","fqdn":"indonnsiax-llyandnaz.gocernoe.com","domain":"gocernoe.com","tld":"com"},"ip":{"addr":"172.67.155.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f58a0e20e265bb08d8b4ca9fc23ff51","sha1":"7ed758fdd8a7b1f9f4624679ae980ba3162961b5","sha256":"3a0b2ccdd5ebda1d532208925b8939dd6723bca2f998367c72dbdbf8406ee298","sha512":"ba9516c9c70da83492db5b653724047ab8285def2fddc3fd39eb4bb30456318c5f54c83b994951964cc6dade6c723737964f3700f7253cb2c71206f934c4a643","ssdeep":"","tlshash":"93c02bc630f121014cb6197359f2118c307901752c4cdb806e24d5226f1031fb5a7ac0","size":139,"data":"","first_seen":"2026-06-08T01:51:52.831528Z","last_seen":"2026-08-20T13:09:59.354193Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"telegra.ph/file/1e68929082b536f5df374.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.558Z","timestamp":1787178416558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/1e68929082b536f5df374.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40080\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"757e68f6e0c362633fea9247dcd945c41c3b70ce\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43086,"size_decoded":40457,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x315, components 3","md5":"52611566a906577a6f8df09242879dbc","sha1":"986393aa1ea93c947b8c7d932f820fb8880146ee","sha256":"0e9a605f74d29c6a55ed02a9b75611757be80005d3833198a933d8040f3fe17a","sha512":"6a3f03bd3eba46fb45573b5451157c22b0907bfb5cf7409ed4e9f77162c3295b34fdffc59c028f4dc2be1ff9d27d83e35b48ec5da3116428a459adb660c52fc2","ssdeep":"768:V6Xkx8LgLN/GWXLKWsguOQGoGisZfD1jBgoVSUUJMNfRtY1v+5:9GAN/7RQG6slFB3DAMNnY1+","tlshash":"cc13e07855c14b04e47b0ab315ca7316f9647380c0b792db65da2f2742b69b31feb226","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.339711Z","times_seen":172,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":81,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/df54e3f92fa6e1a99fd82.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.559Z","timestamp":1787178416559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/df54e3f92fa6e1a99fd82.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60310\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"520e6b0e7f20db88a2815d99da0ee087e2b47d2c\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61380,"size_decoded":60687,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"39e68bf37020490b5c541782726b9adf","sha1":"819bd8309ea32f5224694dfcb7c6f15bdc2fad1b","sha256":"a87d5d63f8f86283daff34bd01361ef78ff6a69405b9d364720663be2807b8f9","sha512":"a479e1309ea00f30b909321a4de9171f27bbb0a463cc1c596f273b997122ed20dbe76ab2289129aadb428390e4590d8cb7554e08f73b3d549b4d9799d8405b04","ssdeep":"1536:r2vMVwO69w88cDyHyefahdHmIgk3IBrEtWCwC:QUwOM8LH7fAyi8rAQC","tlshash":"4a53f208631de691ec6a147c4ad1b319ad17b92f1f828701748728748df32e5eac4ba0","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.340228Z","times_seen":175,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":88,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/074af7b0b495f2a210721.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.560Z","timestamp":1787178416560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/074af7b0b495f2a210721.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27616\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"626dcd409f13e33bad4e306e8104550168bb9b8a\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30914,"size_decoded":27993,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x600, components 3","md5":"e3792eb908f79a34238999adc2a46688","sha1":"20ca96b1d2b4b0b4961bc658c4f4ce2500cd422e","sha256":"b34d40ec1fd3b90153a2bb45c2a68803f295510c42c7479e73daecde9d0aaf0b","sha512":"8176af9119c41119fb29e3d1530405100dc439a0127bb8ca918c05b7b0ae337affec39eaafc8c0bba83404db2cce36a1d219f6c4d8053308fefb927af6c997fe","ssdeep":"384:k9eTCkvSRHbo6xfGkXp+4SVAUzXGQNHj9mZtYtXnlGJSwPBpc475Y/gU3cXZBS9w:Af/xZM4SV/9j9NBoJZBf74eLpP5","tlshash":"d0d2e1c9457892cfc8390b71d8e727c1d7e236623cedba0783a90047ab1661ae16ded5","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-08-20T13:09:59.347694Z","times_seen":178,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":244,"dns":0,"connect":21,"send":0,"wait":106,"receive":14,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/fonts/slick.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.947Z","timestamp":1787178416947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/fonts/slick.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://indonnsiax-llyandnaz.gocernoe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 1380\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"564-r5HBLw9Aak+AGus7OYdo/kHY+GQ\"\r\naccept-ranges: bytes\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\nage: 825138\r\nx-served-by: cache-fra-etou8220127-FRA, cache-bma-essb1270038-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":2101,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-08-20T13:09:59.34116Z","times_seen":25918,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"indonnsiax-llyandnaz.gocernoe.com/","fqdn":"indonnsiax-llyandnaz.gocernoe.com","domain":"gocernoe.com","tld":"com"},"ip":{"addr":"172.67.155.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T22:26:54.404Z","timestamp":1787178414404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gocernoe.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 11:58:22 GMT","end":"Sun, 01 Nov 2026 11:58:21 GMT"},"fingerprint":{"sha1":"93:70:2D:26:16:E7:3E:D1:F6:77:67:72:92:FF:A1:08:02:91:CC:12","sha256":"45:FA:58:D3:05:20:01:F5:7B:F6:5B:2E:A7:0C:CD:8E:87:B5:20:66:4F:C0:04:76:06:53:2A:8F:92:7A:E1:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: indonnsiax-llyandnaz.gocernoe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 15 Aug 2026 13:45:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NwfpYSkXvxzsJNFNFHdBMMEUPpL4aZ%2FvmrDXDBBfdt2dCJTywlmvhlU2CZTqM3Dt7t%2B8yTJPZ42f1wDmC2xOQoWDx%2FBh9qRV07pRAclhGTa7OfptpkhA1n13OH9s%2B5ENgN6nWrhNmdF6VfxgBlG8fZZTHoY%3D\"}]}\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2dc95223bd8569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:3.3.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":14858,"size_decoded":4724,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (467)","md5":"3f8ad0455e90942f17b07f3fe0c18be1","sha1":"8b2144972be161d61dc2ec1c09a57a816568df75","sha256":"eddf85578a788381440d7abe643fdae35fb18328978037d681db672636875975","sha512":"c5b8e77a52f594267538777460960c6b4b1884f195027e570a3d1452815ea7bfabc33258a1a1d8d677c99a3c623040768c5907137cd7579bac618dc0065dde8e","ssdeep":"384:DxFr/Ob9Gvjxa0W4OeLt2FGFmFsFJo5V3TcKxH:gl0W4OeLt2FGFmFsFJK4KxH","tlshash":"8b629397698750067412c1ad3ba73b49724792174a0eccb5ffcd6389ef892e489b23cc","first_seen":"2026-08-19T02:13:51.864708Z","last_seen":"2026-08-19T22:28:21.875098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1842,"timings":{"blocked":-1,"dns":8,"connect":22,"send":0,"wait":1629,"receive":182,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"indonnsiax-llyandnaz.gocernoe.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.516Z","timestamp":1787178416516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /bootstrap/3.3.5/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"5d5357cb3704e1f43a1f5bfed2aebf42\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 07/03/2025 14:49:11\r\ncdn-proxyver: 1.31\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 93a677859cccc76a96b51ca410f5a0d4\r\ncdn-cache: HIT\r\nage: 6109225\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a2dc952f5810568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122540,"size_decoded":21260,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"5d5357cb3704e1f43a1f5bfed2aebf42","sha1":"08df9a96752852f2cbd310c30facd934e348c2c5","sha256":"31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87","sha512":"7537e07bfce0a0c6293fb41b1f2e2058c106b1bb1d65e097cfb8ab22d8dc0b7b0f505b5fd24b856c3cff8b11bb02b4f19838cb5c399ecc7b9b78d8a4c8a195c9","ssdeep":"768:ayPGxw/jc/QWlJxtQZIuiHlncmzI4I8OAduFKbv2ctm2Bm8JP+eckOvS1Fs:Uw/o1wIuiHlncm28lDbzzPux","tlshash":"d2c3d7a0f11031ea7323c55a71d0ed872259a153e56a4eb7f22f25d88f886cb1773f1a","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-08-20T13:09:59.338525Z","times_seen":14782,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.521Z","timestamp":1787178416521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick-theme.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 866\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"c49-gaQ0+U8rESTzIyu4bylE+C+yOsA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\nage: 2004589\r\nx-served-by: cache-fra-etou8220109-FRA, cache-bma-essb1270038-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3145,"size_decoded":1623,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"f9faba678c4d6dcfdde69e5b11b37a2e","sha1":"81a434f94f2b1124f3232bb86f2944f82fb23ac0","sha256":"7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a","sha512":"ea52d475e439ba178c15b5a6dc23f6ef5975e11b17d71b71f89e71db27880e49220697954cd853aa28cc13b1a044a2a2ea10aaa2fc02a014e5441102db433c32","ssdeep":"","tlshash":"cb51e19856b3a746101694903be7472477cb70131629d8acff95638dcfcd0d8ead934e","first_seen":"2023-04-05T09:38:24Z","last_seen":"2026-08-20T13:09:59.34821Z","times_seen":29239,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":12,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.525Z","timestamp":1787178416525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 19 Aug 2026 22:26:56 GMT\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":2263,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ff25af4a310d8225bb745489c6fea2c9","sha1":"37d95e7efa18a621c062487bd04c66fa5fc667a9","sha256":"81855a9223fb532772ef58644e2f4930030d54863ee16f3482e4ea5f098432ef","sha512":"bbd062f72df8499a3b585b88687d17ed07e09d459a5f9cbcded7c93fa42a61b49947a6386d2fa758b232d57a27bae7940a1a4012b86560b4e0d3d5a7b5f5b211","ssdeep":"96:ZOXbalJOXbasFZ8OXba7kOXbadYOXba5OXbaly+aZjzBrWOXba7ubqGIFuV4UOXl:xlhrwd4RlqS6bqGIwV40Cd3Z","tlshash":"0bd131a000179450ab475ce327cebe34ee1fa2656040c07aabfd478aeedbd65637931d","first_seen":"2025-09-17T02:40:21.094619Z","last_seen":"2026-08-20T13:09:59.345939Z","times_seen":698,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":39,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-formulir.mwebs.id/BotikaTTS%20_5_.mp3","fqdn":"e-formulir.mwebs.id","domain":"mwebs.id","tld":"id"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.565Z","timestamp":1787178416565,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /BotikaTTS%20_5_.mp3 HTTP/1.1\r\nHost: e-formulir.mwebs.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T13:30:36.923321Z","times_seen":17991408,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.865Z","timestamp":1787178416865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://indonnsiax-llyandnaz.gocernoe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18728\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Aug 2026 05:59:17 GMT\r\nexpires: Fri, 13 Aug 2027 05:59:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 577659\r\nlast-modified: Mon, 15 Sep 2025 16:29:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18728,"size_decoded":19541,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18728, version 1.0","md5":"a6f0123a9439d11d2bd8f404f620bfca","sha1":"e50a2af45400cb2f6fd8c89711cb4b4ef481002c","sha256":"fcb3290e95d43c9427acb996e3c1243c44f003eae5104707b3f5ed65fba7d452","sha512":"3882dae2392e9d4347952072e52e86ee1f2136f29629eb19df2178b09b768c8b6ed638e4da57c46470515558075252ca550516dda5ebddd11e326a4f47c9e9a8","ssdeep":"384:6gLJuh+PG7AeiBHvp6MQ8jvy3xse1253sADWsMGGRQp2d:6nUB7HJtyueADWVGGRQp2d","tlshash":"4682d09788e9aa41e6c4f76232e92bf57ccf351b3065d2ee14505dc92892b63200bf2d","first_seen":"2025-09-20T15:52:41.695948Z","last_seen":"2026-08-20T13:09:59.327562Z","times_seen":1275,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":5,"connect":33,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.518Z","timestamp":1787178416518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\nage: 1339291\r\nx-served-by: cache-fra-etou8220090-FRA, cache-bma-essb1270063-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 533\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1776,"size_decoded":1310,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-08-20T13:14:46.913875Z","times_seen":74500,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":2,"connect":9,"send":0,"wait":9,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.544Z","timestamp":1787178416544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\nage: 441330\r\nx-served-by: cache-fra-eddf8230170-FRA, cache-bma-essb1270063-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 10910\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42863,"size_decoded":11703,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-20T13:09:59.329664Z","times_seen":112000,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":3,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/2f6ceb2e5a1a2fc7ed4ca.png","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.548Z","timestamp":1787178416548,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/2f6ceb2e5a1a2fc7ed4ca.png HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 12780\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"eb509dca9eb4a6cd3dda6ee7328b94a297483694\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12786,"size_decoded":13156,"mime_type":"image/png","magic":"PNG image data, 382 x 112, 8-bit/color RGBA, interlaced","md5":"6fd5a7d18a8f7c04bc5effcdc5235987","sha1":"c4852c577f44fcdf78fb439a30ea2c6c6983b140","sha256":"c67e5431f9c00bb690ea8b8add63d5ca9250bf2925f2c2a691eeee498ac75853","sha512":"13e05a6f89b8110f1867efbbc6a7bf216471ff5cad3739ac3c34e30aaed670844ed8de5b220eb449b174a272bcabef07a96f13f936a34aedd754e6a8ed3cc991","ssdeep":"192:olyA9pk9pGYsPVMm80Y0xf43FmSqf6x0LUYMTo2OZ9:olyA9pk9kYaV+0t43Tqf6KU/82Of","tlshash":"2642cf03f9de13005f6a367eaa2500be41aadd795a8905a2666c6c2ec177700ff988c9","first_seen":"2023-06-26T01:49:46Z","last_seen":"2026-08-20T13:09:59.346489Z","times_seen":3681,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":263,"dns":0,"connect":22,"send":0,"wait":46,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/ef49956cd9d6444e24f41.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.554Z","timestamp":1787178416554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/ef49956cd9d6444e24f41.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28295\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"7be79daacc3eb422bba49c020ec24c70d9567e22\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29964,"size_decoded":28672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 643x259, components 3","md5":"6d50bcb334150b5fae2f7e9a143e3ded","sha1":"40d976b19912ed3adf511f25dd550f1316851618","sha256":"cc3e389bfa43d9cb4d2ce67743f358c798088e2dd208cf5c035976895e09fd36","sha512":"d03c667634f2d5bf017ccebf0e1cb9a7c8c2e38a13c35ef4cbc0dde8cffc368791106c6ba875ca74a8f282efb16c8f0f791d98aaddb2b953721b218d68d7b6c6","ssdeep":"384:k9iw2bNLbynbXMCUhn+e1Gr00ElhjPrzF1cjhymqiYwi9xe76yk/jwfcTUATxnzj:mzMCy15zFaTqiYRe76RqCJu5XnY","tlshash":"1dd2d0513ab41ae5c87d1ef4e3cd9b0770a7b69e92ecec8351a4bd1809ca89027d453f","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.34414Z","times_seen":171,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":81,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/1214de4228752b76ef775.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.556Z","timestamp":1787178416556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/1214de4228752b76ef775.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64817\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"ee42d4d145995737ba8d48b4ae492854ac14db19\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65956,"size_decoded":65194,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"779bd4ecaa34e87b57fd3a28511abfe7","sha1":"fba85f301b4f22473e205f07aff557e0d553db39","sha256":"99b4ce7a8d73432d6752093fde14d3b43a954a4c217b9925143c1905e5dbd9e3","sha512":"4f372bb44c434addcc03560038a6e9406c985d8029866ade8d1133d5ec55d57001059c66215867ab568ab2dd79788531fa6d2c5508eb4366565d38d59a943792","ssdeep":"1536:MaYM3y5JGV3evNq64rg6Tq/9ttBSthnRB0U1Amv2W2QTCzdyx05saLWt:Mabyeeg2LmBVam3m/ql","tlshash":"3853028bcbcb8c46e85923b960f775d4ddbdb3ba0474c0582a40ca22fe166470a77e57","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-08-20T13:09:59.349193Z","times_seen":167,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":102,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/79d4ec49c06faed353dcf.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.561Z","timestamp":1787178416561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/79d4ec49c06faed353dcf.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7888\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"9a8cf0178db5efe135a7c1c6632d264bec334883\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8427,"size_decoded":8264,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 369x137, components 3","md5":"ec464111bf1b76e00a8a5c6449bf6605","sha1":"8fd735e8d37804ff2bf5dd51c6bb91ba1216cbac","sha256":"1f72c44d8d91d016c3b15db423cd0d155d68c22a3aa1d57cb674d61f792ff83a","sha512":"d7668b595f416dcfbdb3ba2de4ea79b179edda992e0b041d71b1da64ca98d785dc31e7ee75808ce3514f0e710bb42db7787968d0c3b4cf5bc8d908e5606d72c0","ssdeep":"192:kjRFllasoyzwJnQB4V/J2baWmUWkOX4Eru/GYz/W+x2ovmZ6:k9dasoGwWB4R8uWmU8jGLtw4","tlshash":"65029faa4b659b07e4705cb589ec0a02f3073f35a2579152c362570cab5ade64aad0ca","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.349962Z","times_seen":180,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/73cfd241e126f3ff53304.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.562Z","timestamp":1787178416562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/73cfd241e126f3ff53304.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24335\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"fbe678dace539f5db95a1cbe6a8a3d71e1a9b7e8\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26527,"size_decoded":24712,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1200x360, components 3","md5":"7f21b4087f3b5c4ee2298f00c5de1f02","sha1":"14bb4cd75a80ac6f2c093b04d649fe5845003189","sha256":"0cfc8f9f23bb792197d73d89d23d74b1bb3e7003342e7ad379a062981ce6a240","sha512":"431d981adb2c1dfe7599a0e34b27f2424e46a5e348dc0b2d50ec6835bf34c581310a9e312cc2f7ef76e1eb28202657d29d3c1c7b33bdf0c572c1bd343c3d31af","ssdeep":"768:bJVR8Rrqg0xn/gW3R0YtQTUtkneaCzZCHcQl4MXS:9Vu5qgBW3NtQTUtkPuCHb6","tlshash":"18c2d026be4437d9c0228eb50aef3ab5fc721c271b43b13d62859a693274cb3191c5e6","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.350675Z","times_seen":179,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":244,"dns":0,"connect":21,"send":0,"wait":106,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/ajax-loader.gif","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.916Z","timestamp":1787178416916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/ajax-loader.gif HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 4178\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/gif\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"1052-ehqkNhQ5Y4K7FeX95XTZzc0haY8\"\r\naccept-ranges: bytes\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\nage: 1200723\r\nx-served-by: cache-fra-eddf8230209-FRA, cache-bma-essb1270038-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4178,"size_decoded":4901,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-08-20T13:09:59.341774Z","times_seen":46216,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css","fqdn":"code.ionicframework.com","domain":"ionicframework.com","tld":"com"},"ip":{"addr":"104.26.7.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.514Z","timestamp":1787178416514,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ionicframework.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Aug 2026 19:24:20 GMT","end":"Tue, 17 Nov 2026 20:24:01 GMT"},"fingerprint":{"sha1":"80:19:D8:DD:90:6C:47:F8:53:12:C8:88:A9:17:71:FF:23:B1:32:F8","sha256":"D3:60:E2:DF:93:8D:71:87:A0:17:8A:AF:96:E0:1B:C9:4F:1E:5D:2C:7D:64:A8:2F:F9:FC:65:42:01:B2:96:C8"}}},"request":{"raw":"GET /ionicons/2.0.1/css/ionicons.min.css HTTP/1.1\r\nHost: code.ionicframework.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 15 Oct 2025 14:38:53 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"68efb1fd-c854\"\r\nexpires: Wed, 29 Jul 2026 11:26:37 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: C8E6:DE0E3:27ABB94:27DF9D5:6A69E115\r\naccept-ranges: bytes\r\nage: 1794090\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1785368372.625781,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b33e4b15b60afe78738b3229cbf72ef9b6704a87\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self'; script-src 'self' *.ionicframework.com ionicframework.com; style-src 'self' *.ionicframework.com ionicframework.com;\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akxSXNbalj%2BRpJ33OxZtyH6SrkTM8FKqn0JmVgHoRUn7WfyjAWk0zY0C2ISts%2FGM25DcjgOLsQlOwQUasQisHoRBfTxd9RNKnfpzHah95xtbr4B9JLY8M0frDb6oXvwsVqJO1SiJZaj3\"}]}\r\ncf-ray: a2dc952f8a8ce4cd-RIX\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8313\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":51284,"size_decoded":9684,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (50802)","md5":"aed7997754b0bd942995126653dfc81d","sha1":"89568702c732f4c0b629e068f56bc3812cf5f5a2","sha256":"95d37d2b4f6dc57aca2141a52aafe6e34fb6cac97983f8205c7befd824c62d42","sha512":"e79677cd4bed1609de5ad33c5a6e09e223f33e0d1835e300416382bdcea7e984cfe0c28ac268d41cb311b2ed0717747e4e98740b98e0c21e5f409e3652238541","ssdeep":"384:R48wBhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:R4jhhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"ef33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-04-07T10:41:49.428708Z","last_seen":"2026-08-20T13:09:59.337907Z","times_seen":5901,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":3,"connect":37,"send":0,"wait":27,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/f214ca8c116e23a945567.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.551Z","timestamp":1787178416551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/f214ca8c116e23a945567.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68792\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"8a479848450c822dbc87dff62a11663499ec68e2\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70504,"size_decoded":69169,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"fda3ca154c19eb648b3108a76b57b2f1","sha1":"bbf3c849ae2cf321321e5cedfc450d59589f3678","sha256":"58aadf1b3132da1d9d941fb9d7690aef3560196ca5743d5700b00137cdb6d581","sha512":"7377d60a42f4d624bc9bbcd45b40154369763951ce3a059051100bde78f530b096564c59a239a3034100d7fe22990e9709558ba314296203460b4e83cb158c82","ssdeep":"1536:KkPwMrxkciBon5neOZ68Od1OSZ17YWzcxM:nPwMrxkjhD8mNZ1hF","tlshash":"c563027e46b9f916c00f44f3bdd92736bb06c51861428b5d194dada0af4031dbfb896c","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.347088Z","times_seen":180,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":246,"dns":0,"connect":21,"send":0,"wait":108,"receive":15,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/ff817316449f76e14fb2c.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.553Z","timestamp":1787178416553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/ff817316449f76e14fb2c.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31095\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"4dddc8e58f78918954ab00811adbd7b9e435738f\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32297,"size_decoded":31472,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 767x400, components 3","md5":"dbbdbc43caf6711d00d7ac9928c59d9b","sha1":"11df2b0495a13f3ddfccc1b1ef99a5d4d6208293","sha256":"ddcdeb52e267f261ad7ca437499a9ea6d79787b9ee3626853a62ec45b404f28b","sha512":"a077ab75674407b35fb857b8558da4c5fa67c639d00ca58f4b8548ac90e9e2212bb581509476c5af7a2845a60ee70d9507d06dc76e0b9228f8e197e5843537b9","ssdeep":"768:amrbOo+hnSm7RgEGtsswziGBXrVxTcIgO3Ib4meFVy:amrp+JfaDtsswuGBXxxgQ3kxe7y","tlshash":"14e2d021cfadc3a6c197a63270c12dc4f7047d29d3f6d74a32a46a7123992f1c52a6db","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.343519Z","times_seen":172,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":246,"dns":0,"connect":22,"send":0,"wait":106,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/08d026a96c972a8c29acf.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.555Z","timestamp":1787178416555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/08d026a96c972a8c29acf.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47463\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"05afce711a5e840134c5a528c68f735befde2342\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49847,"size_decoded":47840,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"40af6ab1ffeb7242b07fd40aa4face2b","sha1":"7dc8a44a889f90eba9818e9b71af05239f502035","sha256":"4a6eb4fe97b203347d9ce38a21bfd704141488a075e8a17e57e3e0ab53be929a","sha512":"e43d82291e12dfe3f6ba88dac064bb1db8ef1d6ea3c6d9d38a8123dfdf2c950aa2c21a0385e5d6e75a772cde31e489a5b904df34b6115c63e86ecd88581c6e71","ssdeep":"1536:/pUjK7ao+4ZOV4rU7WVKPlsOqPGF1C4f7WPK+:xayPrqKOqZ4fKK+","tlshash":"bd23e0e5864d8ebdf179af7f49e24216e6713c90a79308f762c010390370fa25cd26ab","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.348756Z","times_seen":171,"resource_available":false,"data":null}},"time_used":374,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":61,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/6851b7eed19e0048a18b9.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.564Z","timestamp":1787178416564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/6851b7eed19e0048a18b9.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10463\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"a0035bab37369d0098be047e8f4f77fb5a125d3d\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11193,"size_decoded":10840,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x138, components 3","md5":"67b95924413ffeb603127fa60fda5980","sha1":"f28340953ec6245692d3b12f3bf164db9e913a88","sha256":"936085de6da0b583376394b821a6ce7bf86baff72711ad8a020d32f92a78e48e","sha512":"9f9575c876c4394a0888172c213d5edb415bb0c1e552fa89ebe3c9203fce47a3a9c0eaf37d6c317b9490d84679447b75e1ec861e75d8368c6db9b45ca991de0b","ssdeep":"192:kjREeGvdVWYpCpCpGZl8tSFRlQ0lqKPEZTWCrjAGXK7WWK5kqDWj:k9EeGvdoYpCpCpg/XCTWC2qOqDWj","tlshash":"36329eb09734dfa1cc06893b60ed40fccd747b739acad867f94422a42bd315826754d9","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-08-20T13:09:59.351299Z","times_seen":180,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:57.021Z","timestamp":1787178417021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 11540\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 02:13:18 GMT\r\nexpires: Thu, 19 Aug 2027 02:13:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 72819\r\nlast-modified: Sun, 15 Sep 2019 17:10:09 GMT\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11540,"size_decoded":12356,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"45525a4e10b53535c2f0a134aec2d0fe","sha1":"8689b23fb445fab7c8f3f92f91eb8606a5a51959","sha256":"0546f98f9019a3d2afbe9372ba08aba895e2aa716bd0fec8e78ff5879162f134","sha512":"9065c80f6d41caf354ab957f724ab2e3102fb1bedddfa9503d76f2c19c418695ecfbcba1d54be82359b2341b242d746510241fa6910b1dd4f20c727b63845311","ssdeep":"192:I1PWG4+OxCPAq2CWPfxoZ3s3G2fJOz3PZ8IrfD45R:IlF/OxCP/2BFtwrR8Ir745R","tlshash":"c6326b6bff43a122cd08d336ddeb56183b3355ad815c0582d78d426094ab7a7eeae4c0","first_seen":"2023-07-12T15:04:13Z","last_seen":"2026-08-20T13:09:59.352599Z","times_seen":2188,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":18,"receive":2,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dana.id/favicon.ico","fqdn":"www.dana.id","domain":"dana.id","tld":"id"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:57.022Z","timestamp":1787178417022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dana.id","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 15 Jul 2026 00:00:00 GMT","end":"Fri, 29 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2B:09:DF:65:C5:C2:AE:1E:37:FB:FE:04:C5:5C:5D:79:7F:47:71:54","sha256":"54:44:D6:93:35:83:3C:E3:B1:36:6A:38:16:28:12:CE:AB:4A:EA:22:66:7A:DA:EC:C3:11:7B:1B:FF:0E:09:89"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.dana.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 11 Apr 2023 09:54:24 GMT\r\netag: \"64352e50-18c5f\"\r\nx-ua-compatible: IE=Edge\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\ncontent-length: 4296\r\ncache-control: public, no-transform, max-age=5731497\r\ndate: Wed, 19 Aug 2026 22:26:57 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1787178417054_388255029_503842912_48_23186_3_67_21\";dur=1\r\nalt-svc: h3=\":443\"; ma=93600\r\nakamai-grn: 0.354d2417.1787178417.1e080860\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101471,"size_decoded":4881,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"8f1bac7ae69451bdf9c44b09577cf28c","sha1":"4fe47a2d13f8b8bdf5966dc6c4e9e245b00e91c1","sha256":"8cd0ee2909907b3b0f78d1fd1e7223e2ecc90069261768d98c4b8c7cbee0f9f5","sha512":"7a33d5879926c4bc7e69f66eebca9e0e5a1ba1dc04d5fb4b058acf0ae20e2f18693c423fb9b3f19433a940cd3180d2eecaed4ae1bb60e84ca5e0383bfc6a1a9a","ssdeep":"384:wsa0333K///bggnggnggnggPgg/gg/gg/gg3HabzXDbHG7FHWJ:wX0333K///THabjGpHi","tlshash":"74a36192f109c25ee17c5471be00c2e4f1a2fc67e855cc2eb8da772e5db1e88ca25617","first_seen":"2023-05-23T04:54:26Z","last_seen":"2026-08-20T13:09:59.337117Z","times_seen":1561,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":29,"connect":3,"send":0,"wait":28,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.522Z","timestamp":1787178416522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://indonnsiax-llyandnaz.gocernoe.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.2.0-beta1\r\nx-jsd-version-type: version\r\netag: W/\"2f3f9-YnOsGiPXmhIvAi9qh8W3XCz6/Do\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\nage: 2024501\r\nx-served-by: cache-fra-etou8220069-FRA, cache-bma-essb1270033-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 28778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193529,"size_decoded":29565,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"6d9c6fda1e7087224431cc8068bb998f","sha1":"6273ac1a23d79a122f022f6a87c5b75c2cfafc3a","sha256":"fb1763b59f9f5764294b5af9fa5250835ae608282fe6f2f2213a5952aacf1fbf","sha512":"a3f321a113d52c4c71663085541b26d7b3e4ced9339a1ec3a7c93bff726bb4d087874010e3cf64c297c0ddd3d21f32837bc602b848715eadd8ef579bfe8e9a9a","ssdeep":"1536:xtGMGH2K5wlP7WIgHf73Z6LsKkVkpz600I4lp:xtGMZvkVkpz600I4lp","tlshash":"be1482d6f190303d98a7c2499591fefd866fa585d7024aaaf0137b6847ca7c30963ecc","first_seen":"2023-04-06T08:38:45Z","last_seen":"2026-08-20T13:09:59.345317Z","times_seen":4824,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":11,"send":0,"wait":11,"receive":37,"ssl":245},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.542Z","timestamp":1787178416542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOPGdqe5xEuLh2jfaZq%2FzlBfhZYyI6ZxOMLf9ZwNBblsxqlhfLRjpsquB1cYk0byOSJv%2BSwCXymIykGEZekjM1dqp%2FUriD9XIyAyUxx6XMaWS7i61hPKez7yc8vBgAw7diYwDPBk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2dc952f8b8f0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":28963,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-20T13:31:32.139807Z","times_seen":267928,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/be0c88ba14ca044776e1c.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://indonnsiax-llyandnaz.gocernoe.com/","date":"2026-08-19T22:26:56.549Z","timestamp":1787178416549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/be0c88ba14ca044776e1c.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://indonnsiax-llyandnaz.gocernoe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Wed, 19 Aug 2026 22:26:56 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35862\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Thu, 20 Aug 2026 01:26:56 GMT\r\netag: \"0eaeb478858ca529e1bcc7b41201a60565cb5259\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37724,"size_decoded":36239,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 669x286, components 3","md5":"41b022c125311aab691ffc19ccfc3286","sha1":"f73662c40dce4b9917037e9981c56cc0c9abc6fc","sha256":"543191cf2c750cd2a358f15ed391e3912f55a40cc81e04ea78e7719b02210f54","sha512":"029ea90159047e0b526c81ff1d10b9606aa4a23ec24924655f8553750af65e6c59d50a0df4209651c7ce4529421a702d5dd4b14a87ff87c5be1e7fe5bee71053","ssdeep":"768:0bGmGE46bzvxcjqF47e8PLx9J8XeB6WGb9OBJ5Mtv16KxOvq:0mN6bzJYqt8TbJ8XeB6WGZAJ5MFE6","tlshash":"fd03f14105e0c216eb9756be12a89b82d732747b25cf5bd88118bcbc0bb46e270dc9fc","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-08-20T13:09:59.335814Z","times_seen":177,"resource_available":false,"data":null}},"time_used":417,"timings":{"blocked":246,"dns":0,"connect":22,"send":0,"wait":106,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}