{"report_id":"7516782b-f418-4334-af8b-5346843a1335","version":6,"status":"done","tags":[],"date":"2025-12-21T05:14:05Z","url":{"schema":"http","addr":"wpktoto.com/","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"172.67.168.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"wpktoto.com/","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"title":"WPKTOTO - Stabil Dan Efisien Dalam Menjaga Keseimbangan Kehidupan Sehari-Hari","dom":{"size":84457,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33486)","md5":"f649b39960c9ac94a577d4c25c78ac25","sha1":"6dd8f1e4b51394dc3610091d2f83c3c5ad0cf337","sha256":"6cbe7cd623a9e96de543b343b7c095f455493d9bf0d48cec5af31cef2881cb4c","sha512":"8973ccfd812635a8b762cbf9593b3101dbd2f22ef1cea84b860f40f1d864936680970dc1104b76bfb19dc9f892280b46af9f8a9f0e9be4d29700a5b1bd27a7fd","ssdeep":"1536:2YNlO4UjDvTTwL6jKji5V9E8MawAGiAGmDHo4hdtQEARyjpGHrxb:w","tlshash":"628323a1b551103aa20ff24e64e2b79e1a21ed13c6221b99f46cabdcc7d4f9175f231c","dom_hash":"domhash1c1121fa58261e49d206e58f4019659c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wpktoto.com/","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"172.67.168.159","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-25T05:14:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"tq2tmylv9quqkoe"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"wpktoto.com","ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":37,"request_count":37,"received_data":1189230,"sent_data":16445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"cdn.ampproject.org","ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2025-12-15T04:05:26.758175Z","alert_count":0,"request_count":5,"received_data":410150,"sent_data":2186,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71618d10f7356c378595c41246fb6543","sha1":"6b75cf807b5be56d947c4599bd1d1c2735a10960","sha256":"88b28d083673fc44c0dccfa7282b2e3fd27d2b229eb65e9196329c16038337b0","sha512":"7f7678570ca06cf608fcc7c5aec6ce5698d7b9bf8d990a56cb28a0f38d11bddb0d745638f8484306d7ebf5079dc802df37d830c1269fb3feef4828124798524e","ssdeep":"96:4V9HqqXQL8e05UjvNvECpPlVyiJl4wxQYqvjVYeUEyEJXHOCXOV7:KHZQ4hGvNcCpLr/xQnxN3oV7","tlshash":"c3d1a6ecb292f0729b9774e5802f000bf93da539908bc450d614e8e569bd99e4173f3c","size":6167,"data":"","first_seen":"2025-10-21T18:06:54.960525Z","last_seen":"2026-01-06T10:11:03.411712Z","times_seen":297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71a0f3d77ab61466c52472cdafa2b5c4","sha1":"28283a80678fe0de5ee42353e362f5dc15265f85","sha256":"8ff11c4e92efd206bc49edebfbcb03aae6e3a13fbc7735302f28558a1756078b","sha512":"b357906a82fb997c00aeb1e90b0ecc0bb155b797c12549687e18757bc9d117474a765a0bfc77ee3c04772a88ab08d84b9f0f605e3da458745e698cb95ce13ba2","ssdeep":"768:wOCpyTqXz0meAZVUcDI3lwZ6HeJkjV9Mo25Totc:wYTqXz0mecVUcDIVX+J4Mkc","tlshash":"7f33b49df292b076479364b5813f600ae33f3956640f8524e06ae9c2bcbdd59a136f3c","size":51565,"data":"","first_seen":"2025-10-23T23:05:27.328069Z","last_seen":"2026-01-06T04:39:27.161306Z","times_seen":284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","size":284545,"data":"","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"36e68547fd31649fcac8856096da5e94","sha1":"cfa28bfde148c37cd6b94329ab7f8c1140625d5c","sha256":"5b870594007123f179856f463a72e0a31eb2e005acbb719cf9d56c242927547e","sha512":"3ce62d0c066399122ce7defb585fc4de3c39a02daba060cc9c03a9326e5ee8ef0f4a8d46f14e5f1f7b319944cee0d1c7c3ef2dcc08091a517f3c10b12bf46486","ssdeep":"96:+KoAosPGpz3pMDc0jxAMhG0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+Kqswz3pv0jxAyCPX/tqKyWp4M0rDTI","tlshash":"9ef196dc7ac2f83a5757b4b780af414fa23bb94624ad9120d120f4d83cb995ed623e5c","size":7812,"data":"","first_seen":"2025-10-21T18:06:54.954761Z","last_seen":"2026-01-17T06:31:39.884543Z","times_seen":1718,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wpktoto.com/assets/images/favicon.webp","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/images/favicon.webp HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6584\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:44 GMT\r\netag: \"68f8d93c-19b8\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9331\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FPY5u0V000hBktXrB2GuyCQ4KU82Os3%2BfiM3oZJcs9WeytWraiceWX%2FL48JGJ2CmlImtaPa1zQJxmDjdqlUKVmu9ofjjSIuAvg%3D%3D\"}]}\r\ncf-ray: 9b14e44b3dc7b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68ce7f35cad11ef2228f01a40afcccc2","sha1":"53d8e353da33c5ed3f39b062803f84203b4a72d3","sha256":"e2ea0959e9a2bbbb1b6654e1e1b125db76c1ec9dbb19c1dc4a35fd27332fc4c9","sha512":"0afac68858e7942b3e141e3b11d65c480e8d31dd1510f3b255e5f904af4901729465250e2cff666ce7f946ffe8d00bde44eda2f067e2d06a56f2a568965a8185","ssdeep":"192:KBhZzRnzEAe4Zp4U3/paAEHrsdBVsx2Wd4LfqcA/:KD1Rnzfn4UPpaFLstsx2W6qJ","tlshash":"aad1af45b508fb603fcb80f5716518c4f6a1ccaea116e92583089c799bf90ca6daf52d","first_seen":"2025-10-10T22:50:11.059737Z","last_seen":"2026-04-26T02:02:33.157214Z","times_seen":16,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/ww.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012510081644000/ww.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wpktoto.com/\r\nOrigin: https://wpktoto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14409\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:55:55 GMT\r\nexpires: Sun, 20 Dec 2026 10:55:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 65867\r\netag: \"c7ebbca51fd38c37\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52015,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51902)","md5":"3aaf3c1a784f5423ed8a877282ced636","sha1":"7df73392d0ddaa7f549806030bda80546477c39c","sha256":"ade1d415f9cba0274e28f1cab6363fff1fce13cd436ff67b024d506de1daff37","sha512":"f45975602f682f6ec64fb21ac46ec3620bb057c6769a274d13d6724821aba6dda4bab2e622b5b777f38a6db6291abb9adeeb6cb80b47a3de86d155a7de641801","ssdeep":"768:Rz0GxCxt+8/Qbvn5JV1wAcz7PX7ywwJtFidG6zB4B73oLfdp7UNe/KD/o4PHfG:RXEI6d4B73oLdxUY/KDpPHe","tlshash":"bb331ab8b2a6a46e824350f4406f3009e67f2d2a704ac83cf635ddd56db4d9a81b7f35","first_seen":"2025-10-23T23:05:27.453885Z","last_seen":"2026-01-06T04:39:27.124651Z","times_seen":284,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/bni.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/bni.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4464\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:40 GMT\r\netag: \"68f8d938-1170\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vXoy1tPZCe4Uu%2FOKUFcdn%2BPF%2FHeRn7da%2FnfjJc2uJhkZ9Zs6VOVsxacl8kEu3eZSKTlCnPeFANH1bYvfTWhheunr59NP2lCZmA%3D%3D\"}]}\r\ncf-ray: 9b14e44b8de0b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"b1f032008191399103a31eab3d2617d2","sha1":"888ca8a051e1456b9fb0e85dd745c52ce40e27a5","sha256":"a5b59feea1d691173ba7cdc8d6d23e5a24001b12b307402966ece9a8d6913459","sha512":"44023573463eb6340646aef894e7075510941c1ab9c73da657a2654bdfa074c31e5612577db3f4f9e117eef404a5f5d76f37c3559849ff770deaff41f2742d4a","ssdeep":"96:66QWlknNrE1KtrXp/7q2HCu2HdNG0HEyGpEGsg2AxWbZa+0Dp5MSIRXlHwqwYkim:pVkn61KRXtq2iu29zEkA6ujMSYVwqWv","tlshash":"55912908cd11f885918e99907ef4928bc77b87d01b01f855dde88a6324325b9cf9e5ce","first_seen":"2025-09-20T09:09:44.865765Z","last_seen":"2026-04-26T02:02:33.146265Z","times_seen":60,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Sbobet-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Sbobet-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 31529\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-7b29\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HI2NBeBwVAaYe3fnJ%2Ff3HL0a3hhJrQ1KRpKV91%2FYdHD25XYUbqXvd6cCrNWt4TLx9Yn%2F7MBeg9BDd9WLy19EBOUIiWriitLAug%3D%3D\"}]}\r\ncf-ray: 9b14e44b9dfeb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"94e062c70de9d22a65d75d3d0fc154a7","sha1":"af5aabb123b49f1d8b624d73c7587700f5c600bb","sha256":"2fe992d93b291845029ceba2ce248b5b91abe8f3afa97e4adfaa92a7ca74b005","sha512":"ff99e1a594bc8a56802849265927ff9cc10f31c820fda6519ce603641cf0e55cddf4cf5da33a05aa1bc3877fb30ef5c264da81a6a10703f06f425503f1b483cb","ssdeep":"768:935JPS55yO4g9W8u1JCXeLamIYnYX9mTFfqIqJSJ/mfd:lK5foLam5YX9YyZJ6od","tlshash":"72e2e06a7b40acbf258de50441dbb7684de2a0760dc22cff9e1481dd007dc89a6cb767","first_seen":"2025-04-05T02:32:22.77926Z","last_seen":"2026-04-29T05:19:27.452096Z","times_seen":123,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/images/baner.jpg","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/images/baner.jpg HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 248568\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:45 GMT\r\netag: \"68f8d93d-3caf8\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFFIZj7Alifykliral6E3FLJdMH%2Bmj0%2FVlnBOxfISeG4f9R00gdY7p3prxcAJssyXAvDfpFLCiWpCBuld2FFWoS6GEPPGnj0Ew%3D%3D\"}]}\r\ncf-ray: 9b14e44b9e02b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248568,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], progressive, precision 8, 1420x413, components 3","md5":"2a4e48d625aade1b36fc919f60c883b9","sha1":"dbbbdebbbdb08366e5ec2b6e8768104b0582d974","sha256":"a6a7500a46ab9b93a80f1801b721506e491dc8b0d9731682b7d5e73891c15e31","sha512":"d9423b5854fcafe70d2e26b885738036b03f1b18d7a58daf360ea3cf06096878bc696b5550076f6254fa361c5d15f430eb6655c83cf6fd5078ef671849230076","ssdeep":"6144:JhrBHeZrX4HZAiNdmqnFxBPvm0UFnhJnae+Km1dla:vReeZrNkqnFxBP+0Ur9+NS","tlshash":"77342221b5c02f1beb953d71c20658498ba7adf25b73477b6c13984ae23afc2604f59c","first_seen":"2025-12-21T02:24:38.368078Z","last_seen":"2025-12-21T05:14:12.636165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/bca.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/bca.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4467\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:40 GMT\r\netag: \"68f8d938-1173\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VjwtN0cMoRSZ2CJK9KbcAuUt8rE8SrWb7OBVrmhkS2s5sD4SfucouupAex2CnNEJAc5CBKpc%2B3cFKuWci%2F687IdHJmTKs7w3JQ%3D%3D\"}]}\r\ncf-ray: 9b14e44b8dddb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"dc4887c00d6675be6825d5dfd3f8cdd3","sha1":"790ee526a8609b466bb248a55e6fd9002dc1bf93","sha256":"3cef61d7e6292f7a60afd294b87f8e8afc1c1224b602090d77380b734420b893","sha512":"6c0a1bfd33a36c67f049b71ee3c495d4299aa5ab31a4c7459c186203a7ae0c5a80a5d9348b7a8a419213f05f490c8e1c7cf8d37ea8fd7cdcfba00ab9adcdc98e","ssdeep":"96:C6knmWIr17/B13cmHCAHVb+1E7clG+kadwXieU8nKRkIv6NqnWfu3Q:C6knQwmiAx+1acQT/Xi7EovfnWfL","tlshash":"7b915b8cfd00bc63424d6798f9e8331796634ba158c0d592fd8a2913d8f4af6ce4d1e5","first_seen":"2025-09-20T09:09:44.88207Z","last_seen":"2026-04-26T02:02:33.114861Z","times_seen":60,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/btpn.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/btpn.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4056\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:41 GMT\r\netag: \"68f8d939-fd8\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=26UTdwEAvZJ0Ti%2F%2BCOhddWIyVR2vLtSkKPCrpLzSwcT4%2FaG8%2BoZU4xGUNkC7PL3SDg7wJ9foeFlaeFnZg%2Ficz%2BgZdAzRMfZUvw%3D%3D\"}]}\r\ncf-ray: 9b14e44b8de5b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"0d453178104f034dcc7da0a5a2e5909e","sha1":"0a0a81812a044108e47e22a65307f2275d849ba3","sha256":"21f8389d856180807d7124ceace775f3d7513af9ebbf97e93807d267ade9a8ff","sha512":"85c6174cb881a18b9631e08c40948899c18737551db1e68349b77f8e9444557b227d984ae2e7ac6108a78ec7751138ea2b3ced0d80911c1382b7203e6733fd67","ssdeep":"","tlshash":"64814c19ae466c49a44c5a682cfd41db6227c78486c0a6767fce4d234c741fe8e09ce3","first_seen":"2025-09-20T09:09:44.873759Z","last_seen":"2026-04-26T02:02:33.158535Z","times_seen":60,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/S128-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/S128-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 37945\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-9439\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cf65aoPuS1mnqTTNeNoF7QohHBOSI8WPcNlJ1S%2FwemH93tlXHyUF7Crfa3IgsdCcfaYuC7O7yEZpjAG%2Fhg9YPC%2FmIwTmxizJZQ%3D%3D\"}]}\r\ncf-ray: 9b14e44b9deeb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"b40aadb6cb9baa471a3f5fc3a0142934","sha1":"6c99f7c4d1a63d7f2984701f2a768924c735116e","sha256":"90668d1fad3de37e0aed195a3efd0649a2eb8387eb7c15a2244d4e550843a67c","sha512":"3c6a58d44a387c0ac9b484a65a10dc6ca4218306d1c2b3cc57b66a828077c009386ef80f4410671784934fb488eebf4153037722f7029396b7edf5bd0bc334f8","ssdeep":"768:935UqaSMJKV8xJwzRcNPkcH2nJKeBD54N6b55HqdvW:Aq2KV8xOVcKTKC5bp","tlshash":"ee03f24e4c694729256bf428e9f4ab543a3d31513e6a362b7067b3fa086e447ccf0477","first_seen":"2025-04-05T02:32:22.754459Z","last_seen":"2026-04-29T05:19:27.46971Z","times_seen":123,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Fafa-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Fafa-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 51936\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:42 GMT\r\netag: \"68f8d93a-cae0\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSvFhc%2Bz6tC2GJJlgiUKdCqeJfHGkCu%2Bj0bT4bcuSQ3AvwAtUJStzaC%2FEnS8%2FIrpSjmbB%2FtBAMPXGfEzIE7ViMohGNsgtpnqsg%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df6b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"ebbe3e3380fec9c908895c12e7dd1144","sha1":"dabf4375987df0366b8e89be14880db5b13586d7","sha256":"5e7ba9dda4861a335f8d96db61b0c56db707aaf6aba5795f3c0f85b55b0e9264","sha512":"b21afdd7212633bf4accd2d0b12beaa3e34ae456252da3e53085534fb729194fa89e754f7b3e1af9e6149692593b5342b124de820190e91d7d4720fa99f36329","ssdeep":"1536:cEbcDlrFfLUMNjBViDnGbT3ZTB8EPrkDDoE10:z8dUsXbTFBZPocf","tlshash":"9a33020d2e30e52a9d4cba0b657f2a1bdd0847f2115111ff9dfc6b4e2486792f2b416b","first_seen":"2025-04-05T02:32:22.766069Z","last_seen":"2026-04-29T05:19:27.478324Z","times_seen":123,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Play1628-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Play1628-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 37804\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-93ac\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DLp6JNNnPYiA5RFbKqOiShuzMzMLMyYobYusI2ZhD94SQMlqvPiWHmsMUgIpbOGrjucLkR0x0gtzqM0UtcRPHFkUvvcChgF1qw%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df5b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"711248d9e69e793f320d23d7fb4c9f5d","sha1":"51894fe77618a829f9612ddfe805f53fa3ce90a1","sha256":"ea067a8952c6bd5448c2f09fccb096f6ad7fa08c55f28e919b9764b02e69b0f1","sha512":"e340fa08f93ca0639c44456e730539eaa3fb13755e7de3d1cb8e4d42e61890f11188bd0606f0cd0818347bd4458f98292a75824d67f41e8381be88e4bc9ba31d","ssdeep":"768:935e47PEwwNaJufZJYWfp9qR7lGatYj57gmF4MzNAGwbdejg2RZI:a44HoAfZJhPqR7lGatYd7JyMzNAXdej+","tlshash":"780302ae8ad0410e7968af5c475e890957ee753d87f3e424340e38cdd9a2c872fbe059","first_seen":"2025-04-05T02:32:22.77181Z","last_seen":"2026-04-29T05:19:27.470309Z","times_seen":123,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Pragmatic-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Pragmatic-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 20377\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-4f99\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jXvQbBP2w2K7tsz%2Bqur3rcHYPebS16TGz7q6CMnlSccoGH3ULIIcG3lkXTn0qg9oPzjkGr8O9j2CbNlT4lX%2FWog5T%2BEdWWF2XQ%3D%3D\"}]}\r\ncf-ray: 9b14e44b9dfbb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20377,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"ebb483900e50a6659f1405cb37c657f2","sha1":"6ea57b2a5e26ed31abbafe980f2ff39463bcd184","sha256":"a88e693ee9de590d4ede73ee642821aab822b500015e8634fe51183bbdaed289","sha512":"cfc5fe0753984c7459f3b10ebf976d65656db954c9e299f6f6def72e6a09a0be63fce50a9ad8c378ef7592a10efc962295b4c3c6b57a07466483a6ab233315c5","ssdeep":"384:/JXE05ro3boN187afCVOOg9DdkB7c65z8AjIqADiA6aJ8JtUWoLfhO:935sLmS7afIhgBeB73MqCiA6aJu/o1O","tlshash":"5992e1d5cea81c9dab5ee5c04ede6601265510b8d6092ab4f0d207c37b5384fe33f5e6","first_seen":"2025-04-05T02:32:22.781299Z","last_seen":"2026-04-29T05:19:27.470969Z","times_seen":123,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/AsiaGaming-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/AsiaGaming-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 23429\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:42 GMT\r\netag: \"68f8d93a-5b85\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=28Z%2B%2F38UFELI4ruDmSN0t%2Bm5sRTL7anfkswFW7f2ziHS%2BY717RCxTM9o4ihbB2%2F3JPmy7BubcFuyB1X1UDU7MBwZsUtvn3l15w%3D%3D\"}]}\r\ncf-ray: 9b14e44b9e01b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23429,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"30be19d9d6592bdc7d2558a969528835","sha1":"feeb881540c9b9f07e2dba85bb7e8d6b855f7ee1","sha256":"5e026de618404a21c0e799fb659dc5f358c2353697d689cfadd08b42388f6030","sha512":"77ebeb7b2c0b3f749dcabf60fe9669eeaee35508d92410510476352e369a2eeb174290fbada77ba68712f59cdd5b587921c2f1c12426df477d5f76d62ea88cac","ssdeep":"384:/JXE05IuX6gLCG9lV8xrUOmLT+sVxPlVmDA3re7dAx07lz3zVzSrQ:935IuXNL9lV8dDqiUsDxdSelzxSc","tlshash":"e1b2d0b8d172913beabc902a1f99118e414587ddbb03e15580f8f9eb117dd4e9b2c3b4","first_seen":"2025-04-05T02:32:22.784898Z","last_seen":"2026-04-29T05:19:27.453647Z","times_seen":123,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/mandiri.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/mandiri.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4491\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:41 GMT\r\netag: \"68f8d939-118b\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lIPD4s2A%2F23pv%2BpqD2nMitG9eBLguKhuuTkeT5ZZ3uNYZJ4jLjT1hFKpJB%2F1xM9xKPsAvolJo840JONo%2BwZw98SHT5k1Lu0GA%3D%3D\"}]}\r\ncf-ray: 9b14e44b8de1b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"2eea8a3963c2767d4d09840534a2799b","sha1":"38e1cebe6eb3c09a0725d07b78006c5eeccd74f4","sha256":"4c99a31914e931bd562cf1bc5dac722e2f44b25ea7119933b70a638028d75211","sha512":"d49b38328cdfa091e836e5e6d1a9d2aae121e1cef89e2989fb8d98e7b929ca514ccde050e775171eb1b1f4f2115de53265a5c08c8d04ab6b4f4083b235f53d46","ssdeep":"96:avknmWprpktB5/VoHC5oHVOpD6tis/bR8OYEyMGJQAV1R48gx:avknxktxoi5oYwis/bRZXy7XrRG","tlshash":"08914ccdb451e881be4ca94415d6c20adb6757d05ad2f4e0eecc8d5a28415fecd4d3c2","first_seen":"2025-09-20T09:09:44.849298Z","last_seen":"2026-04-26T02:02:33.11638Z","times_seen":60,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/rtv/012510081644000/v0/amp-auto-lightbox-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /rtv/012510081644000/v0/amp-auto-lightbox-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://wpktoto.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2976\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:39:10 GMT\r\nexpires: Sun, 20 Dec 2026 10:39:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 66872\r\netag: \"9215b9e0dcad338a\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7812,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7690)","md5":"36e68547fd31649fcac8856096da5e94","sha1":"cfa28bfde148c37cd6b94329ab7f8c1140625d5c","sha256":"5b870594007123f179856f463a72e0a31eb2e005acbb719cf9d56c242927547e","sha512":"3ce62d0c066399122ce7defb585fc4de3c39a02daba060cc9c03a9326e5ee8ef0f4a8d46f14e5f1f7b319944cee0d1c7c3ef2dcc08091a517f3c10b12bf46486","ssdeep":"96:+KoAosPGpz3pMDc0jxAMhG0mj1hVXxSZ4tqSKN0OV0TjLRkiGj0ldmq43bDjHI:+Kqswz3pv0jxAyCPX/tqKyWp4M0rDTI","tlshash":"9ef196dc7ac2f83a5757b4b780af414fa23bb94624ad9120d120f4d83cb995ed623e5c","first_seen":"2025-10-21T18:06:54.954761Z","last_seen":"2026-01-17T06:31:39.884543Z","times_seen":1718,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 73132\r\ndate: Sun, 21 Dec 2025 05:13:42 GMT\r\nexpires: Sun, 21 Dec 2025 05:13:42 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"b52f38ef99ad402e\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":284545,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64627)","md5":"8059fb84783c3f43b7b5b66a3883bcb6","sha1":"335cfb79c7c772225bc9a0a0d17d5d435e30a247","sha256":"977e140b62a9228c0815a6ce26e63df7def2817315581cb3e29c52a9d5959754","sha512":"2a0c05b24ac683756cc15e857c5445e62aa1f00134e8fa0f0c966510b1ec778a4570ab2c09dd2791a8a769f36c64a304fc816228fb54367af99657f3c49bb385","ssdeep":"3072:j4UQbNOu6mF8g8aLymSt85Li48lnQYxQEnswf2l3sVsmgQ:j4UQbNOu6mFTLs8f8lnQebsw+l3sVsg","tlshash":"db54839db296b0764793b074803f150aa33ba855240a812cf56de9d67cbcd8ea137f7c","first_seen":"2025-10-21T18:06:54.94219Z","last_seen":"2026-01-06T14:38:02.926695Z","times_seen":1886,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":62,"dns":3,"connect":8,"send":0,"wait":21,"receive":21,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-bind-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-bind-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 16378\r\ndate: Sun, 21 Dec 2025 05:13:42 GMT\r\nexpires: Sun, 21 Dec 2025 05:13:42 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"09136aec911a07f6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51565,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51442)","md5":"71a0f3d77ab61466c52472cdafa2b5c4","sha1":"28283a80678fe0de5ee42353e362f5dc15265f85","sha256":"8ff11c4e92efd206bc49edebfbcb03aae6e3a13fbc7735302f28558a1756078b","sha512":"b357906a82fb997c00aeb1e90b0ecc0bb155b797c12549687e18757bc9d117474a765a0bfc77ee3c04772a88ab08d84b9f0f605e3da458745e698cb95ce13ba2","ssdeep":"768:wOCpyTqXz0meAZVUcDI3lwZ6HeJkjV9Mo25Totc:wYTqXz0mecVUcDIVX+J4Mkc","tlshash":"7f33b49df292b076479364b5813f600ae33f3956640f8524e06ae9c2bcbdd59a136f3c","first_seen":"2025-10-23T23:05:27.328069Z","last_seen":"2026-01-06T04:39:27.161306Z","times_seen":284,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":59,"dns":4,"connect":8,"send":0,"wait":20,"receive":2,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-21T05:13:42.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Dec 2025 07:34:29 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIjrnOY3mnY2ydx0WHqvUvAq62qecj8HlvPEDFJc2cmKimxFmif86a%2FxxrXJIwJNGpwmpXi6QFtoFC%2BPObqTAxvSBDmd5x%2F1Vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b14e4480ce9b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57199,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33483)","md5":"60eaecf4480bb9b9620fcbb0b3ab4d11","sha1":"fd27e25f8193d06eaeaa799ec7f94bab7be46965","sha256":"4acc4f0cbc1685a5b74975ae405baf395c181d7b7385075cb93b8afdbb0b6052","sha512":"e5bf000b14083b05cf04de891726edc9bd9056ca6494899a654bab8b1f9b4bc2f26e159dad35a8f2b8c6612ce4df9885dee3e7d375aa29ba1e30c33758461153","ssdeep":"384:PY/+5ZNyLEOdWUjDvTTsftL6j+zvHBnRwwkdtTW0Kozh9KexoxlOnP/7gHoCjd3G:PYW7NkEOdWUjDvTTslL6jKvHBnGfmG","tlshash":"df43ddf5aa501035a34be04e78a3768c2721fd23d607595af17cb1accbe9fa164e231d","first_seen":"2025-12-21T05:14:12.655455Z","last_seen":"2025-12-21T05:14:12.655455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":16,"dns":2,"connect":3,"send":0,"wait":206,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/maybank.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/maybank.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4841\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:41 GMT\r\netag: \"68f8d939-12e9\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v2sIieuB8ZSK%2FzQYVgkSWAPsrOwslbGiVeflUhJHBcBsHc1o5q2%2BjozSUhwOGOuAmb8%2F4y9FIG9QHBc0ICHEElsTvGpy0U55UA%3D%3D\"}]}\r\ncf-ray: 9b14e44b8deab4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"27525c7a6f182987139011372286e682","sha1":"aef14d7598bb453e5c8fe3ac1511b49a8735448c","sha256":"410abe856123df4d9d0a7b1eed339c922a033d3b376e57bcd5b45980e118471d","sha512":"4c08fea01685a895fd8b97a4d39e9f2e1bb1bae62495bc25645be6a740e0e99a54e895089be62e69904a003c8f7b609bff719caa87822014ce2f3a3478446049","ssdeep":"96:C6knmWIr1IyJ/GQemHCo5HVQ18wuUxIMd8aN/aoVLMb1uc8XGQbskBDb:C6knQIy6mio56hVDmk/fA1u+Q4kB/","tlshash":"13a13a86b671b800505ef5faacc79347b693cbc1a6c0f144bcd8089374612b6c80c6d6","first_seen":"2025-09-20T09:09:44.862371Z","last_seen":"2026-04-26T02:02:33.160876Z","times_seen":60,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Habanero-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Habanero-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 11804\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:42 GMT\r\netag: \"68f8d93a-2e1c\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oRLLCvy7Q2wpnxNZAuHUeVxcyjA5%2FSWYxT7gUeYW%2FumtpDYdd8Zf7pso%2F3kRYlLGHONXYgGDY3RtU4CnCimrHrAk%2ByGlWZE8ew%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df3b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"8846cb03166fad0d5346ac086f8ca018","sha1":"0b37da77119fd6f130d7fecae7e719de5c1cf651","sha256":"50d36375b9bed180ad5e9fb77e0c145ee08535f550b433b7a7b9e30c1c4dfa9e","sha512":"18f43207c01568e1c714c0373429fd0cfcddeaced905d1c13c4d6a7ab23c211a7f32822bd1549c5563a1eb41928ae99a9b815364975ee2a4e237e1dbd906cd56","ssdeep":"192:4SDS0tKg9E05Tpr0Osl3w1hsdMnADnlkI3WGz9lkaRc2gSntGY97MVreE:/JXE05+Osybd4lkwW8sttStLGreE","tlshash":"88329e9a2e30e609d14b32a20c9eb9194f31216c59c2fe7d8e4631ce6391d17e6bdcb5","first_seen":"2025-04-05T02:32:22.768808Z","last_seen":"2026-04-29T05:19:27.452929Z","times_seen":123,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/PGsoft-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/PGsoft-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 22320\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-5730\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4VpgHoB6v%2FHZ3FpVH1ItrsPJWVmOC4a9XhFm4s5JXotOEBN82tL5yNb0evya2WwZHcBi8aBVmOzwUqjPHYJkkZ1tdcGVjoeBA%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df8b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22320,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"114ce584fa39185579555aa9a287733f","sha1":"8f091a76f68abd1331ac3d74570e8d52824386de","sha256":"3693e0c4d343d99bf18d4a289c21e35df7387f83765eff24ec7feee8d48042d7","sha512":"828f8d3201a84d05e0918f841d9d7d1f6b39c5dca4c401af8aa443c03a8763a2bc31b508a60f00bd24560af2f551111f486ed3f2636506aabbe6d904156f6d4a","ssdeep":"384:/JXE05FRU5ZmeYzMQt/EMnVk49TYB0CM/R/HzZr+8wGQzxpjS+G7JAvyAk0VvE9:935MK/EMnKVuCMxlrZHum7JAvyAB6","tlshash":"a3a2e066e1b0744f6dcc6443a9a17ce0fbc0969f88ca7235d23504cbe02bfa52f50096","first_seen":"2025-04-05T02:32:22.787593Z","last_seen":"2026-04-29T05:19:27.473398Z","times_seen":123,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/images/jackpot.gif","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/images/jackpot.gif HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 207700\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:45 GMT\r\netag: \"68f8d93d-32b54\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EeDlmJ%2FBDPkHFkPyx6ITvBt3wte4MDovxHAq8WEFh0C82j%2FXhGQo3PcsY%2BikU6UjwFJu%2FdYJdgKvMIysZ%2BiOIVOnK746Q1EXBQ%3D%3D\"}]}\r\ncf-ray: 9b14e44bae05b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207700,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1310 x 342","md5":"ee849d479cec8befe771d2facc78dade","sha1":"d46502e9b93eb2999f41788ca19a641123e9c80e","sha256":"ba09ae107a7cbecaa8f9758048c06e01b9902491ccb0e5e1494b4b495d26c685","sha512":"62fa75ffa212f2d6ba95e8912a370a96bca957cfd6634ccf7dd31c2c75282ec4fef184c3e33512272a6c28a2ba9dbea94fa4f7862114a45148125a80dd1b3008","ssdeep":"3072:b/5Q+V539+nKW8DQ0u7/IeSQH3my9/7AaowfNEWi94ZfiSHJggrqrtfe30YTZIC9:7P5LXQ0u7JH3mgIANEW9hz/rq5fe3leu","tlshash":"8514128b574f652ba6aa4c7136c49f0eaa8776f16e60c5e30f40ae4fa993f1d3753010","first_seen":"2025-06-14T13:11:03.966699Z","last_seen":"2026-04-28T13:54:44.441804Z","times_seen":87,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/chat-comment-conversation.svg","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/chat-comment-conversation.svg HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f8d93a-75c\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6nHbZiUiGjoz7coaOejRbfsF9rSc2ID0eMfYBACrkHe%2FVxQXnDG8L2bBIarwhy6E16oe8CaY1JsMUtqaNIDpRosJmVXOf3emA%3D%3D\"}]}\r\ncf-ray: 9b14e449cd68b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1884,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e26812ebf9beda910b5f4b803aee3d1","sha1":"1a07cc706708bb48fccf700cf69dd76741946c9e","sha256":"c408a0319f120031df88c41aef44b396d0eb03d505adab858b67b13253c80f4c","sha512":"512ef42e69fe49d613ff99c74cec234e7c4a516b364a6833f382dd76d33eacc1323941c3c8661852a0f30f89e0ae71b77f79bcc136756c1649bfd931d3203024","ssdeep":"","tlshash":"ee41ff95823ed22a5453cb30b1e59091e773c2cecf80b19072d54d4edb5e8b70766be6","first_seen":"2024-08-19T21:07:38.647134Z","last_seen":"2026-04-29T05:19:27.450336Z","times_seen":138,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/images/favicon.webp","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/images/favicon.webp HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6584\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:44 GMT\r\netag: \"68f8d93c-19b8\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76uALPA0dMsrf%2FvhCo%2FHWwcHRMdXnUFExlzxX4wiUwC0qfuIettKkLgM8%2Fjh3lElwjyzuPaZVGRDYYp2gTo5l8XC9qvbou9mAg%3D%3D\"}]}\r\ncf-ray: 9b14e44b3dc8b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6584,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68ce7f35cad11ef2228f01a40afcccc2","sha1":"53d8e353da33c5ed3f39b062803f84203b4a72d3","sha256":"e2ea0959e9a2bbbb1b6654e1e1b125db76c1ec9dbb19c1dc4a35fd27332fc4c9","sha512":"0afac68858e7942b3e141e3b11d65c480e8d31dd1510f3b255e5f904af4901729465250e2cff666ce7f946ffe8d00bde44eda2f067e2d06a56f2a568965a8185","ssdeep":"192:KBhZzRnzEAe4Zp4U3/paAEHrsdBVsx2Wd4LfqcA/:KD1Rnzfn4UPpaFLstsx2W6qJ","tlshash":"aad1af45b508fb603fcb80f5716518c4f6a1ccaea116e92583089c799bf90ca6daf52d","first_seen":"2025-10-10T22:50:11.059737Z","last_seen":"2026-04-26T02:02:33.157214Z","times_seen":16,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/images/logo.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 13185\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:45 GMT\r\netag: \"68f8d93d-3381\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E7QQLY4tQiAAYDtVNDwd%2F%2FgtsqxQEct73rs2R6L5JA%2FpzV%2BrFlvSn9UWvBHIp6EuM%2FLGs6FAPndh0fuwM5CjdD2OKa%2Bul%2FDOng%3D%3D\"}]}\r\ncf-ray: 9b14e44b7ddbb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13185,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 60, 8-bit/color RGBA, non-interlaced","md5":"1b4e3d925f3e3fcc9a7deb3e383f7af1","sha1":"d1eb0e4e964e9f63a3a70a85c75626cba56e1579","sha256":"15ab3a9e14d706f2f129ba5cdf155bd9922f28078631d7465c8b70bb4706ea79","sha512":"e42b9c19574d79c36f9150740819787edd8d45cd4d7b9a96a1a113bd77ae4eea351ff313724ad9fde817dcdf4f7d63649a986823ec749a10ec0827de3842240e","ssdeep":"384:J0USCwOcaWpw4birFDPyBqZGlsYY+szaQt:iBCwOcaWqYQPyVlg+yaQt","tlshash":"1542cf5bee42c3f45c2eb71fa5f73269d121904864c2e2ca02c7bc47e8896d48233a5f","first_seen":"2025-12-21T05:14:12.660016Z","last_seen":"2025-12-21T05:14:12.660016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/bjb.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/bjb.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4023\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:40 GMT\r\netag: \"68f8d938-fb7\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bg7ORAo5vPlnXK0t%2FzvvPCbtrlkDNNoz8XmV2rvZTBNDo86XMXHBxwOCvZuyF6wG2EtqJV5NED8GoK470rzOi5vpgzlb%2Fo2b0A%3D%3D\"}]}\r\ncf-ray: 9b14e44b8decb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"d9a96dd39a6844e40944c6e48253170f","sha1":"5d519410ce4dd1ae9c07cc2e7849dfe0b87bd1ae","sha256":"44815338929484ff761b1604ad10e0c1140106926e4e6bf4440eaae0c0d1ed82","sha512":"7db3ed981754afd183531f4ee75acc5de96e0f7451a04fb18fe9658644c8e77274cf2e81eb9f69e0185b1be80ca504ee822a6d3ec0fc04efc3fc8fd1cb64b1d8","ssdeep":"","tlshash":"04815dede8225d00814da61e39e1a3cbb7370ea1898ab450fcd98d6308743758e8c4db","first_seen":"2025-09-20T09:09:44.869145Z","last_seen":"2026-04-26T02:02:33.159107Z","times_seen":60,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Spade-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Spade-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 19541\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-4c55\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fak5WX9qs7W03kz6Q%2F8h7DGNr38BraaIzD2zKjaiNa3ozXgSkv5MPjfnRmN1x0WFdVzpOCKTMHRE9%2FoSFtFcyY5KqgaNk7cZvA%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df7b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19541,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"9cc48ea3144301a4324e3f6cd59d992b","sha1":"acf36691c3c737f8e50387eb61f5997f3fd6b769","sha256":"9300cf0b8e865b4ddcc96ef25bb09355d3fd813fe8a450602b95be2f9da5220f","sha512":"56b6087b9d3dcc123c1a32498798da1df92df1ce549bfc82f4632cd484f8e88eb216005e36e46c1fbab67d468eafec5f4e23308eba8c5885cd2392b61f7abaa8","ssdeep":"384:/JXE05vAxH63SoO0ZooE5948AUMKaXIZu1c4+fhTSy6RlVu2f:935aNohZp8np81c4sWBf","tlshash":"4192c09e4815c4c4fe9f5630ccd62b177bac163c182a1a94f2e2d0feb0a489737665bc","first_seen":"2025-04-05T02:32:22.770788Z","last_seen":"2026-04-29T05:19:27.445158Z","times_seen":123,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/BigGaming-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/BigGaming-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 24570\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:42 GMT\r\netag: \"68f8d93a-5ffa\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFg0yj3yb%2B3LRLjWVYqyZQgsgHJVZR0A5RGmBAdGCxdtl7tD1a89s1LRQqlJW4d8KwIYdzRXBbNq0SRUAs9%2FjSZuIsZFtTv1pA%3D%3D\"}]}\r\ncf-ray: 9b14e44b9dfcb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24570,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"ab8f2e4c256f6eb19a3bf2d1813dd952","sha1":"1ed6937be16eb2412527919b5fd3c80ee856ff11","sha256":"aedb59c27519bb8ef57bba23a1a8679e6b545b84532fe621cb92be366e3e7710","sha512":"6ff32cb4ac409b9bba67e1d5101314a4476be61a3e9780908029127f7ab1cbf1ec337f6ad1f72b790f718bf552f551998324f334c43176834262e06649da1591","ssdeep":"384:/JXE05n7lfdZAkjmCA881RZGCtuneuazyy41HnstMM9ROaYJfnmZU+tI:935nZAzRN1rTung+yostn9OJ/y7I","tlshash":"25b2e1acc55055bf3bd83b00458e29f0d5eb63472c0eabbab45a0297779c86a570c2f7","first_seen":"2025-04-05T02:32:22.788564Z","last_seen":"2026-04-29T05:19:27.460098Z","times_seen":123,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/whatsapp.svg","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/whatsapp.svg HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f8d93c-49b\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOf0my1c3V0u%2Blqr5AAy%2FTsql1T36qrb%2Fc8hDDsp1lV8bUrf8qfNXBgyuCDrbt%2FvmLaIrEVRCis8c7O%2FAPCcqM7mhgVgd3stHw%3D%3D\"}]}\r\ncf-ray: 9b14e449cd66b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1179,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6af811ad106a7b93893299cffdc3792c","sha1":"912e0f14cc878c2fba34fdf03101d5bb8de45a86","sha256":"ece3cb1c789c9b787ec3b1d1ee5667d1da05b27c2de85239d3dd590a047c030a","sha512":"27eba1b437ba369e0af8d9c0b41a7f74dce96d28a43063a28ed81a9a5d49734a9fa5b2cc47f81eb125f2b91f511bce3b6ed7226cf77fa660ab9314881e2acb31","ssdeep":"","tlshash":"f9217749471dd8a050ba5e25fdb095531f205046bb729188c71738bf75073a32a46fb4","first_seen":"2024-05-10T16:01:25Z","last_seen":"2026-04-29T05:19:27.468546Z","times_seen":138,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/telegram.svg","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/telegram.svg HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:42 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68f8d93c-562\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZ12gduKADI45FDN2XidiHLjQlq0ftgtLUhzoz8%2FATQz4XLwV8OGhQfzToCEERARcNWXS7ShiYpiN5qbrRBMYLhSy9%2FVSzXRkg%3D%3D\"}]}\r\ncf-ray: 9b14e449cd67b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82902a9e3f8a057176d2470c8041e4c6","sha1":"b7343ebb3cc4779ebfbf54102b0cc2d43cfb7d2a","sha256":"2a0131f19a7e3de9bd873eff43777719fa2df5a2bf627b56ca30adbd3a0d0ede","sha512":"5de21191e8cfab82eb72be4f93a26886d53d11e64faeab2658d7d25c314b30c433aab7bc08448404ce288edc05e61c11bb520b7e105f49bf80ce1bfd8ee9cdd2","ssdeep":"","tlshash":"7321339c420c4477fc0597e7c9f81287625eacc5768400b8e5de4a8dd9697fb0cb69cb","first_seen":"2024-01-07T06:19:20Z","last_seen":"2026-04-29T05:19:27.465642Z","times_seen":204,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/panin.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/panin.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4254\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:41 GMT\r\netag: \"68f8d939-109e\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTXG370sODBCoD%2FG1Iv1cNPSlEhMmkWaFHK%2Blsgm8zjzk1CVo%2FPo71r89zK2aWN42qDcPmTZQD1UJ4pFsyd%2FcitT1zn%2BglkfpQ%3D%3D\"}]}\r\ncf-ray: 9b14e44b8de6b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"92e0f0352cfb541b46269616b5be0dc0","sha1":"667a2a61f2a39c635db74960d4b47531ed52a184","sha256":"e0708c97afaef2846ec67c379dd6975a850087492cbc8926a10b622a47ee3f18","sha512":"633abf9cd75092894ed135f428b6bdcfc527112e4caffb7bb5bbbbe2751e4ef74b0d214414331a92694a40ff0eed0535fb7a0381bb9787f8e30d9154bb01c748","ssdeep":"96:C6knmWIr1zjr/5dmHCafHVdNjVvF4wh5G40X/KYQEgrc0IZV:C6knQ7mi47vF4wh5G40Xye0RuV","tlshash":"35913b1ced257c418809b63878f4aa57bfbb07948b52e155bec9863768821bdc9111c3","first_seen":"2025-09-20T09:09:44.852273Z","last_seen":"2026-04-26T02:02:33.153081Z","times_seen":60,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":561,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Joker-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Joker-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 28020\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:42 GMT\r\netag: \"68f8d93a-6d74\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZGoWqu59pjTbH90vAr7zTc0I%2BA6bgtpdjo5Xe%2BTabnCBc9zr6We%2BI3Yshm66R47lPzbI5E7ULFZClw2fGv4HUSLEJZ31rx5OQ%3D%3D\"}]}\r\ncf-ray: 9b14e44b9defb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28020,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"2bb7562e3cb1af2ccd0b0d98d4516bae","sha1":"bfc867ff87a737d6622776c98976083ab7112d4a","sha256":"3b823f5d0e18b0a0a41c1ab01d86fb813a590dba1234e7e2d4812852a56a79e0","sha512":"7ee815a8da324cf93f794522d89e468391889db27fc612f81e11c1062f7305448777e3411579956bc0bfbcb13c07f7cf6c3a5faa76c8b200031fe15bfc1d3c6b","ssdeep":"768:935z6wotrSrJBJsEFxL1+7zZHgruNasrrzP8:P1/XRFT+x5hno","tlshash":"64c2d09f40d09aef5c0966401d8d69c6f94c71b6a89f7d1fee30779c1a51a8f2833492","first_seen":"2025-04-05T02:32:22.780246Z","last_seen":"2026-04-29T05:19:27.467882Z","times_seen":123,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Tangkasnet-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Tangkasnet-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 50802\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-c672\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wv3YNd79PGbqacw69KPOkuW3Q6UsuNfWJM4Sy2oYxYrDGsUQj3iCanJl686g6qQ%2Fr4g88I9c8kqHSFNWSI8sWAbjOcKJwfPWZw%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df0b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"aebd8320945755a5d3b7d0a116270c69","sha1":"f217394bcfe7b6ec98c1387fd4315d308fe64c0c","sha256":"e57204d25d59495b0e915c358f76cb41ad0bd7a9f2fe04c20036a9b568761616","sha512":"6c2df3729116812e08dc02ea228fe52970836a1ca1dff2b35a4d7323d3d20cf1e8b6a69bc63c367568e1e39c833155ae52c7995fa16061c565dbd645aa2de39f","ssdeep":"1536:+A/Osubvo/gQI2kXQ6+4+ZEZx3D9bvq8joOU:+A/Mbv9vXQ6CEZ/q3","tlshash":"0233f14c60a441893764f3a51458dc1ba66d7418247f1d05fafefd2fe663b32161acf4","first_seen":"2025-04-05T02:32:22.777652Z","last_seen":"2026-04-29T05:19:27.472805Z","times_seen":123,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/SexyGaming-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/SexyGaming-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 56276\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-dbd4\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CW71porCt0qg4tfwHyAY8hhFLHzX32Szazb4jUSFAt5LvtryB%2F%2BFkYVU4A37RTePeHW6de5b3RwEw%2BIRcJlWXRROxG9lw%2B4iKg%3D%3D\"}]}\r\ncf-ray: 9b14e44b9dfab4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"2306f799d9e4bcc8cdd05c10d675096a","sha1":"eba223426ae5b2d73bbbd41ea38d4dab9fdc6966","sha256":"3b74f05a031124d83a0a7dac0fb1c777fce0e29b708986d2e2a23f47a2e1b234","sha512":"5921d40b125797de16b2f2533b4ed997df4d964803489f25d93de388d8658b1d25aa5fa7536b97809b03639be9c4c4ad655b6622a505650513af73f17f0d8fe0","ssdeep":"768:935+ZWx5dH//qisyukMeNYtREeUL1ERWdRHs4QXhXJKmna9blooTJxGsda4cUOyG:Xx5x3syaUqRMM4vgsda47ODcFTAfbg8","tlshash":"2d43024713f29b5f14ad8a07336de7de971d2a710e08dc542f2622913027cc72aa3b25","first_seen":"2025-04-05T02:32:22.760575Z","last_seen":"2026-04-29T05:19:27.469117Z","times_seen":123,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Naga77-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Naga77-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 20422\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:42 GMT\r\netag: \"68f8d93a-4fc6\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPP7IjGEgGxHUlXFC51NrHQHYSVLeHm9FcKUdvGiEGjXOByqsdHfl%2Bem1mbvitC61RyDEp9qDdNAzNgTJ%2BmtP8HKiNOsQCUx8w%3D%3D\"}]}\r\ncf-ray: 9b14e44b9e00b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"c39534876f0e272baa8252052a76d9ae","sha1":"27a1783bffcb1e099e908165575313b4a01e7b26","sha256":"e8b5730e688ee7053e62e2c5b32578f2ffecc7eccf9820db0a75018f2eb66c2c","sha512":"165d417d09cbe29782e844f537b25b4e4a742a3ee133d11b497470a10bea89e5ffc4f50261a43c23e33633be4e1fec9aebcf7d055e582d3859755498847aecd1","ssdeep":"384:/JXE05ppwKKndnkoWfHSdI1g7Rit+17gDtdSNxU6lCZohAh4WEWB6hr:935Mdn3+HSW1ilmdSNxBlCGOzEJ","tlshash":"9e92d0d49d15a09ed4d0688349adad0be7c8802e5c1b54742cb4b2e97479d87cf38fe8","first_seen":"2025-04-05T02:32:22.756242Z","last_seen":"2026-04-29T05:19:27.457571Z","times_seen":123,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Sv388-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Sv388-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 31023\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-792f\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjvAxOSO36uangdWuS8FdpxQDnju5CsZzXbvg2KcoqKvNQq2mxjY8S2gIfWyBBO%2FKY6tfHDFWwqp9ite3iVcqkWZlmqfjAKZ2w%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df4b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"a7295df80d1312e39b50fbb1dca6f97b","sha1":"45602a5024640fc62ea7f8bbe6054217d0482541","sha256":"657ffca6f76d655120a03a79a1174837546756f08e9ab23511910eee89d991ec","sha512":"f5afabe4f0867b4a41f7eb358364dca14ffe3c75a064d40ca757e586ac01cac48570d0af03ecf5b9951d4aa0fc904fb4bf394bbeb4ae65a1ac21a316cddb8d45","ssdeep":"768:9354QQQQcm9Oex9RpbxP8gddBdV0EdcQH4Ry6pgXZl0QQytytyn:7GNlV9BdV0EdURyfp","tlshash":"d5d2e1e88721a39e315f11130dae4064dada17ccdda21016ecb8f7d4ea3bc5f218a5b7","first_seen":"2025-04-05T02:32:22.783835Z","last_seen":"2026-04-29T05:19:27.455156Z","times_seen":123,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0/amp-anim-0.1.js","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:50:23 GMT","end":"Wed, 25 Feb 2026 15:50:22 GMT"},"fingerprint":{"sha1":"8C:22:B0:36:FF:44:17:0C:D7:23:B5:FF:95:73:C9:21:89:15:5B:A8","sha256":"89:0D:D4:C7:A7:53:0B:46:DA:82:A1:15:39:BB:C8:3D:D7:5E:B7:2D:B4:21:52:28:84:00:82:ED:48:91:43:A1"}}},"request":{"raw":"GET /v0/amp-anim-0.1.js HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 2471\r\ndate: Sun, 21 Dec 2025 05:13:42 GMT\r\nexpires: Sun, 21 Dec 2025 05:13:42 GMT\r\ncache-control: private, max-age=604800, stale-while-revalidate=604800\r\netag: \"c96f47574b80ea52\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6167,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6054)","md5":"71618d10f7356c378595c41246fb6543","sha1":"6b75cf807b5be56d947c4599bd1d1c2735a10960","sha256":"88b28d083673fc44c0dccfa7282b2e3fd27d2b229eb65e9196329c16038337b0","sha512":"7f7678570ca06cf608fcc7c5aec6ce5698d7b9bf8d990a56cb28a0f38d11bddb0d745638f8484306d7ebf5079dc802df37d830c1269fb3feef4828124798524e","ssdeep":"96:4V9HqqXQL8e05UjvNvECpPlVyiJl4wxQYqvjVYeUEyEJXHOCXOV7:KHZQ4hGvNcCpLr/xQnxN3oV7","tlshash":"c3d1a6ecb292f0729b9774e5802f000bf93da539908bc450d614e8e569bd99e4173f3c","first_seen":"2025-10-21T18:06:54.960525Z","last_seen":"2026-01-06T10:11:03.411712Z","times_seen":297,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":61,"dns":3,"connect":8,"send":0,"wait":20,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/danamon.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/danamon.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 6674\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:41 GMT\r\netag: \"68f8d939-1a12\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1JA9sDtVtR3Tt0t3Uc6bnE%2BpYA2dtAUtZv4ZHzsEaJcVrdbhZQzBa24EqWfLbGnt0aWWxj7J8IjPbEf8eeWjZ%2FjyQE%2FlSdtJg%3D%3D\"}]}\r\ncf-ray: 9b14e44b8ddfb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"d23828675789d188e3cbf3691ea8c479","sha1":"d20e8b6152c96e958be7cb57d1807cc859915e36","sha256":"e19c645154e06d787841e51d50cca880a046cf783f3a614950693ef6bd279eb0","sha512":"e962a576e2b863adccd7d34e92e4bfdf01afe434ecaa33caa2f6526fa40b4328052df4a33f3a6f523f80c87f4098b0c968952fb8d0b7da1921ef016165e2d4b0","ssdeep":"192:avkny/ExiOx31VrRI4NZXGFTs+bgd6RXaSuB7rJi33+W:acnyYZx37/Z2ZnbVRaSuhrJi3OW","tlshash":"31d18da7ee42a8c1b458b9507db6d5f72437d2a54dc29998c8e6122251b0b3ecc989c3","first_seen":"2025-09-20T09:09:44.883154Z","last_seen":"2026-04-26T02:02:33.148959Z","times_seen":60,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/bri.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/bri.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4349\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:40 GMT\r\netag: \"68f8d938-10fd\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w5Hzt1PXtPUZ6GhpeLzNQcdaAsVNEGnP2hfRPv0Ihu7Wj%2BT8QsxguiTGSGA7OFLFu6InxjmXWpTyhIsdIluuTSAbH86UWiliDg%3D%3D\"}]}\r\ncf-ray: 9b14e44b8de4b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"d5a91bb1043ac9dd27dffc04bf09fb32","sha1":"1fde346166660532be1899be236c653c2b695e48","sha256":"960c5c9ea1ce92d92abcd20a3d8500d74a2c877ea986a2686c74804be761b306","sha512":"5e8cddfa8b9abf0d15d5ae47dc75588c244567e4312e36770af1642445b695eb66bbc99a342d8b00f0fdc1097691b0f1d95fe548299202663c0139e210698162","ssdeep":"96:C6knmWIr1Z/ssmHCKHVeofsL1QUxChq7PDgorpOuht1gHaAUkvXIdQo2:C6knQpmiKjILxCEPZ/ht1KapkvXG2","tlshash":"cc912b0df90afd509d4eb609e5f5a313863a03d55e82b581fdc45b1bbc310adaa4d1c7","first_seen":"2025-09-20T09:09:44.885716Z","last_seen":"2026-04-26T02:02:33.117661Z","times_seen":60,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/bank/permata.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/bank/permata.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 4618\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:41 GMT\r\netag: \"68f8d939-120a\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CovYxC5Xe6QAQozL5pXygA8khnhbTDHpcu60rlUXncUvvaP6KDqMJnXjybE8XIxhzItKTfyAvJs6gldR484dQPS26nawuYV0Qw%3D%3D\"}]}\r\ncf-ray: 9b14e44b8de2b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit/color RGBA, non-interlaced","md5":"1cad54b7cc684200b461ffac484bef07","sha1":"1f914d773a3e3e4733d8feeac48e0bd0f61c105e","sha256":"14735824618ff5d1ef71f1a6e04085f7e6e09d175cf66b5b2b18f8c063c3a1d4","sha512":"746f523408d64308c008018e8495c22860a3d032db85839a76bbab401dc8707cd11c996b919fd8c326f92ac1e2f1e39dd88fb056de384c1bfa89c43bb1861945","ssdeep":"96:C6knmWIr1B/VOdQZmHCwHHVQwc6lejEeFycx8O7l10SP6TQZiQwlAZB1fhZ/MKX8:C6knQHrmiwHzcsal8c2O7cW6TQZiJlAa","tlshash":"50913a4db812a8019a9debb9b9e9239726774bc177d1f148a8adca23083063e4d5d1c7","first_seen":"2025-09-20T09:09:44.861136Z","last_seen":"2026-04-26T02:02:33.147065Z","times_seen":60,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Vivo-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Vivo-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 65918\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:44 GMT\r\netag: \"68f8d93c-1017e\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiCuZi2vIfTkCzCavyNjiSS8iHNpK0vFPGFY3eD%2FN4%2Bx0m6NflH9oGppUXhJtUCvMFbF1Ocbb1NfeFYTUrlsedZeZk7K5Db5nQ%3D%3D\"}]}\r\ncf-ray: 9b14e44b8dedb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65918,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"d88f4cfd87eb2bd5c587914a62cfde69","sha1":"d95ef8e7164d53dc971aed3c832e19f5efbd2bd5","sha256":"cd63d7c4ae4811968182d1be05b13b03e9a5b5ba95e0b67c923a29cade2d2ff7","sha512":"43d8f23ed66d546543c36bd81728b9f763a23c6744763d029eec48027629f3582d9e3bc45e216a9c2c96d77aec27a8c94e763fa04d21c8ee4d1a0b1839ec7de0","ssdeep":"1536:QApKvf8UA9alhIxyL88ROTyZirp8r3O98RL/io:TKvf8UAoueRO0iqrRL/io","tlshash":"2a530274f751e70cea58e18177c9fc025a2a006c4e1eee3975b52ecb9488b0e393b55d","first_seen":"2025-04-05T02:32:22.782668Z","last_seen":"2026-04-29T05:19:27.466226Z","times_seen":123,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Playson-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Playson-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 17015\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:43 GMT\r\netag: \"68f8d93b-4277\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHbQ4uF4%2FnhjQn90ZuUoifccNm1YxtIQPT%2Bp68Pufjj8TBw%2FrQaCYiNwuMxju8j5CQIQD7zA%2FK1nc3h3axoUbQspGYncwKQQ%2FA%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df2b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"b11d47b66e146223246f0c02c18133d0","sha1":"5f2c2b1134adfdb5a3158eb749f52ce18d003752","sha256":"c662594b393425c314d907c967e7d427407c9f9ce8f9caea062b2de7d806e93a","sha512":"72c520ac979082294d4128eb7cb296e545febbd2eee1d87171af119d53b8fec9331defa3362c9c02542001a5eed2ac035a4081305fc497c3b3535074357e5b5e","ssdeep":"384:/JXE05WTFmPVhJD4IyMfemDlwIDiyzXF2PXB0CjBFI:935W4PVjD4IyYemDZVIPBXjBy","tlshash":"f172c08d0232954fa6b57be9e898fa51e26e2234c7963120f0248de638f5d2b49546fc","first_seen":"2025-04-05T02:32:22.765061Z","last_seen":"2026-04-29T05:19:27.477632Z","times_seen":123,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wpktoto.com/assets/icon/Ion-mini.png","fqdn":"wpktoto.com","domain":"wpktoto.com","tld":"com"},"ip":{"addr":"104.21.94.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wpktoto.com/","date":"2025-12-21T05:13:42.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wpktoto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 12:27:36 GMT","end":"Fri, 20 Mar 2026 13:25:12 GMT"},"fingerprint":{"sha1":"82:B0:A3:31:97:05:BF:F0:84:D4:E8:64:04:29:9F:8B:97:BD:7C:7C","sha256":"1F:24:F0:EA:1D:49:29:5D:FF:06:ED:0B:0E:26:5C:77:BD:7E:4C:F6:72:F6:EB:FE:76:71:71:69:32:00:16:76"}}},"request":{"raw":"GET /assets/icon/Ion-mini.png HTTP/1.1\r\nHost: wpktoto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://wpktoto.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Dec 2025 05:13:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 23261\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Oct 2025 13:16:42 GMT\r\netag: \"68f8d93a-5add\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Wu%2B3i3sFNgxSJPqbbLyIMdN%2BCVP8RuylpsOJxwi2U7WON%2F6sZ4B0qenpUdAsowbGNMiuE7huU0wb%2FpDhn7T1CA5levmVWD6GA%3D%3D\"}]}\r\ncf-ray: 9b14e44b9df9b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 150, 8-bit/color RGBA, non-interlaced","md5":"cdaa6892da08133bf33db4d399b6ec65","sha1":"6728b3e3829860c63a4963545bc89156e9d4096d","sha256":"540cd615ec43b5e7c999b85c21cef298dcaaf7f145d11e8694874377677f659e","sha512":"51a4b2d24e88f91f8b786716da3caf3ad3a618e2ef2d4f4f0b16bb21f70d321c7ff2be20a4f7234d52677365615edffed4d590fbfffa4999058f77f469e8fdf7","ssdeep":"384:/JXE052WNo0ZCTTw3tYVYK3znVm1CbNER1cu0xTQdN/76zyelWn63fp:935ZNo7TE3CVY8nVVbNER1cFtQH/LPni","tlshash":"f7a2e19438bd5daed89061408c72c9d6f3a1d2e9c2be11b2e4dfea2c41d3581f7a7850","first_seen":"2025-04-05T02:32:22.773153Z","last_seen":"2026-04-29T05:19:27.47401Z","times_seen":123,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-21","alert":"Sinkholed","trigger":"wpktoto.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}