{"report_id":"7653058f-8596-4a0f-8aa9-5fc7d144886c","version":6,"status":"done","tags":[],"date":"2026-03-12T16:09:33Z","url":{"schema":"https","addr":"tbiberkahindo.cfd/register?inviteCode=117347309","fqdn":"tbiberkahindo.cfd","domain":"tbiberkahindo.cfd","tld":"cfd"},"ip":{"addr":"103.219.251.163","port":0,"asn":135444,"as":"PT Ikubaru Indonesia","country":"Indonesia","country_code":"ID"},"final":{"url":{"schema":"https","addr":"tbiberkahindo.cfd/register?inviteCode=117347309","fqdn":"tbiberkahindo.cfd","domain":"tbiberkahindo.cfd","tld":"cfd"},"title":"Register","dom":{"size":10393,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2757)","md5":"8440e5bd989652849c50343da9a5f5bf","sha1":"0c36b99add2d631a2d45e0e3ffa36fed8c551657","sha256":"e72a60ee7320c54e651876becc36dca18dc873ea9f49faa280672e4684f11740","sha512":"599bd0369d1ff40013245a1fa8faff40a3b580a7ab75a1453462d202d3fad5a34708e2a50a801d9330920a22657b6ec5dd3b5f8993093a5910aba6b7fdb24a4d","ssdeep":"192:hPZMJg3FPQ4ZWpMVa4Ywzwbcsy3JM1RJ1WiGOTh6DR161gukxlIMVLgJap84gXiE:hPOJtsN3JM1RDWiGOTh6DR161gukxlIL","tlshash":"b42253a244e35872d54762b12afa9f0964b84603fa47dc297bfc128cdfc1d944793bac","dom_hash":"domhash98fdce1941af4b7296c858389031e56b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tbiberkahindo.cfd/register?inviteCode=117347309","fqdn":"tbiberkahindo.cfd","domain":"tbiberkahindo.cfd","tld":"cfd"},"ip":{"addr":"103.219.251.163","port":0,"asn":135444,"as":"PT Ikubaru Indonesia","country":"Indonesia","country_code":"ID"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-16T16:09:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":2,"received_data":254273,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.postimg.cc","ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-06-11","domain_rank":103883,"first_seen":"2018-04-11T10:01:12Z","last_seen":"2026-03-11T22:01:42.283684Z","alert_count":0,"request_count":1,"received_data":2877,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"tbiberkahindo.cfd","ip":{"addr":"103.219.251.163","port":443,"asn":135444,"as":"PT Ikubaru Indonesia","country":"Indonesia","country_code":"ID"},"domain_registered":"2026-03-07","domain_rank":0,"first_seen":"2026-03-12T16:09:33.881642Z","last_seen":"2026-03-12T16:09:33.881642Z","alert_count":0,"request_count":3,"received_data":1722775,"sent_data":2933,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tbiberkahindo.cfd/register?inviteCode=117347309","fqdn":"tbiberkahindo.cfd","domain":"tbiberkahindo.cfd","tld":"cfd"},"ip":{"addr":"103.219.251.163","port":443,"asn":135444,"as":"PT Ikubaru Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"255f9d46a66b32b696bbd8dcbacd7976","sha1":"6f853a7d12ff7e14c863bd2c3e2bf964be8e4512","sha256":"ab506b3790a3f9297525b7b3ccfed3f0d619f01c67a50330cd8c370093f4e724","sha512":"e68cefe2fb23fa22ce581bbc2a11b5c6dbfbf31a8ceb95cefbadefd3ab290855d3ae62e9e4841f57dabff98f958a9aa184c79b1fcdec11191e75ba1c3e6e38f6","ssdeep":"","tlshash":"59e0cd9977a2093491c702264fbd8a403879a0171613981d776c555fdf52c03a1a6f34","size":327,"data":"","first_seen":"2026-03-12T16:09:37.229075Z","last_seen":"2026-03-12T16:20:40.879265Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbiberkahindo.cfd/register?inviteCode=117347309","fqdn":"tbiberkahindo.cfd","domain":"tbiberkahindo.cfd","tld":"cfd"},"ip":{"addr":"103.219.251.163","port":443,"asn":135444,"as":"PT Ikubaru Indonesia","country":"Indonesia","country_code":"ID"},"introduction_type":"scriptElement","is_inline":true,"md5":"42cfdae7b1c7d079d44927a6786cfdf3","sha1":"ce193d5938ead6accd6bb615aeca1070ce7a6890","sha256":"9189547d3ced23dfe1b759ff0623df37fc9729ae6944a825deab7fa35a56510f","sha512":"a1fbff588ac450bb69713604373cfcf6e68f35aa875b32a61697cdb3ca24f7c1b870874b377cbd19d1045c48388ec786fddfcd0ff7a4c87cc7f9bcd3578ca69e","ssdeep":"","tlshash":"9a11affab2a689710dffb17b39474224a0b84001b903c684265c5815cee9d9ec0fbdce","size":1002,"data":"","first_seen":"2026-03-12T16:09:37.231127Z","last_seen":"2026-03-12T16:09:37.231127Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tbiberkahindo.cfd/register?inviteCode=117347309","fqdn":"tbiberkahindo.cfd","domain":"tbiberkahindo.cfd","tld":"cfd"},"ip":{"addr":"103.219.251.163","port":443,"asn":135444,"as":"PT Ikubaru Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-12T16:09:11.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbiberkahindo.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 10:54:43 GMT","end":"Fri, 05 Jun 2026 10:54:42 GMT"},"fingerprint":{"sha1":"6C:09:97:2D:BA:EC:85:39:25:29:EF:16:C3:73:A4:2B:5D:66:44:02","sha256":"CF:7D:6B:A2:FF:D2:B3:C1:BC:0A:8C:DC:7E:6A:9E:CA:3C:20:0E:EA:24:47:6E:26:BC:F4:46:C4:56:DA:64:C4"}}},"request":{"raw":"GET /register?inviteCode=117347309 HTTP/1.1\r\nHost: tbiberkahindo.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.29\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlEvTThCZ3o1bUc4S3V4VzFvRWtLZ2c9PSIsInZhbHVlIjoiMFVkMUE0ZHlmMDhvRG5UZkdjdURrb1NBVkwvaWYveFo1UGJYbWdJaEhnTmUxUUZLMVpSaTBsVHlFSHlzUDJNa1h2SzlDb05vblJnSUJuNk9hN2VPcU5LK01lM08xQ3hvYzZ5cmJRY2pxeW5FOEYyN2xLVTA1ZFJXQWdsbzBNK0IiLCJtYWMiOiIxYWI5NzM2MTRmY2VlNGE2ZDVjZjU2ZTFjN2ExMDc5YTRjMjZkMTQzOGQ0NTYyMGE3ZmZlZThlNGU2ZmEwYzUwIiwidGFnIjoiIn0%3D; expires=Thu, 12-Mar-2026 18:09:12 GMT; Max-Age=7200; path=/; samesite=lax; secure\ngscoder_session=eyJpdiI6IjNWU2J6dnRqMnZacVJvZWN1cW8wQ3c9PSIsInZhbHVlIjoiNWdDTzRYQVR6N21wcCtQUHFkeUQxUXZraVFMdEk1K2k0Z3RpWW1NL1VrbXg2V1BFaXFzUzlZWEo3TU9hNVNvblY2UHd2Tlh1ekptVE1IbU9jeVlUa1JuZzh3TTU4RjAzQm5sWVBrZGZMcGdsR0dFUW5RK2lycUVtdTFYUE9UMXIiLCJtYWMiOiI0ODIxY2ZlMmJhYjdlN2E4YWY4YTRhOGU2MzgzZjcxNjljNDc2MWQwYjU5Yzk1YzdkOTJiYTI5OTc0MTAxZGYxIiwidGFnIjoiIn0%3D; expires=Thu, 12-Mar-2026 18:09:12 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 2488\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 12 Mar 2026 16:09:12 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.29","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":7908,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"7e7158a16334527ace9b00db41524985","sha1":"b128252cd218dd38f656490de00c52f7596b2b6a","sha256":"4b4314d6cf8bf0f44174302b9c9d85bdca63ea24b8ab42e8c40bfc6ae0c4da4f","sha512":"04b5d1684b2c05131c02703906e8ae044a1e44ae7789387b3af118c717cd6b9fad0f30d31fa44a19cc349e0f10abf92f3dd4488465b99e54aca45abbf9e67021","ssdeep":"96:a8XRkFREpbhLXRr2FqXlaEM9ztDgOLdBtJfemfrJCZX2Dd20IMXTbtDis:a8B7pbhLXBLXlaEadgs5GiJCRGNjblis","tlshash":"fbf14415a5c168a3a47393a4afe3c71dfb6a4013db0356583bdc12869fb2d588263fdc","first_seen":"2026-03-12T16:09:37.218885Z","last_seen":"2026-03-12T16:09:37.218885Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1528,"timings":{"blocked":425,"dns":58,"connect":180,"send":0,"wait":672,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tbiberkahindo.cfd/register?inviteCode=117347309","date":"2026-03-12T16:09:13.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tbiberkahindo.cfd/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 12 Mar 2026 16:09:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18778\r\ncf-ray: 9db40fe13a8b1a30-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64cac444-495a\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 655715\r\nexpires: Tue, 02 Mar 2027 16:09:13 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mZiO8zgaS8ydKzrJQhVut%2FFsYJ%2Brb%2BmmVkDARUhqgAXs0mSS6%2FX%2B6JRebcogaQA2Su3%2FvI13I3UpPN3u4KVDSkDyfQsF5RnYpIOJIlC%2Fg80jUu5LU%2Bh5kjo36GTs%2BZYnzXMqUijD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-13T16:10:46.879444Z","times_seen":43641,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":13,"dns":2,"connect":1,"send":0,"wait":47,"receive":2,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbiberkahindo.cfd/Gemini_Generated_Image_5yaa855yaa855yaa.png","fqdn":"tbiberkahindo.cfd","domain":"tbiberkahindo.cfd","tld":"cfd"},"ip":{"addr":"103.219.251.163","port":443,"asn":135444,"as":"PT Ikubaru Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbiberkahindo.cfd/register?inviteCode=117347309","date":"2026-03-12T16:09:13.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbiberkahindo.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 10:54:43 GMT","end":"Fri, 05 Jun 2026 10:54:42 GMT"},"fingerprint":{"sha1":"6C:09:97:2D:BA:EC:85:39:25:29:EF:16:C3:73:A4:2B:5D:66:44:02","sha256":"CF:7D:6B:A2:FF:D2:B3:C1:BC:0A:8C:DC:7E:6A:9E:CA:3C:20:0E:EA:24:47:6E:26:BC:F4:46:C4:56:DA:64:C4"}}},"request":{"raw":"GET /Gemini_Generated_Image_5yaa855yaa855yaa.png HTTP/1.1\r\nHost: tbiberkahindo.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tbiberkahindo.cfd/register?inviteCode=117347309\r\nCookie: XSRF-TOKEN=eyJpdiI6IlEvTThCZ3o1bUc4S3V4VzFvRWtLZ2c9PSIsInZhbHVlIjoiMFVkMUE0ZHlmMDhvRG5UZkdjdURrb1NBVkwvaWYveFo1UGJYbWdJaEhnTmUxUUZLMVpSaTBsVHlFSHlzUDJNa1h2SzlDb05vblJnSUJuNk9hN2VPcU5LK01lM08xQ3hvYzZ5cmJRY2pxeW5FOEYyN2xLVTA1ZFJXQWdsbzBNK0IiLCJtYWMiOiIxYWI5NzM2MTRmY2VlNGE2ZDVjZjU2ZTFjN2ExMDc5YTRjMjZkMTQzOGQ0NTYyMGE3ZmZlZThlNGU2ZmEwYzUwIiwidGFnIjoiIn0%3D; gscoder_session=eyJpdiI6IjNWU2J6dnRqMnZacVJvZWN1cW8wQ3c9PSIsInZhbHVlIjoiNWdDTzRYQVR6N21wcCtQUHFkeUQxUXZraVFMdEk1K2k0Z3RpWW1NL1VrbXg2V1BFaXFzUzlZWEo3TU9hNVNvblY2UHd2Tlh1ekptVE1IbU9jeVlUa1JuZzh3TTU4RjAzQm5sWVBrZGZMcGdsR0dFUW5RK2lycUVtdTFYUE9UMXIiLCJtYWMiOiI0ODIxY2ZlMmJhYjdlN2E4YWY4YTRhOGU2MzgzZjcxNjljNDc2MWQwYjU5Yzk1YzdkOTJiYTI5OTc0MTAxZGYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 19 Mar 2026 16:09:13 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 01 Mar 2026 11:22:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1712104\r\ndate: Thu, 12 Mar 2026 16:09:13 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1712104,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1408 x 768, 8-bit/color RGBA, non-interlaced","md5":"c2a92e0f0808f8c591ef72653283efda","sha1":"96974b4541c762a567daafb469115b4a2b3b9164","sha256":"0d6e948cc700d5039d15dee29e26128cef937c184a06e6b1d92f283670ee8990","sha512":"74204248a98372822c9c105afc1d4d6db15fe26d08f87736b4ca31da38b2d59a75d77f6e9267c3d0758ed0d6f7ef6b5c45e808f3b8a01d4e24e82ca038e2e807","ssdeep":"24576:O2+0CnNjlFhGJa7L7Te8gGlSwi7wWlj8OD9fx6iZLbT:d+rTFwaPe8/lSwi7fLbT","tlshash":"062523b2db6b16e438115cfca8494e5a74e2fe8146f0a4c0bbbed7d6e441ba44e311cd","first_seen":"2026-03-12T16:09:37.222382Z","last_seen":"2026-03-12T16:20:40.869066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1334,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":1154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.postimg.cc/4y8HyTVK/circle-blue.png","fqdn":"i.postimg.cc","domain":"postimg.cc","tld":"cc"},"ip":{"addr":"46.105.222.162","port":443,"asn":16276,"as":"OVH SAS","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbiberkahindo.cfd/register?inviteCode=117347309","date":"2026-03-12T16:09:13.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"postimg.cc","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Feb 2026 07:05:38 GMT","end":"Thu, 14 May 2026 07:05:37 GMT"},"fingerprint":{"sha1":"0C:60:FC:7F:49:9C:E4:F1:E8:28:6F:D1:45:F4:24:E1:7A:D7:FE:79","sha256":"9C:DF:9E:CA:39:40:61:D1:0E:A6:F4:42:3F:FB:A1:4B:BF:82:59:98:C4:CA:4D:56:1F:BD:99:B9:9F:EA:19:D0"}}},"request":{"raw":"GET /4y8HyTVK/circle-blue.png HTTP/1.1\r\nHost: i.postimg.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tbiberkahindo.cfd/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Thu, 12 Mar 2026 16:09:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 2712\r\netag: \"5a35990e-a98\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 4-bit colormap, non-interlaced","md5":"ff125c736fd0092c080f73bb486d9ceb","sha1":"d790adffabc313b5d4b161ce4c696f4a0480f97a","sha256":"4815c786c3094f5df8eaa5b8c1eb6dec8bd54c20b7959a091da806ded521d420","sha512":"743e719816b962f193c76e14cbd6f0bd394d93a09ed30e9b17d968fb46d07c880d2e1ad0ea119ccf218d22e42af7e5446dec6da1bbd6dfe69120373b753b0818","ssdeep":"","tlshash":"6b513ca5629373ba4eca751339278a0d375b3af830454e5f93111c612926dec4cd5573","first_seen":"2023-05-03T03:17:04Z","last_seen":"2026-06-13T13:30:58.979281Z","times_seen":1983,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":127,"dns":60,"connect":28,"send":0,"wait":28,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tbiberkahindo.cfd/register?inviteCode=117347309","date":"2026-03-12T16:09:13.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://tbiberkahindo.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 12 Mar 2026 16:09:13 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150020\r\ncf-ray: 9db40fe248f31525-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"64cac444-24a04\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 40343\r\nexpires: Tue, 02 Mar 2027 16:09:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=umPs73pQc9XLXbZgXre05jK3rpmeFavjIsXVVWCV4%2FeEKoEFh6iiJjr6WIhsx2dISckuXnXBtC%2F9xVM14CsLrDPKodv72NvUbTO8jzYzqUrizjRy9pLZYIIXo9JfQPbDSLd1q3FZ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-13T15:45:21.613465Z","times_seen":37235,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":13,"dns":1,"connect":0,"send":0,"wait":28,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tbiberkahindo.cfd/favicon.ico","fqdn":"tbiberkahindo.cfd","domain":"tbiberkahindo.cfd","tld":"cfd"},"ip":{"addr":"103.219.251.163","port":443,"asn":135444,"as":"PT Ikubaru Indonesia","country":"Indonesia","country_code":"ID"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tbiberkahindo.cfd/register?inviteCode=117347309","date":"2026-03-12T16:09:13.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbiberkahindo.cfd","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 10:54:43 GMT","end":"Fri, 05 Jun 2026 10:54:42 GMT"},"fingerprint":{"sha1":"6C:09:97:2D:BA:EC:85:39:25:29:EF:16:C3:73:A4:2B:5D:66:44:02","sha256":"CF:7D:6B:A2:FF:D2:B3:C1:BC:0A:8C:DC:7E:6A:9E:CA:3C:20:0E:EA:24:47:6E:26:BC:F4:46:C4:56:DA:64:C4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tbiberkahindo.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tbiberkahindo.cfd/register?inviteCode=117347309\r\nCookie: XSRF-TOKEN=eyJpdiI6IlEvTThCZ3o1bUc4S3V4VzFvRWtLZ2c9PSIsInZhbHVlIjoiMFVkMUE0ZHlmMDhvRG5UZkdjdURrb1NBVkwvaWYveFo1UGJYbWdJaEhnTmUxUUZLMVpSaTBsVHlFSHlzUDJNa1h2SzlDb05vblJnSUJuNk9hN2VPcU5LK01lM08xQ3hvYzZ5cmJRY2pxeW5FOEYyN2xLVTA1ZFJXQWdsbzBNK0IiLCJtYWMiOiIxYWI5NzM2MTRmY2VlNGE2ZDVjZjU2ZTFjN2ExMDc5YTRjMjZkMTQzOGQ0NTYyMGE3ZmZlZThlNGU2ZmEwYzUwIiwidGFnIjoiIn0%3D; gscoder_session=eyJpdiI6IjNWU2J6dnRqMnZacVJvZWN1cW8wQ3c9PSIsInZhbHVlIjoiNWdDTzRYQVR6N21wcCtQUHFkeUQxUXZraVFMdEk1K2k0Z3RpWW1NL1VrbXg2V1BFaXFzUzlZWEo3TU9hNVNvblY2UHd2Tlh1ekptVE1IbU9jeVlUa1JuZzh3TTU4RjAzQm5sWVBrZGZMcGdsR0dFUW5RK2lycUVtdTFYUE9UMXIiLCJtYWMiOiI0ODIxY2ZlMmJhYjdlN2E4YWY4YTRhOGU2MzgzZjcxNjljNDc2MWQwYjU5Yzk1YzdkOTJiYTI5OTc0MTAxZGYxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 796\r\ndate: Thu, 12 Mar 2026 16:09:13 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-13T16:50:49.22169Z","times_seen":46881,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}