{"report_id":"854f24f0-2bfc-4fca-9a72-35ec02ed5215","version":6,"status":"done","tags":[],"date":"2026-02-16T13:31:23Z","url":{"schema":"http","addr":"news.specialfors.com","fqdn":"news.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"104.21.85.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"news.specialfors.com/","fqdn":"news.specialfors.com","domain":"specialfors.com","tld":"com"},"title":"PUBG MOBILE","dom":{"size":374,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (374), with no line terminators","md5":"38dfbc2802d262ad3e5719bb12c6acb6","sha1":"37ef6028f241c8923f44cfa030f7eb78492189b2","sha256":"7075aa15f87b08904e390f5c9b1ead4440c4febbdb17982464cdf5a6e5ab8db2","sha512":"c938c40892968ad1e58f30488861c15d10daa1872b5047153d771f957f77589d9b4b2244faf3193fcc3a30177219aab5f9c6cd0eba0a46ea691ee09c597bd336","ssdeep":"","tlshash":"21e068ea4c6ac4285ae0028a20b6d29c2a1021a07b12a60052dddca98a10fd78c43c88","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"news.specialfors.com","fqdn":"news.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"104.21.85.93","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T13:31:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"news.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"news.specialfors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"news.specialfors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"news.specialfors.com","ip":{"addr":"104.21.85.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-23","domain_rank":0,"first_seen":"2026-02-16T03:25:17.840941Z","last_seen":"2026-02-16T03:25:17.840941Z","alert_count":6,"request_count":2,"received_data":3117,"sent_data":936,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"gilang.fortoday.asia","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-26","domain_rank":0,"first_seen":"2026-02-16T03:25:17.846898Z","last_seen":"2026-02-16T03:25:17.846898Z","alert_count":222,"request_count":74,"received_data":3465746,"sent_data":34670,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-02-15T23:01:11.547642Z","alert_count":0,"request_count":3,"received_data":264152,"sent_data":1347,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1110,"comment":"","tags":null,"fingerprints":null},{"fqdn":"site-assets.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":380600,"first_seen":"2022-02-10T06:20:21Z","last_seen":"2026-02-12T15:02:09.112918Z","alert_count":0,"request_count":1,"received_data":512727,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":25736,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stackpath.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":21970,"first_seen":"2018-04-05T04:41:29Z","last_seen":"2026-02-16T01:08:07.956389Z","alert_count":0,"request_count":1,"received_data":31896,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-15T22:26:45.957139Z","alert_count":0,"request_count":4,"received_data":286278,"sent_data":2081,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-15T22:32:42.929582Z","alert_count":0,"request_count":1,"received_data":18383,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.pubgmobile.com","ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-10-18","domain_rank":76737,"first_seen":"2018-04-27T11:06:13Z","last_seen":"2026-02-12T16:35:31.425288Z","alert_count":0,"request_count":1,"received_data":6413,"sent_data":463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-02-15T22:47:07.321489Z","alert_count":0,"request_count":1,"received_data":93697,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5789ed90a223c679b87ca0eb354b0611","sha1":"f52c146ac0936025fca84293996270f443e4f74d","sha256":"2a03c7059da760708330887bd0db13bf36a8545ab4551b2ef1cd42c1a9d19dee","sha512":"5076a4bb6bf69d273c9959e0c6396706f1b37f1382384edd6bdbe633396e428ad403f989908a25a17e535d5cd2c78ce242abef96db24995805b29b687e611bc9","ssdeep":"","tlshash":"f1b0120043fd7234264510c09315fa08dcfe8a32d11c51108a1f39e84d82b0c50f7364","size":99,"data":"","first_seen":"2024-04-05T07:59:35Z","last_seen":"2026-06-04T17:36:17.925981Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@0.3.8/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","size":17266,"data":"","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-06-01T20:46:52.163383Z","times_seen":1625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/slide-notif-zone.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe5f9cefd8cdeb7223204985d4fcff9b","sha1":"07290f0580629134fae84811d25cf7e4efc1429b","sha256":"0876d5efeb88bbb02434e56b729b0285c11cbedd3c5ab2b5b7b18a2f8d89d240","sha512":"4e03d07e6893ddc0d9dcc0c76707e139096d8d83f30b2511dce95f04b1f91ec31446ea2ac931bf8998ae3c9f91444cd515b176cfc1f9ba3bac0e7d0c518da395","ssdeep":"","tlshash":"08f08b0db664293d49e3a43c1e5ac90138e80d008e08bbc4f8f860578fb0e252aecaf5","size":572,"data":"","first_seen":"2024-02-22T16:27:46Z","last_seen":"2026-06-04T17:36:17.898417Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/scriptv1.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e270af607dda93c863ad433b2eddcd91","sha1":"bf0d1dba2a4298c3293e4b3e820c81ae581890b2","sha256":"fc46a6567798a2fce34eba8fc0aaecc9b0818842e786acd4b7880f51cf5784b4","sha512":"2975bd918a9c170b226d23ee3742f7cfc96a3257a793ddd21fd422e130eb6136b8ada25db7d6b158a461bfceddea75b3a71fc3b4f6c8cf10a5d975129862b385","ssdeep":"192:e3FQCpC164YFhuj48+iif9v4xqY0D46Mwi5GwYF5WL4cSiI8KnxqQcb4/MZiPt:e3FoJYFJhiQgxqsaiMwYFx3iOnxqUuil","tlshash":"58328d48f35e1e956e3380ba117b50102b6d6c1b1906ce0cf86d28d86f91f6dfe7a94e","size":11584,"data":"","first_seen":"2024-04-05T06:22:58Z","last_seen":"2026-06-04T17:36:17.909095Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3789d4fb79963282dfef557627a15450","sha1":"daba5468a25a4352b763de03e3547012b83849ec","sha256":"cf7374ac828d0a7f3e74627ed80752c2ab4af2e118e5077eceaef4ed715558d9","sha512":"8c926dc6fbb063e41344e8d6871e09314fbf56a66679a3ab8d679730c973a8738037e2bfc855d78c0f8f0ce699eb16dfa241a233decf6008c618fcd4998fe10e","ssdeep":"","tlshash":"49417c46f69f1d41a037387657ba42047eec101fe144cf1dbd6c26d40f286262aab6ce","size":2081,"data":"","first_seen":"2026-02-16T13:31:30.492372Z","last_seen":"2026-02-16T13:34:37.341274Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"news.specialfors.com/","fqdn":"news.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"104.21.85.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"728e6f14c88ac4502c5f4ea9fed28ad2","sha1":"b9ff0030f986419ea9a8eb91914709316eee1fb6","sha256":"d548e54771d1d3555d710ac1045ca6791adbd216b7bbc8f48f24d325c3fc2b6b","sha512":"f1b96151697544d76e743b6acf1b60eda76c219622f0241ede74532d70e8d863f25b3d0e78bd48ced0fb2a61e1136e375fdc2c5313c67097a2d993a8a03ba047","ssdeep":"","tlshash":"b6d022933c13a3396c89029a176fa0c8249646336915c034bcfab7000f70b436506bdd","size":207,"data":"","first_seen":"2026-02-16T13:31:30.493251Z","last_seen":"2026-04-02T03:29:17.49091Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/codeflag-link.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5674ef5a95b8f48ba0a8405d056ba0ce","sha1":"9991445667304928434eb128a38ab05902c38391","sha256":"595f1377e816f8f8f50b3cc558c4cf3f4a83a20ac45675b3e558b6aed1d0d42a","sha512":"5a3a0916c466dab4209820c2270e23da544432c26af5d6c6baaea7ec1b5baac0cebbb764a1afb48aea2fe55d71ac9b32f1141e78d86ba6f4655d3c67cb7f60c6","ssdeep":"3072:CsJjxDkcrFNjeNkWGlXQlXaDiNQOdrZXCiu:C8xAcvyOxlXQlXuPFiu","tlshash":"5aa4f092d6216b16f750b63841a67d89298c59db8cbd7d8876ed9b8c0f2c0be4f7c10c","size":462811,"data":"","first_seen":"2023-10-14T05:17:14Z","last_seen":"2026-06-04T17:36:17.847327Z","times_seen":464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-08T21:09:24.581641Z","times_seen":688712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/link.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a28e206687159182a7029e0b1e749ff","sha1":"540487c8f7fa248f41d20948e10bda345c2cd0f4","sha256":"73c092107d16d864acd39af84fa5dcadf7d31e798e5190c680ea2042ba30d8e9","sha512":"fa56776de14d07c4dd08bcf755a6a3e069a0ae80594d0ba4dc847d62edb979894a8dfb8bce6f531e7c5a5c56e01f360f0b62955365987077c7b6ec2836f1d74e","ssdeep":"96:VnHEWiHRwiKLAN4LSz7btQtMrAEevdlFLeN4Lq73hUJeJAJKE+6rd:lkWiHRwiKsN4t2rrgaN4XQJJB6rd","tlshash":"2ec177047a195881997797b6b0bb9440eb2d072f09118f09f8bc29c86f70f16fa76d9e","size":5875,"data":"","first_seen":"2025-07-31T05:17:41.165681Z","last_seen":"2026-04-02T03:29:17.429301Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"61f70b9eb2388834655c65d38ab8032f","sha1":"a7442b246d3f61a4c9eac8a422dc847663400c6e","sha256":"f18c055809fdccf3211aea0b90016849b47892fe5badd3315da3f663ee4811f8","sha512":"eac10f5b9a76827f508d0e65692509e2f9d7e207530def30a565c6bf80d2cf3669fef81aca867d847a039af36678a129e8a946954f3cc6260f23c4e849699500","ssdeep":"","tlshash":"cad0976708aa94384bc8004e20bbc3e97a5021e42f13360092deccda9a10d978963c9c","size":247,"data":"","first_seen":"2024-02-22T16:27:46Z","last_seen":"2026-06-04T17:36:17.930082Z","times_seen":209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d15a267e1603035366882d5f8c3cad76","sha1":"ef9544b44410e0167e9670a6681ffb2085116b10","sha256":"5c3f6ef201b14fd9285cfe29cefaf9f54b26395326165bee4ecfa3dc726fc568","sha512":"1a12399b520510da0fbfbb1fcdc5e359069b72fcc837ec0686a67f99ed0cbaa26e6c2f1c40136c58179aab35fa7cba34cd3d38c182d1d1cba7190e7960b7b382","ssdeep":"","tlshash":"5cf08b0db664293d49e3a43c1e5ac90138e80d008e08bbc4f8f860578fb0e252aecaf5","size":574,"data":"","first_seen":"2024-02-22T16:27:46Z","last_seen":"2026-04-02T03:29:17.496179Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d6beeb24f4ab0589fb34a204b8e86b6","sha1":"c3b33b8df9e06df20982d670da6f264ad3d4c16c","sha256":"13fd30229b5067f7fac5667693cb8aeabc991bf32a24c7082c2f57fbcb5fe928","sha512":"f85faa0d8bc8690d00589910cfc637877bf545bd620d2962260fec6c683c8b17a7ac9e32e3f984bb566c7390ba54e3bbd0c5e7f0c7908827ccfc7b20eae4ff58","ssdeep":"","tlshash":"c6e0c010b6983f73a47f048c0abe8982c2080950f7024e32903ae0800f98bf43933b9f","size":381,"data":"","first_seen":"2026-02-16T13:31:30.496498Z","last_seen":"2026-02-16T13:34:37.343813Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","size":84320,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T20:56:18.65713Z","times_seen":15239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-06-08T20:56:19.658844Z","times_seen":228433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/slide-header-zone.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23fadc0c71e7f2c94c3182feaa7fd676","sha1":"e24a2dbd5148d5308ce06f9a00d110f4b9b9d328","sha256":"c20d80e2252d02ae778c0bc34e224a36962ea1ff0dd367b216e6864d0d168d45","sha512":"8b4f7cd53f65e159432ec5a8665d23cabfa4a17394d6a974bebb59550d0221f8bdbfd921c9105fcf53530b7d3c89492b72294a5221ac6ea8d588f0a95b9f3ce5","ssdeep":"","tlshash":"6af0a00295ad3c14c1929428ef69cd0364e60902880ade84bcd8004f1fd4e55f1df7f8","size":463,"data":"","first_seen":"2024-02-22T16:27:47Z","last_seen":"2026-06-02T05:48:42.998577Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"afc22e8e3be45d7aaeb1e024e07858ec","sha1":"5b581ec2739022a3dc0dd097639836f17ec22bec","sha256":"35b9e9004d8051dbbe521c55faae29e39e646ca56fa654232359be58e42fc66f","sha512":"9cf66f16c8ba57f8565cb0792f3f7b7cbb43b97b51c1011a1f14c1bc81c4bb92d2b9ce8f0c01a6f19dfb6223cfd8893813db97760cd0c098e7d03813aa80592a","ssdeep":"","tlshash":"0a900441400d3354c45c03dd75d00534417c437044374d14d13d4d3f5c0444035dc504","size":39,"data":"","first_seen":"2024-01-05T16:39:51Z","last_seen":"2026-06-02T05:48:43.055274Z","times_seen":422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/xgoogle.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7178130c1983ed5d91af1c23a89f5ca9","sha1":"2786b6a14b4bd745fa29e3d65da01ea0e6e74f4f","sha256":"e68690c05ba5f036ea0f2b538f3923136129d9cfb486a09d4049b94f4287298a","sha512":"eafbbc8789533472ae8ebfc9405d3344abe5d5f0f33cb69945b71ad272156d2a8851920964084d32e4bafa4afa3c43ec649300ccd8a6bf2970081dc37597d58b","ssdeep":"96:ORPgRiv6Ye48stLy4LjLFLlJX4MAP11lOZL6xgSIIBKut8LYLWLsLfBPS5YgP65V:0dZ8ste4vJGPicCwqnW","tlshash":"efe17f0b71291e9f9976d67622b64014fe7c481b45018f08fcac18c82f71e46bab7dde","size":7065,"data":"","first_seen":"2025-07-31T05:17:41.146124Z","last_seen":"2026-04-02T03:29:17.482183Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ec69c8e48ad3340cd21199fee4d22176","sha1":"41f0f06b2ddd5f6fd0628e039ceb21083535d5b2","sha256":"a0fba378825972e9cd7603ac55faf53647443c09dbd24cb5eb8ba7992cf3f478","sha512":"e4ef1391906f793d2d3c75bcf3d9e1ec9b3bbabbe98b4328d89c7ddca4e204921143f293528fc5a2b97559e2f32662ce8cc534b4aa865aedf360f2ee996190de","ssdeep":"","tlshash":"1471afa4ba5d2fa955fb007905fb8681cb384656b2048e51b82f64c82f4077cfb31bde","size":3554,"data":"","first_seen":"2026-02-16T13:31:30.498913Z","last_seen":"2026-02-16T13:34:37.350708Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef1d511f025dde9c80da61f06f6c15a6","sha1":"fa2bf4ca1813640e8baea42a7c3b8d2a25269b45","sha256":"7ba579fd20a1d26ad13639edd8b7ee230b0b854a781f2f1299fe46c8d0991db5","sha512":"5587ca91e980cd20e440b35e77b3d216b5afe3d0692343b75054ae65e52069548ba4e200b8e6addb3b756c9779220809ec6ebc555cea971146ea17b4dd8e3bd9","ssdeep":"384:zwZrawUBOrlEYEpJxw0MKErNm63xeY/W1b7UIuYS9iG7GRqtHk74JtRR43D:8R+OdBa1XUIuY4asliqm","tlshash":"fd9231cd34d7b438627f80f6041f55abf79e69d06d1c281689309ae4bb31338566afc9","size":19844,"data":"","first_seen":"2026-02-16T13:31:30.490722Z","last_seen":"2026-02-16T13:31:30.490722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T21:16:04.252453Z","times_seen":364199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","size":92629,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-08T20:58:18.855781Z","times_seen":68627,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.10.2.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"628072e7212db1e8cdacb22b21752cda","sha1":"0511abe9863c2ea7084efa7e24d1d86c5b3974f1","sha256":"0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988","sha512":"3aa68568ff2592ead412a0c7f5c39abc37ac562f00b7c16af07cd5eff881aadce77ec71040b36c0ad9c2d2aa4edd7744fa72b0f44cb8b485d4f283b1b49c2141","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:LGsKXlI2p0WPSbDrstfam","tlshash":"3f93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","size":93107,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T20:56:21.740551Z","times_seen":15524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84245,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T21:04:56.239966Z","times_seen":58455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/scripts.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"713da5406f59ec303ad4d966e9bcd452","sha1":"5d562589e0144d07f5151f0d00cf68959300d204","sha256":"d2fe2d180334a8f5a594522b569c0a889863b1989222ba69b24ca8f54c55c3ec","sha512":"aa4efebc89cd4bc0d05562f3f302c369b211bfcb8f67754f2294f33ede89da1f114fdedd1d25d088334596230034ad0760d6be5bc5ad69bd48a6db0e74ee83aa","ssdeep":"192:jai2ExGnwSP/dlj3VM+lWiDFiSKWij7Jy1ihyTHvDfH2AuX:jaiZxAHdlj3VMqWi5iSKWiXCiCPDfH2H","tlshash":"fb027986b5d52c41a47bb8b5123f1158355c880b210acf05fdbca6ed2f22e279d76b8f","size":8379,"data":"","first_seen":"2024-02-22T16:27:47Z","last_seen":"2026-06-02T05:48:43.033125Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/senderv2.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a331c1236fa6f0dd6c9f3f9e98df2e9a","sha1":"5121042afd07566cb65f1046310e6958972db704","sha256":"add7fa0bb5ecff1a86355cc79ac10ec188fc78981ac88911a590b6d53692f034","sha512":"86251be8d03f0ca5f409f7ed03854d31bbc5bd0f97f59fbc7790da1ab3c8911b120883926911afab8a85ba1d19f06ee1a9959a476c28fcf0ad2c42c9e8cbe463","ssdeep":"1536:uKQY+JGsQzbPOe28QUm+I8jKqmLSIPHchdaevC1sGlIC1q5Y:pbBan+IZLSIPHchdaevC1sGlIC1q5Y","tlshash":"669340c176c17c8603876b76371bb1e6e53f4c986184899af110fc90f4f9a22fae56b1","size":93345,"data":"","first_seen":"2024-02-22T16:27:46Z","last_seen":"2026-06-04T17:36:17.867099Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"144bffff9bc215bc77329cb945cd7565","sha1":"1ece1d762ac51e8e2b8cbe9290cebe43cbf33269","sha256":"8661d6146148939339287071b6e170764825b7e00d317675b0ecbade3041528a","sha512":"71c00e6c2eab2d8765b9d846df332046e6d9c44c500c66cc6ad4e0232bd3221b10c1ff8eecd587bae4af7282d09dffa21c31b9d2ca56d17e938ffb2dc5c04fa5","ssdeep":"","tlshash":"72112c3920e8613ec7c6609e217ed7ac3e7c20523a07104091addc9dad10d5bd82fdbe","size":1076,"data":"","first_seen":"2024-08-20T07:54:13.058618Z","last_seen":"2026-05-09T20:48:26.088866Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"76329b4f309ad0211bd98453fff68ac5","sha1":"50bf5e047121af855a3d42a222c9143d86c8d091","sha256":"b02a058152f38597d83528c997017bb74bf95d4eed4d224883a406a4db4236a6","sha512":"86e58743956467fe7d04af40720fcfacfc6c455cf7d790945db1d9db3b59530291b2ded12f6c54fb86be047f31e4c88cef782d25144ddd6bb6a63e03f92c2d49","ssdeep":"","tlshash":"20700000f030c0000ccf00c0c030000c00fc0300cc0c0000c03003f3030000cc003330","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.37928Z","times_seen":1176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a1c6b372448acd4925b2d6d2ec1a69fd","sha1":"93d1d5fade913b71328130aa3bf7e11621dd7620","sha256":"a47fb74d2df6ec243a96b3afb0a02569398d11e82a11d77acd303fe9c2ac83e4","sha512":"0c27a42c6ade1cd6443fba3829a36f40d366ef6cb0beb8f2002ca1726f6e81c0b1df64a0a08b5a61098b6bd3b46f888b27df00243f694a85373a4b23e381ecae","ssdeep":"","tlshash":"8f700000f000c00000ff0cc000300cc000f00303c00c000cc00033f0030000cc003f30","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.374956Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5d2dc822e8d4f0b306ca69e54950679d","sha1":"ec5cf0bb110d219d7e4bda5d14c0071c703cafd7","sha256":"374f328ec9257ea51783a844612b0d075cc7ecc70805534c0224f44adda5e069","sha512":"af8d84cbf0093e0a52753c419f82290b88aa4447ce835cbb5deb78afa02f8b7499b160dc86850d0bc7aacd72f6a5a8596413132a37d8786c5e4cc92637cb5ea4","ssdeep":"","tlshash":"d0700000c330c00000cf00c0cf30000c00f0030ccc000000c03003f0030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.39871Z","times_seen":1104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"57574f53b6de200174d35574df1da053","sha1":"2fb004ca614092eee28fc45611cdeca1d38ad065","sha256":"c990e04237a0fabc10c638a3340f0af26b4555ddbc373bdf453ff00910afa15f","sha512":"5ec41a4d16e518bcce4c65d4ee0a38bbb1b404239f41879331c7f9f778f874b8080190c132aad624fb58d0ce29de8d8f3aa7ffd7d03ea1ed1c9d386ac4039b60","ssdeep":"","tlshash":"a17000030000cc3000cf00c00030003000f03300c0c00000c00303f0033000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.425076Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"709dcd1b74993ea1d86ef30bbe75bda5","sha1":"49c6ebfdbff7a45a3af735dba2494fd9ab107b17","sha256":"4ad9deee352fba0870bc0b6f55370cf953f8a042e00c7ccbd3bceb16592f4df7","sha512":"c8dec8905a9450b9946ef6fb015313c8151828c304abfc03d00f43fa811e72c40fe57fdea7ad8d9a10488773240d88764232ede6e51e0f8150443a56ebf80ffe","ssdeep":"","tlshash":"9970000330c0cc0000cf00c30030c33000f03300c0c00000f00003f0030000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.404699Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c2274bf4d3d8c56c24099c9c6c922129","sha1":"f9ca14e62356c3d1ac19c1cfbaf96bd721bcafd9","sha256":"da55c710a4bfa6102e7212e9685e1e6ca6072de478b9b5a4ef73fb629043b9f2","sha512":"5b98acfddcf6c7700219b2f584de898054fed132c0f121c6dbb0a620299de9e832ec621f3df038d9d2790ee8a8864836607018c4930b5a07f52b9933df1e6b89","ssdeep":"","tlshash":"fe7000c00000c000c0cf00c00030030000f00300c0003000f003c3f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.40521Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"596e6606d7c4ede34de2935f3c6c187e","sha1":"d3ea84761e98142b91559b1a922cea287a5a3011","sha256":"a6171bc58c97c84152bf23c4cd548779070196e84b8ac898f0c3f6c573bb372d","sha512":"11ee51f329da90ffee3848992b6ae5552dd9449e67ec5073fd344c7c801b1a52a4a3debec85f38b7479763fe82b0a55b6953fe98d593e7ae83dbe8787f91fc82","ssdeep":"","tlshash":"1d70000000c0cc00c0cf00c00030030000f00300c0000000f0c0c3f0030000cccc3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.380377Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b6dc090a79226495e9644bbeee756518","sha1":"449b67436c8785555c781956ba56a454515682bb","sha256":"8367a78ccb1e3cde37697b3af2f117e317393718fe68e566e6c13ef210dcc66a","sha512":"b846940ecb72d97808d5f1109f2b04c7ad24266490bb85b416b34b7ed607c09b58a3b73c2604caee225302f1978cc3d7f77e9cb786501c4fe173c5e482ebea28","ssdeep":"","tlshash":"2e7000000000c00000ff30c0003c00300cff0300c0c000c0c03003f00300c0ccc030c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.428942Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3c1546a94da3620e4978e2a646044824","sha1":"5308f928d39eb12a2d72472adb2be17ff63165df","sha256":"a00fa4d73a796073d56091271d0bccb0259527e76ab4a4174a145c41b4bf8059","sha512":"57e8224c6b737560edc2f6e830c0abb2be83dc7bfeec6d064805e88736466e6ab35a83a1b47f7417a8c8b167015fdd27f42097dc8c53df368930ef0c11bd43cb","ssdeep":"","tlshash":"01700000000fc00000cf03c00030000000f00300c0000300c000c3f0033000cc0330c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.408415Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2ae35f56a615f14d8728c7874404207c","sha1":"b41cbe47fbc97c9f18d854d5209e0871beb5237d","sha256":"a6effe7a48b7aaf9b0f0efb65395e3f6a3a0f74703508a1190c62eada4a95ba0","sha512":"b9c5391f5b88e07903aa418990a8c39c606c2c8e8f025ef762b91fb6aad3b3a180817e7ce556cbc005e864c2def8bd8a38efb449e3b8d459ebcd91f74779204c","ssdeep":"","tlshash":"0c7000000000cc3000ff00c00030000000f00303c0000000c003fff0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.41971Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fb95a63e798bbc1c52b2f422cfe52052","sha1":"03786e47acce519416eaea6350a4488f36ef2edd","sha256":"383ca780d1ed19d7c3b4a02d2b928ef255554880c51ee3317b58974bb7ba453f","sha512":"305c63fc47c7008d5f450ca05f6e575c4854405c550733b254c08b4f2f5a383e28dc2cf0519b0c987aba81d70c110a9bc77d3fee852799608c2d80d7f4cbddcd","ssdeep":"","tlshash":"f37000000000cc30c0cf00c03030300030f00300c00000c0c00f03f0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.392334Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"680fb8d8d22989bb18183258dcdf9f56","sha1":"57474cf81ab39e5b093493d0c35d048cbf466fb2","sha256":"2e2f7a853d7480bd50d7021551e427eadcf5e7814f07eaa47ee2542835a512c3","sha512":"7eb04dfb32439f24cc67ca37a6b2f9349bfa96f271a5e33f54336497a2bdb93f3528d2c1221a387f1cc4a2b2a982a48b313d3a84ee454cea5c9a42368e1166c7","ssdeep":"","tlshash":"0e7000000300cf3000cf00c0cc30000000f00300c0000000c00303f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.440825Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"729409264fc1bf2874651a3c16ed3ac1","sha1":"744d4edbcb9de5287abd15da414ac712e4ba7dfd","sha256":"63370806c302182c42c242c16817f18c7d204507c31a32957a241323a667b93f","sha512":"8fcf93166552d5f33e402fc5b1fc57a072ffcc6350e082e3079743c1f4ef9c4dcbefbc2686b0e424ead208d323d0d1415b4ef645f94fe3e5dcb8d1b8d0df6562","ssdeep":"","tlshash":"4e7000030030c00000ff03c0c030003c00f03300ccc00000c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.404188Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"160edc8db45d8cf1db6b306e01b1b522","sha1":"eb3cc2404ff47a884d1b38f4e5570e992c2b28c1","sha256":"5c4db52d774d189e67be581f8cf0a1be27580d903ac882f6dc8fcdbca5d4dc89","sha512":"4966aec1d737a12b8e232a53a8076ffa14c7ac1952e029b3081cda99be00538b3ad23f6f692e7fdc7182c83e19f63150249277fc2698d00b99de29865ce9a052","ssdeep":"","tlshash":"d87000030000c0c000ff0cc000300cf000f03303c0c0c00cc00003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.414136Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7d5854ef579b22b85a1308a464991cbe","sha1":"bca2593c39b377d192b5be3d23f73a6acc1ba9dd","sha256":"ee855aef125f82c560259778b792cdeb143dee61b40be24ae78345ba96ab07dd","sha512":"aa5d5459522b9787974eb941675153be6a008962ff4e0bbda6c7e6844b1ce2de8058cd99607b903c9bfd509b9df5cc8e6c9c84057a673d6ed2e764fef402cfb7","ssdeep":"","tlshash":"4b7000000000800080eb08c000200a8000b00b22c2000008e00083f0020000cc00b020","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.421378Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"54fa6a1a732804cb2eb71846c1c88c85","sha1":"ac48a7381ce0cea53de9797bff9ee3d827e1c50b","sha256":"28776dcbc8585ccfedc6125ab43dabb41c1733e77220bddc30365376adf9de4f","sha512":"da8a3b293933d9dc8dc0ab18576eaf6b25990ced15a13b9b5060bf8d20e27fd1a99e8046a6c42b648132688fa3dfaaa4bf821e5e4aa46f6921bd5db15f7859c6","ssdeep":"","tlshash":"227000000000c00000cf00c0003c000300f30300c0c003fcc00003f0030000ccc030c3","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.391321Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2411b0302e914ba65e0fa282ccdb294d","sha1":"7665ae057c875df2a3b5627aed7505144d01ca47","sha256":"dd6dc2cae94ee25ed18e37d5129912d4b59c065c9b4544948d80bd1a090d1f26","sha512":"e2144977c5cc76500630ca96ca8fa541941756df32b7269cd6bf2b280084afd9e8cfb390c079044b5c6a9e34a433f9bd3b074b28b70ef0e851d1f524e288e7fe","ssdeep":"","tlshash":"bb7000000003cc0000cf00c000303c0000f00303c0c00300c000c3f0030000cc0030f0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.381929Z","times_seen":1153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"35411849173c3d4db532cb75586fbeda","sha1":"068c3c37cd989d0b2ac9ba507218914b98f9194f","sha256":"419a2e337ee37ad5e724a3f328d81af33322d8ccacc12c9e4ce5e4e39fa2e757","sha512":"42c0cda45a2d89162022e03a24e13c26d5b8d295c1c35695ee166112aba2afd392faf318425b42a7e7f358b3d2fbe063199a39219379e9b00575d47b77e7ffc1","ssdeep":"","tlshash":"0b7000300303c00000cf00c00c30000300f00300c000033fc000c3f003000ccc0330c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.416374Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"162f95de2178cea10bf79eb715e4d3b5","sha1":"0ac1048b6863928b93acc3f91cda49b162326c20","sha256":"661cc1cfe956c3e47afe43542b0956d36df0967d344be3a5abc13daf7f6f9646","sha512":"3ccb936c27af9f0c47ee2403d14551ef6274a514c15fdf816235be81f54755db6d6262a19448ec509bce35e5fc9492dda6c6029cc8243a9eb87bd17061239c62","ssdeep":"","tlshash":"1c7000000000c00000ff0cc000300cc000f00303c000000cc000f3f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.38721Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f647cf4291b3514acb6dfc5903620806","sha1":"77b87aa14c8a186cbfa31490eba508307ea1b58c","sha256":"745aea14ad1731fa076e2e237af3006c8c7a0ed94379ba01dbe3abcd0947efc4","sha512":"b419afcd49f5ea3fa17054138528545eb2e18f90df61ed0332b640d1004b36616a2d1504bbbb9667ef76f3291f61e5b47bfd431db9e01c38b540b02adf27fcff","ssdeep":"","tlshash":"6e7000000000cc00c0cf0cc03330300030f00300c3000000cc0003f003c000cc0cf000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.397035Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d376a619d339b30958e60e92b3613146","sha1":"28cc836bf9fb7b587bfb4b7159862e2adc8d432e","sha256":"ff4ce15fa895a6743337778c3a010eed23f7ffc99a2c50f64ccfbd6ca4e76dd1","sha512":"831107c930076ad9ea26c88529a8e5880280c768b5a88ae5a39243b051d256c860bc443734f82e086853b1faf89fa9a7179faf8842db03be7ca8bd54cf302159","ssdeep":"","tlshash":"8a700000f000c00000cf3cc00330000000f00300c30cc000cc0003f003c000cc3c3300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.383476Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3a3037c3b96ff0a3193bca0e7f88aadc","sha1":"76a57d086b2730b9f8ed53d9d436cec27afd6f25","sha256":"427baae29ffa2912b54f3efe7289d6feb962258dab66f3e66fe7f97a74c05781","sha512":"7816d8cadde05ab305d89cbfd7942d9bd1cbf53c42ee1e8ceb55f365fa0a96f4872973ce2ee0e6ce106811e44c96cdcedff2f0a261dea361130b9efd6f351859","ssdeep":"","tlshash":"777000000300c0c000cf00c0cc30300000f00300c03c00c0c00003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.413549Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"914dadef0120224114573295cd60933c","sha1":"c4811ce68cfbc54e1eca2c2ba1af8dd6fbced84e","sha256":"c5cbce3172fffe2ca10ef64d85ba4b2ff52cf3989e7ba4a04b3024f50efa5f31","sha512":"b7cb7314338437d062c4f2ef28bc9cff735642a2069400433f888087d3c7eeb713267fffb8f1775fbf3a32c101bfec2479086acb8c599a3b06071d80d4604947","ssdeep":"","tlshash":"a47000000000c00000ff0cc000300cc003fc03c3c300000cc00003f00300c0cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.393392Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c063106f27cd1452ae135f642e53eebf","sha1":"47a5ba2c254149265ba308a7be7b39924ea90b2a","sha256":"7ce37963c8c42196e5562cd6f4804e4e7eb5ffb3d9393e0e8404bc55f6113cba","sha512":"648b8a67273dff0b5a04c9d760335b8aa48cade46cda4103f1ed56700f37cce7e0d7272e8f07ff6b8f670d2bf4eae2c94c8b4be0c5b07a80b84c2ebe3a9b59c4","ssdeep":"","tlshash":"aa7000c30000c00000cf30cc0030003000f03300c0c03000c00303f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.376742Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a33748764d90c55aca2d7c5eea289616","sha1":"5d61e51294395a77b6738e3a7f82be2478f9d801","sha256":"d6cbf00237a8151746b2ebf6ba332d9f62d6981fc2b717b63e7dc5e70e026c2a","sha512":"070c5524dc825263f91ea4105c025736e0dac1e279b3954369f8256a7f579db9253f3bb1452adbec670d6fa938edd0f12635c36e14fc97009daeb352f0484749","ssdeep":"","tlshash":"7a700000f003c00000cf00c00030000000f00300c0000300c003c3f0030030cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.415817Z","times_seen":1158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8fc40ad6c73bea5a889fe64e47f00b8f","sha1":"cbb493e570ab2e501f3932563bb18efdeef3b2d8","sha256":"499654ba55a697b3ae5283cac5c035e0f9c55e1c887d2c53b8a9097857b65c4d","sha512":"82f81e389295414796c1f64624959edaedf897b3fe42e61033423774d5d271f7ae103b76a9f7afd6460033cf875c735a84d41a0a00b60cc05b94985f23d5fba2","ssdeep":"","tlshash":"b77000000000c00000ff30c0003000300cfc0300c0003000c030f3f0030000fc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.374327Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d04ea7f0b92f18997d7780e97ecc7005","sha1":"46147adf20a41b5c1b52c5f72e9204dc76ca23db","sha256":"360fa8d722755207a3463bfc054ad79c3c49db3d6062f57977f1eba3ce662d58","sha512":"38187574d19d2a12d968c8e5e1737513fae42cc0dcd060b95dbecfe2387bfdace3f31c97b02cd6d7e72cdf59522bab394081b241e6f68a2e057c9466aec58141","ssdeep":"","tlshash":"357000000000c0000ccf0cc00330000000f00300c3000000cc00f3f00fc000cc0c3000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.411467Z","times_seen":1160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d90560affe7012b8f8e4cbf45b4ca9ce","sha1":"6cf02cda967c64f7b85bcfde72f88c7c53623f38","sha256":"0a0204c41ed0bf5389f077f49cfda3e0acbd1a5941414f8c0fc74ee91aa81581","sha512":"6d2e8440ee6619970f1bcb5c47f3eb2e4ff5a165df28ad2f575abcc907550aa87b03f690a85b6eae7b74c5318faee536200d903c48e4789f67f68918062da183","ssdeep":"","tlshash":"407000003000cc00c0ff30c0303030303cfc0300c0000300c03003f0030000cc003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.388243Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"647fb2e887881e7a43e38681c7fccfff","sha1":"3aafaaa41604b57786f6c68f552b18ddbcc2e3a0","sha256":"bd46d9f7163328d6cfe6f1ffe092d73d4bf31a10b7c13afbbee0819760113b4e","sha512":"2f9a6b2d96dc4b348d66061119840555c162a72b650af7f677103c3403722b8314dd35102f624cd17dac6f8c3ad138c90d168336427de405273e14599e1d20cf","ssdeep":"","tlshash":"8c7000000000cc00c0ff00c03030300330f00300c000003cc00003f0030000cc003003","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.395957Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d8e70e433e262e3409d713393b5055de","sha1":"279d1b9c1b4f513b80d1b5abe34e691269a5642c","sha256":"a4627a0619402e40b332d3152fcb46564ee28df15bb24963393da28364090d20","sha512":"dfb0974cad223dd5a6202f9ec965c017270249f08f8b43765481167142e3c67b93730dcf06c76215a3235ad55ba89d4f545a922f1c3e76f83959593e71bafb69","ssdeep":"","tlshash":"86700000f000cc3003cf00c00030300000f003c0c00c0000c00303f0030000cc003300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.415257Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fcf74b4a77f8a18258dfe246846fd85d","sha1":"4c9f24c70f5d69ff80690a78e47f62c2ef9b8fff","sha256":"7a519afdf92bd1373c0aa3900c6c455811f624a070d68cccf5da124e6579f54c","sha512":"dc827220ccf2c5ec3426f6a80bd9fae99c5659bc936d2baa4fba0b9c07f6bec8664dd0e0809f6221ddf4251b3f278ad7e71b1e4a9b738b440773acd1eec295d8","ssdeep":"","tlshash":"167000030000c0c000cf00c00030003000f03303c0fc0000c03003f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.414696Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2407ddb62e965883f20fa23c826bf328","sha1":"8870fbad82926b2a51ec8f4d96b0dea661f54d0a","sha256":"87484b3dbb15f32dfc8952ebd6b9530b83bd03c1693c2c0a870db80921c241a6","sha512":"782f1536b2910e0a2aa1400fdff8716039a5fe468b99cfbb3a1d4ac342bb07a9285cf69eac395392d330c8dd044f887b017c3fe0b5c6a818636146b6c1cca1bd","ssdeep":"","tlshash":"267000000000c000c0cf00c00030030300f00300c000003cf000c3f3030000cf003003","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.405779Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"892073ca8ede08c4c19af3b85f4738de","sha1":"eabe1476df968605084d2546e97ee712e62657b8","sha256":"ebb8dddc409d0524ba533290ecbe2f1c59ada52063109d097a5617ddd53d514a","sha512":"e9f5b86eb6dc832694430db0cbb55360951151a9707f86d7eaa92d7e965efdff635955461fb743063d776952c66e55ba4e3f3e8d8af6a35f3fdb141dad5cddf6","ssdeep":"","tlshash":"b670000000c3c03000cf00c00030f30000f00300c0000303c000c3f0030000cc0c33cc","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.382948Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7a2758e340ecd0b98d3fff7299fd1893","sha1":"d62c034d608bd0dff30b756d7f4bc19bab964411","sha256":"967ad897643bf218aad6f18ba7572b8f1ab6d3f577b1dcbcfa82cc9deabedd47","sha512":"96ac99de4e50242ca218de5dd6144dea587dc6ce908df609b93b98c856c931ae3259268a8bc4f1bb793f0971a60988a59ce08250a0a4f705f982f4f875e621d5","ssdeep":"","tlshash":"f4700000f000c0c000cf00c0003c00c000f00300c03c0c00c00003f0030000cc003300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.398074Z","times_seen":1079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"af42124fb23866e29287836fff6d3896","sha1":"8417cd2acf7b2fb483102d54c5238f91da85deb9","sha256":"1f0008a619fdf98128a6bd9c386f8f8b41254adcfec1a1195d46009568c67b63","sha512":"509f7c7839b5b13e88812ba21ab0ee059f9d014ea4c7a5075fc06b2a77e4879cddb1f14e9daec9ba10661962fabba400a2a6a2d43bd7d272702bf925f91daeba","ssdeep":"","tlshash":"d87000000300c00000cf0cc0cf30000003f00330c3000000cc0003f003c000cc0f300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.440041Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cac42769044d0dbe5b683086ab70007f","sha1":"451bc1076e896baf8c00f8c311abbd65f85d50b7","sha256":"7559e26f738b52c0f790444412c346745de4d13ebb8fcc28884862560cc9519f","sha512":"faf3d66955fbf279d054c7dbe0dfe116540eb7aa7e936aa91256810a1575504b10cc16dd0bae43036fd258d7e45b5b95dc78c9be951d85ed953c97b05676d0f3","ssdeep":"","tlshash":"987000000000c0c000cf00c00030000003fcc3c0c33c0000c00003f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.390798Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f5cab08d58af1c86a04a9231f211264f","sha1":"f2d69d788b83bd5ae40c26941d0c498b2fffd6aa","sha256":"f17b1d59157c1da10c25ba260aee32275310e2af951352611a5d40acee244cd0","sha512":"96a611175cf28ef88b66dc11d964de97377dc8f8b0672a69e311b96fda1431cc9f9de700ba3f3f210ce8815cdefcef15288a2e534708771f6796e25117714132","ssdeep":"","tlshash":"f07000000030c000c0cf00c00030030c00f00300cc000000f030c3f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.379856Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e0783099007df1ed28a11c3e447ea74","sha1":"01fa4d2d862c8d4cec527823cea2028de9928c5f","sha256":"afbd1461a80f657118dc4824a30e2604804026fabfcbe6ca2ab93458a53e8a82","sha512":"14c544dae3baa5f2d7016724721219a19cbbae2db8882cc64c0f14ed37eb75dab6cb29f8c920c6b9a468785abc6d5973b1fa79d4d9971c17f9368e3c35b4caf8","ssdeep":"","tlshash":"dc7000000000c00000ff30c00030f0f03cfc0300c0000303c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.394475Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0aaabba7ccc2505b6870a656b6819d3b","sha1":"5ee2b0096cb5a7a03db1452893d0f0efbd3f051c","sha256":"f32cced9669187aebe75ba41a8f0d897a27cb02bbcd5dcf0ad6dbfe31cc208a0","sha512":"793ef6b9664aae05ee972825cf2fa3b60dafbae9706788a1f4cbedee19d357fc9ddcbf7107f0beb2a7ae1c2f29794568e9cf39ef16f17ff2494ceca583f4777a","ssdeep":"","tlshash":"eb7000000000c00000cf00c00030fcc300f00300c000033fc00003f0030000cc003033","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.389778Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a9760db6ce462dc40062b65a940fb027","sha1":"7d6f111c75e4d5b4b061f8c6c81692883e80fce8","sha256":"a155a9d1fd9ba999b8a5e384a89513097831bdfcec72082c4b7d8dbc74439af1","sha512":"39043af135c03ec7de880b015885544057d9025bd8946223ff960a53f2c9542cd047a2af08893334d158dfe2be0baadd64c3203a546f7b6afb3a1bdb6f6ebaa3","ssdeep":"","tlshash":"e470000c0003cc3000cf00c0003000030cf30300c00003c0c003c3f0030000ccc030c0","size":18,"data":"","first_seen":"2023-03-12T16:21:53Z","last_seen":"2026-06-06T02:23:39.419161Z","times_seen":1164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c03b9a1c6d2d1376ab7110b920b5d11d","sha1":"bc7832ff98ec68e189cd59bdac5faaa8cd059747","sha256":"ee40c4a368f53c7893aff3c16c8ac59dbec639ee5bcce94243e05aff45db1089","sha512":"a47089e16195d486038c9931dfc79e71b305f5fce1b8a9e8833d7c4b1a4a624800820afea5d86913fef30a484a13fc3810472df5ed28ce0ecfaa9ea68a758e6d","ssdeep":"","tlshash":"107000000030cc00c0cf00c03030300c30f00303cc000000c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.390286Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ada9a1753b25fc846f70be907672be67","sha1":"62284959825518893b665ebea6b031ef55df7f80","sha256":"8e135684ca301e393371d1b6ecd56ae0e4012f5385a482770053ccea41476ccb","sha512":"a06ab12c7912413e05ef2b7789f7703cebb3953697c92931067e032001fdea3e477920f0637bdc692fd97b871751283654288cfc07b46512a794954cefad3f09","ssdeep":"","tlshash":"977000000000cc00c0ff0cc030303cc030f00303c003000cc00003f0030000cc0c3030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.395445Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d2708560ddddf9fe2854103ea6095b0e","sha1":"61af9e5b5b5e96580a7da75ebc27c57debb6137b","sha256":"6d013dfe3b7e6304821534f0802b91d7ecb34e69dc880ef3efecac06a14e8a78","sha512":"abf7d0253c13a28b55acf9f7ed685efaf639d70e888e7d3b4e3f26b7987f59b83bac1fbad72f217600bb8691e179f3edf910e82b9218201d9e4c2283a2813b53","ssdeep":"","tlshash":"a67000c00300c00003cf00c0cc30000000f00300c0003000c00303f0030030cc03300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.412989Z","times_seen":1107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4faba762a8b0eeda162b204eacb9c3af","sha1":"9b9ccf92f9811df1df8ea6d9d4cd650f8719d23c","sha256":"67a750f06cb8461db3c08f09cd4cb51932b8f99be5afc6e97b094be20ff17b45","sha512":"70e70ba41601a9fe1ec144ba99d592332ebfa2a4d4d9d79a555622155e0764be03d2d705df58c25380223e868e2ce5c84a44c54a95ddb69acf49519517d533ee","ssdeep":"","tlshash":"6170000000c0cc0000cf00c00030030003fc03c0c3000000c00003f0030cc0cccc3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.417496Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2ff07b7af9c1223cc816428b9699a077","sha1":"2f7744b74e67feb8b4d37fd68c5b341e657a5d09","sha256":"947ba6e211b46fd494a831c93774e351a2114a2068306ac8137023a29c22d717","sha512":"04a6f8e6e88c4f7f7b3cc57f919c0751dff1f5189891e1725aa6373a72bdd597926cfda9e736de4ead977c6b5ce585b42c204b5c4bfdb59f7202aa5c1358d0e4","ssdeep":"","tlshash":"f37000c00000c00000cf00c00030f0c000f00300c0003303c00303f0030030cc00303c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.410464Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3b7cb9e898b2368382615803a65c75d3","sha1":"60fa902993681d254fde4c6066be68db74de2ed3","sha256":"38dfdd15caf30f9899d49a6422b73018cb552f873de5dce24d1c2bd01a72c888","sha512":"025b1331e59f60815a6bf4e0ecc18ee6a3a10fab697265e9acd05509478d5006fdc8fe9bb288e58e89fe5d5f8e1a79c2b2973711d5bda0b70ac68eab41b1b324","ssdeep":"","tlshash":"e870000000c0cc000ccfc0c00330f3c000f00300c0000303c00003f0c30000cc0c3030","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.4295Z","times_seen":1137,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6b917a41c9ce27526ca480713e81d2d5","sha1":"765c462784fa25ea41d89b454897d227b6c9c63d","sha256":"f0a7e368791613d36120e33ac4525e01c01d1c007fb79a454e761f4a95ed0d7a","sha512":"4d2c9b097d64b6ce6ddfca436adf4fa1fca59e53e6303571876bf285d597f3c64e256a9b43afaf59106a513eabacb5a8740440edafd49d8a047de1dae701a54e","ssdeep":"","tlshash":"cf700000f000c03000cf00c00030000330f00300c00c003cc00003f0030000cc003303","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.424006Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e4c7a3c9e72ec837c02a88cbf6b7a80b","sha1":"0444c709587d095566e6bebb1d03c22291bd0784","sha256":"dcc572e88b89cf5f1e285e3ecdf898574e421fcdc7edb5e215a334161e7a23eb","sha512":"c779a1cd14a13e9171ce59fec3f728e3e896e6527a35e041c758b215a964243e8cdc901dc36d1f1c14be877ea410e571c095d4dab75f9f13c03b09f60a6425b4","ssdeep":"","tlshash":"ec70000cf00fc00000cf03c00030000030f03300c00c0c00c00003f0030000cc033300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.403671Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"54dadabdb14c173b950fc5ac0647dc61","sha1":"100c82bb931eedb7fe034bbbbf0c1373cbef348e","sha256":"1d8d74849c3855d65dcdf22c44407e3b34d34279aff0b991e24c5a08a8f62b07","sha512":"06d0506a57fee7281352046a4baa67d418dfa6fea6d4ea8837d61b5e5d14ca5388d5b38a5cb4c59c562a70d5cd9177725ecb8d06846c3f422b1124e9d262be6a","ssdeep":"","tlshash":"cf700000000fc000c0cf03c0003003c000f03300c0000c00f000c3f00300c0cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.383993Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"da8268b7f06713dcb4a225ed4352c5b7","sha1":"64e26d66dbc71a35e56b995b7ed2952cd4416698","sha256":"4565f77725f2acb3bb1ddbd1a8154d6156bf0d399bc87dd62e22e5bd836468ad","sha512":"c27bc82eb01362abcc12fb842e191ca7707094db84b65e851fd51f582d3cd7f6d64ded9289adb6eac0b3c68b68dcebcae80fecc8c7deef08b1e0b111b85b5b3c","ssdeep":"","tlshash":"d17000000020800000cf08c00238000000b20300c2800080ca0003f002a000cc8c3080","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.4073Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"08981acc0dd5c00d58e592297ed2f12d","sha1":"6d917c2adac56ad56decf665139db8643f8713ac","sha256":"3e305db42daec26a98e6e0cf1a29a7c956a323a6ed1b0304409a505ebc7c5e1f","sha512":"8fdd6e777c8930635296eab251b9474342a23a3cb3eec69302bb16118e6dd0ce2dc2c81cf5a558c023081086dfd49cf356852fdb14124fbd442f77d7aece04f7","ssdeep":"","tlshash":"247000000030c00000cf00f00030f0cc00f00300cc000303c03003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.426207Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b85819574e5970e1d42dbe01ece588e3","sha1":"41f6388934d879255cce5ac579ad8081280437d8","sha256":"68a074bfbfb0580f9e91dc885af163fc951ece471b3e477e02d8aa4dcd869bf9","sha512":"28eab177ad1d18905a342cf1bd06b0f966b77f439d5c08aff247df832d6dea20465459f2a6996d4934c63ec4d29a819b7e0433d814e72c47ba1985e8c6927b81","ssdeep":"","tlshash":"2370000c0030c00000cf00c00030000c00f00300cc000000c030f3f0030000cc003030","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.378803Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2f5270701fdc3701859bc4c4c050d9ee","sha1":"709cb0666d8c2d6ac55bf7c6cdd5fdf10f3b08f6","sha256":"61c8f97e4290c1b6e5cad7f1dc88316ceff39ae9f8c6473c8868ea010875ff11","sha512":"c450a3f851fbcbac100d40799f38953e4aec92a33769a82b806bd5890ab6002294ea3ca9f268915fabec44a6071d30548fc83f813705734f048c6649cae874ca","ssdeep":"","tlshash":"3670000000c0fc0000cf00c00030030000f00300c0000000c000f3fc030000cc3c3000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.387691Z","times_seen":1159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6a0f475b9036eaf5ed81b8fbd3723157","sha1":"ca0eec508471941b33160812e50112521f27f317","sha256":"f552df46f9705f908d8c238fa31da2a9343a706c85c0d9e318b0f1ff3b82fc9f","sha512":"41735bf2674e8a77daecd6401ca8a7aa2e0dcb88d1c386965dc7952c0eabf6698f5aa87f37471338c92d3b67fb72173f43b06c09b1cb4783933b4aa016245411","ssdeep":"","tlshash":"557000000000ccc0c0cf0cc03030300030f00300c03c0000c00003f0030000cf003000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.42346Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d3b57cc7a3f68972d1d815b2b7c9d262","sha1":"d753b0fa88877e503d25cb2d4f84a46b742ea90d","sha256":"faf7526df94ba09d8201c854b3605295bd6c991b47bf736166a418e3f86ddf7d","sha512":"d7d485d7e0940479b9ba585364eea0baa6d4fb2058eafe38012c8395c1ba5a146d689752414d9ffda3c0301a22246eb83dd2afef3f426e88ae9f63dc3f4c963b","ssdeep":"","tlshash":"b070000000c0cc00c3cf00c03030330030f00300c0030000c00003f0030000cc0c3300","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.412517Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ce67180f52a4e213b02a73de699ac9d7","sha1":"406af3ae3db036d5e0a52bced3aa8502371a4cf2","sha256":"49b4dfb6858a942ac006505cb2511424617ae6f26d173aa2363f1128e32bb503","sha512":"611665a65144ec32f67bef90ce76a29c7307da770ae065743d3002a0e03c51054f2dc9e5a5850d6679ad016cb8c6c5431fca6fc799bad36e2c24606842ddf482","ssdeep":"","tlshash":"857000030300c00000ff0cc0cc300cc000f003c3c000000cc00003f3030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.409963Z","times_seen":1105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3881d0ce03d76f22df4ba5ad7b17e61b","sha1":"344a651785ec5e4e5ca05d468aece729e927533a","sha256":"b14632ce7eeab46e72d4414f3ea594402c906d09dfba025f62ef714681b8008d","sha512":"4df66b1782d046d9e34662bbbce7034c57230c0b57c66a00ed9d8f4842a77f7bc01be54ace550aafea13735ef1107ac7d7ec6d7bf0aa3ad9eadfa420d241f47b","ssdeep":"","tlshash":"ee70000033c0cc0000cf00c3cc30030000f00300c000000cc30003f0030000cc0f300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.424529Z","times_seen":1113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c64569b31d5a228f032c7af0dbbb959e","sha1":"e73d60cace93a0fba385efd2dda2fc91144b857f","sha256":"faff0e661677302655ef41c0fbef9c2a414473eb4fc91717bff201e5d58e311c","sha512":"5efb141ba1f51e65821fd3476d2ca7f73ec11a7aabf1cb3ccb2d533372eb742f7f49f24324e6ce044e5364558c0cb8aa41d6853ee07b30a055c1f3c8188dce0b","ssdeep":"","tlshash":"187000300030c00000cf00c00030000c03fc03c0cf000000c03c03f0330000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.375472Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"26b2bc4dfa81b43fe5a91d2c178dd361","sha1":"fd7919b5dda72e5dc5ff29f39439ed5f6ca81871","sha256":"8adcf28e1f74b9d284b6a8e7621e79f89ff5bb458dc81d9b366fc51bcb75f28b","sha512":"292f16a9750d730b3f5d2ba2847a423aebdb805686410cf8dfbfb228343e3db1d9efbc89c2471745e412493e4c7d796a2158e4f7b4a489d1af2e97b9c89f0d4f","ssdeep":"","tlshash":"597000000000c000ccff30c0003003300cfc0300c0000000f0f0c3f0330000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.44305Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"79c215027f08cd82c529a10402c8b253","sha1":"99e302dfaec95f521c1deee55d07fe431578dfd1","sha256":"6e6f81dd25c454e564a7dd6db3c735f45dbe63bc45aedfc18d6c63fa82b0934d","sha512":"58088a5766f6ae5f6cab1a8baf2234da56d9ae35b6591b0f51b50ea2c1a9c685966838cb26c2c1ca455d53cec6e2876e691baae9c170d5604f64f0724fc68119","ssdeep":"","tlshash":"497000000033c00000cf00c00030003000f03300c0000300cc00cff0030000cc0c30c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.382466Z","times_seen":1163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8eaf4d081dedfc08c187aba7541c733d","sha1":"31db4de8047c65cf3f13398fa2a6370d9bf24715","sha256":"fb1e251f69d755e669e5e0207910977ba8bec923abcd0c264331da8ed4bc5de4","sha512":"e532054cbf82038f4115f8c1de3c940abc30196071e5305978cc9d35527779a65249b8f6b76bae5b69ca514615277582115e2b2fcb1ddaa186182be65ba52917","ssdeep":"","tlshash":"d47000000003c0c0c0cf00c00030030000f30300c0300300f000c3f0030000cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.378294Z","times_seen":1165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b44ff8f68d1f8325df640a60702c18f6","sha1":"38b8117a575001fb06f9a0ceadc55228ccdce7b3","sha256":"d6465167999520a23127488c727ed47123218b0418295045e7fcd628039c0b31","sha512":"eefe2e0a86b14485ce7ba1ce2f135bfb0db342df99b8060ee33e16b54df58f23f12da0ebf6f1f50b770d3e8304a42ec91dd49489bab7f4b35dd62aa55b6e32d9","ssdeep":"","tlshash":"6e7000c00000cc00c0cf00c03030300030f03300c0003000c30303f3030030cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.411954Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"53c240fa6885652da29ddaf4dbf8c505","sha1":"ed8d6bbc962db63b8e7c34225a0f0698ba2119d1","sha256":"35567e82ee7df5a7386f8ca0a1e6b1e67b0a2e3522bc94ddd21829e6711a240e","sha512":"aec41e89bbecfc4f58fa42372121188892d1137c64c657ea6c108ed28f67f7f4612ec0fe15fecc1f27c8ec80c4eececf5bc66af8e7333420412c2e8cda9c023b","ssdeep":"","tlshash":"09700000000cc000c0cf0cc00330030000f00300c3000000fc00c3f003c000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.386596Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ce5b835c74307454b195bc9b87ab25ad","sha1":"6e2a7143cb9d2f1c196ea81fcff842aa7ad2bfd0","sha256":"2bc85f2a21ff1488d409bb7549110022cdc2274fca518696103e6ea4ee971392","sha512":"94af6846f0e4afded87dbf8a89fc1a8900aefef1bf4bedac2e292b749eda6589fcc339ccafa613409ed4c69d6917b6b2e9e7de92fc72238699ca287911f119f6","ssdeep":"","tlshash":"49700000000ac82000cb00c00028000000b28320c0800080c00203f0020000cc8a3080","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.39173Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c57e69dc1c3714796fe1663d7f6a758e","sha1":"103d84e469f09107059d8a67f615cf2e20652664","sha256":"eebd48c89f0b43036acec1a4db2909eeb314c5076bacaa6ac8bf9f4921a50ece","sha512":"18088b30af3e40d8f9bda2a487312b8ea56de42981041184b341fdb115613f4a25693cf00b574d68706ce77e393435be6ea49d35d51bbdb39134166e181c0fd8","ssdeep":"","tlshash":"877000000000c00000ff0cc00030fcc000f00303c000030fc00003f0033000cc303030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.407906Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"104eaaec377fb78d0b1478984f38f3d3","sha1":"cc4f020560b23626807ca4c76f343b81602c2d1c","sha256":"72e9c6362d28cbf9388242bcbf0459073706e7893281cdf07d314bcec18b69ee","sha512":"0c4330095c4cb24ace162b4c3fbda8cfc6040166cab6b168e52d93e75a73355129158311ab3a368fc9054c9decf4d98dd9a791af430cbbaa7d7368c61d4b6707","ssdeep":"","tlshash":"59700000f000c00000ff30c0003000300cfc0300c00c0000c03003f0330000cc003300","size":19,"data":"","first_seen":"2023-03-12T16:21:53Z","last_seen":"2026-06-06T02:23:39.416936Z","times_seen":1173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f82dff41574b0ddcad47c145b0e28050","sha1":"a2370f27ed38a5fc1e12ed4711814951c6926b1e","sha256":"db847cb68230ec9117bd8205a6aff20b71d27c3eceace3c765b22f92653cfa83","sha512":"a9b9a450285cd47fc80e0d9dfc2724937f42e4080d686224461a6116525360a8733c2344c0d836ca86643a972a2209232fdf9fd656435d07320414175c845501","ssdeep":"","tlshash":"c77000000300c00000cf00c0cc300003c0f003c0c000003cc00003f0030000cf03300f","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.426725Z","times_seen":1108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"569cbaa5d4e07d93d0ef40f00325dd8a","sha1":"d53d3ccf37eb01c61ab82418727c25fb284eb205","sha256":"c2a331c02c1ee796f08d7178d991fbaf91961275a5cf9986035d61a484fad97e","sha512":"ad99dee313910c9ef045e36e2b4f87c7689c54813bf764627d3beff49c6c1d71b80b5933ad9138436bcae2912e2d2c43702108ebe301a76a9974f5d4cce18837","ssdeep":"","tlshash":"d57000000000cc3000cf0cc00030000003fc03c0c3000000c00303f0c30000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.38877Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4999933195d7474661a7588a5ceea991","sha1":"a10e2435d00ff565b423650e231fc3a7ab060671","sha256":"0bd8d756a5a5967d29f7675f3cdada4a6b19f54af7e23e9b62fdb386b325d74e","sha512":"79a788a952b8bde04383a9e7d35a7fac850596b206382beb7a8fce64a7cfc1f2e6ed7723f8a83d6569d1f95fd7435b23d31df0535c1827f9f46bce6078219b8b","ssdeep":"","tlshash":"697000000000c00000cf0cc00330f0c00cf00300c3000303cc0003f003c000cc0c3030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.410979Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fccb11dde8a7d3a197ba6dc22fbb231d","sha1":"c86b853f11220a14d0a667bbe08be97d18679fcc","sha256":"f37b4e527dba46d6e9ebf512a36a060780533a164c538b67a259910b79d96125","sha512":"478a1000872e5cbf4ff6b6df095d21975bbfa4994cfe50e33e24258ef57b001a8222f9352f0dbd1172b258f2d015ddef700bff73d5bcfae09a4543cfa303f464","ssdeep":"","tlshash":"897000280020c00080cb00e00020000800b02300c8000200c02083f0228000cc0030a0","size":20,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.430056Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f24fb692080af454ea0130ae04dc8273","sha1":"a434de2f9c55719a8bd7eebabfad3ba9d74f0395","sha256":"e7e4e3b9731b5f668a1bf28080a2908caa3c2c2e811ef8cdbb762c7fd226296f","sha512":"79977ff67e18cae680038ef961fcc3cc928b2c37bc8e39f72494ce655eb494a671a04771f2f531fbf151d32d7fc7000bb176e79db40aeab7823fd251dd4d4cfd","ssdeep":"","tlshash":"aa700000f0c0fc0000cf00c00030030000f00300c00c0000c00003f0030c00cc3c3300","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.432711Z","times_seen":1080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"9268bb720f57b661570d77717fb1cf8f","sha1":"b9a950fd874919ed5bb11d31b42cc036b1984ae1","sha256":"e4d50938965686c89329c9f3f0f7b67f9d183ac06da98664125994353784e4ed","sha512":"7afe9117e1e394cf14a6943b3d38112391d6af85c6923f4bf4e92d990c9a6659f9694673a5655db8c2420ce0461e841fa46daa828f6cc6d004f4d7c311fba211","ssdeep":"","tlshash":"50700000030fc00000cf03c0cc30000000f03303c0000c00c00003f0030003cc0330c0","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.420822Z","times_seen":1115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cdcc8499dec336fe655502037873ad09","sha1":"df29230c72cec47be7797309e7f4dd868b430a32","sha256":"4b74080433c7e1e2cc034124f3f5acb444b95bd320d9ef3827db207b92214e6d","sha512":"0abfeb642770f7b88623dc119940432e2e68229ad8f25b2d527d756e94d0d66b8f6c0be04a98d9e8234927e737e977d26adbaf36337e1d3eade3ee21e0cf84f3","ssdeep":"","tlshash":"c4700000000fc00000cf03c0cc30000033fc33c0c3000c00c00003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.380887Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f5799f97dd01d1b506b6c56d11b4b3ab","sha1":"24baa553dfea4ee7eea29c33ba5b62c8da6e62bc","sha256":"be90525374346d2f86a64dd1b13c775c34e9f7ed52f78543c308590d29336f24","sha512":"e4668a162a9ceda2fe22da9d46af0df8f2cf69d5c48ac5d5b020f67c1721530e14a660595201b92563e319f1aa90e2dcd09d033cc31df9344815ef3fa0c98e3e","ssdeep":"","tlshash":"4a700003000fc00000cf03c00030003000f03300c0c00c00f00033f0033000cf033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.393906Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6a1cc42d9ecc09ad04c6b7f1ed9b6f7c","sha1":"0addfe6c569b463fc78a85f1a000f46141678101","sha256":"06f04bb101ca5086aa7cc8625be865598db47cfeadd30fc16d8198aeb100cfff","sha512":"83e4dfe51f33f34b4b3a9e04950ff265a1e63ab35d7601645a810f49f060e995c55159f99c1bb7406052cef4b4b6f8ab1bbd987b8cb7c993ef8eaff06c8ddb99","ssdeep":"","tlshash":"b27000000000c00000cf00f00030000330f00300c000003cc000f3f0030000cc003003","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.431059Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"37964c4d9cce527dcb1ac8b7c24a3786","sha1":"5338666ec585469c5b572b68d3927bcca80fce09","sha256":"9fc0e0126edd39b42528d8f8851ffb1275b8cb9db15548041fab20c581d1b070","sha512":"b5d3858e51822eaa9c22e867c69be0833b079e1a78b1b89081fcbc4485d2f397326246dbccce5433e9257a0b3f42123652f4367176de745b94ca93619be69703","ssdeep":"","tlshash":"45700020000a880080cb02c02230200022b02300c0000802c00003f0020000cc023000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.396535Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e8af7d0f5e6370da8570b377c888d9c","sha1":"c2de01f9d3daa641b9401c4e55770b1a4bac5b4b","sha256":"8ef50bb1bcd890c39e916c12f6eb9f1db9c08bf1e326342d1cc5ebaa4fe446be","sha512":"626a0da759cd83929530eb12aedb1a5f908cc44f57a516c6a5e1c766cdcd0ac7c20e29dbd1d441ed3c159d9679001a2f77a4ea7bde2504b3ca7051163dabb4bb","ssdeep":"","tlshash":"cf7000030000c00000ff30c0003003300cfc330cc0c00000c03c03f3030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.427286Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f81a8aa27ad547b620591c871a087e2d","sha1":"77daa19609f08762d1e7544cc63e0feb2200ddc7","sha256":"6f75db5c15ff88f889f6ad98cf6ce1a0aef119df1777de1b1a992fa0798fa077","sha512":"32bf1a11a083f7acc19afea88e7249b24d88eae448c50c99f47a613db18679aa08b358de48421c80972e0dec7d8b64414ecbd74357a60d7cedc0d57ddfb9855a","ssdeep":"","tlshash":"217000c00000c00c00cf00c0003c000000f30300c0c030c0c00303f0030030ccc030cf","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.418057Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d5d4a03bd7a18c5386526c4809b986be","sha1":"cd8ee075dd8b9b45e44a1f294a363189d12c037c","sha256":"c391d5c8f3478b12e350ffe590cc18b8b53b7c0ace33d1ebc9f6a91f227515bf","sha512":"05c21e4dc5fbdcef8539e41596a5bacb6cb8d2641673920d9dc9fd7e7a8f00e221412b7e8f07b4c486f1b14ea0d0b46898fb521df9fa586e03b0c2e9bd03fd8d","ssdeep":"","tlshash":"d6700000000fc00000cf03c0003c00000cf33300c0c00cc0c00003f0030000ccc330c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.44363Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1381ddde79e03e1767f7819397700163","sha1":"bdc8e80553918ed9d64bf922becac723bd9fb729","sha256":"9b80a2abb7cef34f34d9c1b5f2ed4154352b8b4b1802b6fa3609b3c9d2b1a458","sha512":"256cfc038c118ad64df5cd0fd40a1c9c3b15cf689dd91e3f8c1058d062d928843fbd4584a53bcd47d3f2847e688a6e420e9c4e462f7beddead220c1c171e1210","ssdeep":"","tlshash":"0d7000000c30c0c000cf00c00030f0c000f00300c03c0303c00003f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.418611Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"249ee03bf7db43c6f29e76ba6404b78d","sha1":"9b4125a177d266bfc1519b6335a3fbda4d67c5cd","sha256":"3956d7cb31e362559ca075d5528bec5005aee524c51a9f77cd9455d3f41615a9","sha512":"51185abd97f31e023d4cf51144580bb51c4c0230021e6191affe6bcd0972493c3c663ddb53d6bfcd452d9c4b09f93952799c4f7d55339b8361113dbf7ef24e8f","ssdeep":"","tlshash":"997000000000c0cc00cf00c00030000000f00300c03c0000c000f3f0033000cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.430637Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"246541b0664433f23212b252305bb32a","sha1":"0866efa92eb7f9c75b3a45856a9c7e3310719b7d","sha256":"d056a96cf6d509c9def10b7dd78a46fc7b137713344e804ed849f9766c57ad19","sha512":"c1349dfaccad1b657deff3bd9329f111398235aa9cf2519526ff671203599809b733bb470379ccaf0afd2688041c421484966ade58f1ffde4dbe30bc28da3431","ssdeep":"","tlshash":"017000000300c00000ff30c0cc3c00300cfc0300c0000000c03003f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.409457Z","times_seen":1105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"dbca3d0c2e30aec4bb8135129e26071e","sha1":"c9e1cfe63d9ca153308d08d009b38f5281ac9073","sha256":"39e9000d8bf5dab29600ed51f277c601b33e2950a545e583542b9bd68cb9b1da","sha512":"5cd62ee6a5a51902cad5e230e616dbfb9b1765e6b0d981a8a94b9f33cc238af64c8d54b2e4fb92ba0d1008ccc2f570821fae447c400b8170668050fe49d5781b","ssdeep":"","tlshash":"867000c00000c00000cf00c00030000003fc03c0f3003000f00303f0030030cc00300c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.376039Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f2f9eb963a5bc112561501b10eb9f688","sha1":"e7be8ffd6bdc4082a2c86b83940f291ddee8cb9e","sha256":"eb6d59fae5702df6e19944401b185d631f495acc6a1b27707bc524e4a26d3768","sha512":"20c4618e3e2878f73570ca9234390eeebcd6ff84b2c6e3041fd8d0c83cc0c65e62196eb30d97bfeca2a5cf04adaa55d389c52ba7f4dc5e4152276a58e25f6ec5","ssdeep":"","tlshash":"4a7000c00000cc30f0cf00c000300300c0f00300cc000000f303c3f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.421928Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e517ae48d6a82cefa2de65e88b6f5693","sha1":"ca25ce518f711726cb813ee73efcddd79211e1e0","sha256":"169ebb8cf7ebcc8b8340edea912177a118a79c22c031852b1d412cffd13500a0","sha512":"3cb5a380419a0579d6422350ade0ae728ccf8cf85be361f7fc9d0ad27e695e581e712f43330792e46c144a0c7b3633313795ba7e988bbfd08208bd0880d159b5","ssdeep":"","tlshash":"de7000000030f00000cf00c0003c000c00f30300ccf000c0c03003f0030000ccc030f0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.428389Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c27e5c2ed7c9bc021cf46027c8d241a2","sha1":"251315bfd44456a07441481d1c9b3fc811f4aa3a","sha256":"0870b6fdcbe4700c7e9c7c316ad592e0dd191f78b472267d3946db8a8ecc8f21","sha512":"5ff6722c22fdc3a20d9f01b1d466f99779c836e841e7f4551453434bf51ac7e251e19433e907a757a77e08c9a99f050563c9526c277447bd0f209ba84477f09a","ssdeep":"","tlshash":"29700000000fc00000cf03c00030f0c003f03300c0000f03c00003f0030000cc033030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.422898Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8dc6baddfb887c207f2cfc80a440e097","sha1":"c44cdd6dd814762e2d52f58f72f09249aadf60c1","sha256":"7f97e2f5d8ac6458a314d609681f35979521288e3a0f2950cbabb8f0c0cad0c3","sha512":"f38df28f567e21ce58a2bb804f1e706b50dbf5e6448510ece60e7e2c36ecdb623dad712f564a8f9f88a490b695c952cf3968dc24e0df09f985c663daf25ebd37","ssdeep":"","tlshash":"f27000000003ccf000cf00c00030f0c300f00300c0000303c00303f0030000cc003030","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.394952Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"22e39ae49f7a49a8c6ac9e9a426a64fd","sha1":"73706b4bf4bb0e76c3bf8edb7852f248d4e5e91b","sha256":"08d0469b8cafe434d317480ce41859356a91804de4d8fd6243a7068d7d926524","sha512":"c1e00c5ccfb523889f974a7ef4cc3adba70540f84d64a37d31ed528ce412ae52e88f10b1928cece8fa1f1c9ca6e130894ebe23b845744b62f2f1532bef54cb0f","ssdeep":"","tlshash":"377000000003c00000cf30c0003000000cfc03c0c0000300c030c3f3030000cc0030c0","size":18,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.381413Z","times_seen":1136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0d5998c0f8104238cd96cf17a9a2faeb","sha1":"8550a2347fba8b97c74e0b766f099c7610736be7","sha256":"89543153b3f84846def623cedf6219a84f697be7e8ba4f30d5b9b613c3f2ea4c","sha512":"31dfa548901d960e92f343439f06aac91e48c94a5028e32622d09e87a31c52adf666306df70e50bf189d133dac10b5b4cd2687a7694cef1be94307ae0828e259","ssdeep":"","tlshash":"8f7000c0f000c00000cf00c00030000003f00300c00c3000c00303f0030c30cc00330c","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.420273Z","times_seen":1081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b1b8a68909e47131052789e18ed991c5","sha1":"bcd0f3c9cfceb4a62dfddb168f3547b0ff706374","sha256":"8476c02876aea613cda596f888e3e454d1aad05d221a3d45f3a60ae9393ed319","sha512":"eea08b07e99828e3dbf85705caad39517171fc08d9c1670f845ccce955d32daefba5596d4007927ba3ea2a5d4fc18bec8498da875a66c08830996bf2f84f7aa6","ssdeep":"","tlshash":"f77000c00000c0c0c0ff00c00030030000f00300c03c0000f000c3f0030000cc033000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.377736Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f2bafedfaadb0f2669dd99db32cfaec2","sha1":"26952b7bb4226705e8f86f7f191ff4e5a5f8ecff","sha256":"3d7208cc324b7fd6b0e4582c2b82b92314b1d40f918f7cffef7054ff38888eff","sha512":"d943867aa83336c8770bf2711bafe1343d3b2403f07ea6ad24b481e4dd5f7b39304fad4f438be998732313b552dc6f8f72270a14f65ac47c8b8e08a019fd6365","ssdeep":"","tlshash":"b07000c00000c00000cf00c00030000000f00f00c0003000c003f3f0030330cc00300c","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.397563Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2eabd15d7fb48764ad68da88149d6155","sha1":"d8a3fe7e022a7625954db8a68c259d8195898051","sha256":"7cd8d5733848900383d3a6998886c7cdfd5a57eaa280c916d7c39c84c91faa3a","sha512":"c82d9f451841bfcee8b64252d16b2f30471b0ba326df9e334f5cd1ce3267ceb43ae2a62ee411d8b584822a2ac4d1f99f74e6f6c6f11c383a3531e724609551ad","ssdeep":"","tlshash":"29700000000fc03000cf03c00030000000f03300c0000c00c00cf3f00f0000cc033000","size":19,"data":"","first_seen":"2023-03-07T13:51:20Z","last_seen":"2026-06-06T02:23:39.408917Z","times_seen":1161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f7aae66ae2b52b128d01fd1b35e33453","sha1":"52b74544712d5ff9de4b1a5305f5a7a388ab6346","sha256":"519ac6acbff2bfb0f62eeec8219821a845f2cd063737b2aef9d4f2384fa6f733","sha512":"af43ca0a482d57d6f0ddb1f2a005cc91e25455fd7b1852986357dc5657d4fc4bb3b3a13682d8fa55b01ceac15857e8ec9f54294add4f7661b20dfcbc39f5c8ff","ssdeep":"","tlshash":"bc7000000000c00000ff30c0003c00300ffc03c0c3000000c030c3f0030000cc003000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.392891Z","times_seen":1140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"db0a49341fdf4c15231eac4c984768eb","sha1":"7f672147079f45765be2a5aa1259520ac55d5187","sha256":"a096d07cb4eb3f9b68c17cb876dbc2e067c1092e38dbe84704fc00b1112b5530","sha512":"a5398f33a60988ff68eff961ead7ec27f66bcdb464f2b27d8fecc05dd0a8f578775f2c18e3c2226d5ee87592ea086d56f30bf93f6afa306e033fb8fb4aa81589","ssdeep":"","tlshash":"a47000030000c00000cf00c00030003300f03300c3c00c3cc00003f003000ccc003003","size":19,"data":"","first_seen":"2023-04-22T10:34:07Z","last_seen":"2026-06-06T02:23:39.427831Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f878e8bd0445ab90e42c6ff26a714cd5","sha1":"cef4addbd9946a09aa2545fea536b580e5aa75bb","sha256":"bd2a6457dcf585698134e31288339b2c83c90bc3efa0207082c16f1947d81698","sha512":"1d8724433f59637b18e6a2a1ebd24a3f63f1f2cc7a3272205d29b149225865449bde74a7b80eba897d79d273e6cbe64207878f0a7bc8cd9ed42ccaf87a75608a","ssdeep":"","tlshash":"e67000c00000c0c000cf00c0003c000000f30300c0fc00c0c00003f0030000fcc030c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.389274Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d29638340b860a0169f2c6cbc8dc9e94","sha1":"2dda54c8164c7e88101cc3f8af0464102035e38b","sha256":"21049af0b39201d5e0689734e95ddfa2a20244afeabcbea8cd9fc4de8c8bfef9","sha512":"49aaf5c2aa53b18ab4ed50eb490b1eef7b1cd89b0b4fb3d016cc91bfee606e39575704cf953f9aff2ffc0154a4e9116047a82f3f09c50ba82bb732a1c636ccd7","ssdeep":"","tlshash":"a47000000000c00000cf00c000f0000303fc03c0c300003cc00003f0030000cc003003","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.373708Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1f0abd9d8e8190ccb8b56268b03eb97a","sha1":"852e909d6d20f5672428502ba0541fad7f0ee2c1","sha256":"a14c6fff6bca9d195ec25fe83830d69768fdb69b0fd1488e29cc7ba00ca04755","sha512":"7d8b11bb30b489f3247b3566fdc6655be78ce35914b1cfbf92f0781be9d349cae704d45c1a872c9edbde2d30d90a1926e18c7601951fa3bf26f450f3fc9a36b4","ssdeep":"","tlshash":"617000000000c00000cf0cc00330000303fcc3c0c3000000cc0003f003c000cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.403133Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b463a44051f5ec20ae48196f36054e13","sha1":"5b732f6e972167e618e38cdcdf292c5a63dca9d3","sha256":"87da72b460eea48a4375dcf38b3192896a661cd64ec1465b856b81538f7e3918","sha512":"b235007cfb7764d3339ce0c489497814f37213734829dc2d287f9c56ba9134a1e9b1ab354e0c82d2d99311128207d05432bdb4b4ac36c9271bbb9b69f8eafb44","ssdeep":"","tlshash":"f97000030000c00000ff0cc00330003300fc3300c3c00000cc0003f003c300cc0c3000","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.442035Z","times_seen":1143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1fdff8c34626da4017aff0a2821d8b13","sha1":"55f2cd64499c15d5984aab9866dd55d365ccef23","sha256":"b3dff5aa27eafabdaad74a18cff6b5fe4c1d8f3772ecf27d7f97a929cb88de33","sha512":"12a4a8ae51557b64e6f163e5e00280848a72f3dd76e14dd56412fc97333a28201396a2c0ceff6fecb96345f552e2108a863df9ac2736d70e65a1366747206954","ssdeep":"","tlshash":"6c7000000000800000eb08c00028088000b20302c8800088c08003f0028000cc8030a0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.40631Z","times_seen":1139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7b777c8258be4d66daa963d0851338d0","sha1":"7d3e13bc46e3ff6b2d1365e2c51b943b6b250f5b","sha256":"690824b051f1ae8815e995f91232422bdb859066dc36605eb3d5cfacf604c908","sha512":"6c1214626f9160f0a0210098b8f658f8cb42ed3c3f7a8fb6e67acf45a10779400a56c51c03676269320ef27ccb2669ca4545203b5c539356fa33bf641ad47dc0","ssdeep":"","tlshash":"b470000000c0cc0000cf00c0003cc30000f30300c0c000c0c00c03f0030000cccc30c0","size":19,"data":"","first_seen":"2023-04-22T10:34:06Z","last_seen":"2026-06-06T02:23:39.425644Z","times_seen":1142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"news.specialfors.com/favicon.ico","fqdn":"news.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"104.21.85.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://news.specialfors.com/","date":"2026-02-16T13:31:02.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialfors.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:20:18 GMT","end":"Thu, 23 Apr 2026 16:18:47 GMT"},"fingerprint":{"sha1":"68:E6:C7:99:AC:7D:04:0D:60:1E:7A:F3:6A:A7:28:71:AD:4F:E7:17","sha256":"67:9D:3C:13:E3:90:BF:48:1C:B3:F9:36:E2:41:B9:0D:9E:D4:B7:DC:D3:EE:5D:66:82:48:AC:F3:86:0D:0A:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: news.specialfors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.specialfors.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXmzzXCEJSWTeNTejr%2BkqpkVSf0nXsranlOcQe%2FFHzwENTDXufwJ%2BUBY3Of0pqQXckxween6Gx%2BF8SDxcch2IMWviIoNnzDO3qqqJs0VsJNfdbpH\"}]}\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: BYPASS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 9ced672ade3c349b-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":796,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-06-08T21:06:46.290205Z","times_seen":46642,"resource_available":true,"data":null}},"time_used":571,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":571,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"news.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"news.specialfors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"news.specialfors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"stackpath.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 04:32:06 GMT","end":"Sun, 05 Apr 2026 05:31:55 GMT"},"fingerprint":{"sha1":"E4:3E:65:D3:05:EF:8F:3A:11:69:6A:52:FE:6B:BB:A4:DF:73:4E:E5","sha256":"B9:7B:F7:C7:4B:6E:66:E0:D7:DA:7A:8B:0D:2E:8F:2F:E9:28:B4:AB:91:95:86:14:DF:44:15:CB:39:DC:EA:41"}}},"request":{"raw":"GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: stackpath.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9ced672ef9563e6a-ARN\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"269550530cc127b6aa5a35925a7de6ce\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:55 GMT\r\ncdn-cachedat: 08/01/2025 14:01:18\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1334\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: b0538b380dc7ddf8a39643be5721b1c8\r\ncdn-cache: HIT\r\nage: 319487\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-08T21:09:34.316571Z","times_seen":284005,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":25,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/header.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/header.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 388313\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sat, 14 Feb 2026 13:59:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9k%2FpT50PPiIdUl%2Bc5BL%2BKqEaAEkHHP%2BkCUe4wX6hzWodq0ukGSK0EajepPaxTdt0A5uB7OZAVCY4zVnYGIbq7ebr58g6zayzRSzKeUjssYhMk6y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672eb99895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":388313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x533, components 3","md5":"50b08a83e1a727ec920ba9fd3221a41a","sha1":"7a8a514ac5186585eacb539e493204a19b7c8b47","sha256":"1c9148f82be7b14dec2bf4bff4fc12cb5d4f6a4f11cae56b06b8c89cdd89a809","sha512":"48b09d95426be83e78592ec2512d2b415e4b0d52b1b0c90e88ba117a5644b85c0cb98015f85701b59283ee6cb2be5495725de4c252e30295a951cdea7abb7609","ssdeep":"6144:0burpanJrG+CPLmnMyyKDV/ZX1q4TA3SYgTLlUplAwFd03w9Y/nY76qp8T8s:r8rGdKnMyyKVR1q4kgvWXAN3w9Y/3Tr","tlshash":"bf84239e737cca18e21c82b3b984a58e9b05afd93321cb7d04ceed749067155cb78c66","first_seen":"2026-02-16T13:31:30.375282Z","last_seen":"2026-02-16T13:34:37.289539Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/2.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/2.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 34516\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sat, 14 Feb 2026 13:54:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWKgJF3FDiYzuAb%2B5dd6MaylxDSGJGMCzHu%2FN67VPsJnEHdE3h3SlJV8RaMad3C7h8%2B31YgS6O3wKNYd4GeHma5AR9tPQwlEZ4mGUC02ZemvjT5M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672efa4895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"d32f2127f2d611441ee8652d7a630fe4","sha1":"15906f737d3d2c1b405f8b2a6df8efdd4332f307","sha256":"218268f9c27ec29bcc962b130d4a81af35233578043771da3b167cfd41c378c5","sha512":"cc72e8f0373cd6085060a4eaf43373d4f608c7553df9986d0375fe24a905eb2bdaaed70478bc5fc38bd38bbea3675fd46d542b83ab5867179bef8a1be29e47b0","ssdeep":"768:XmvKawz1rOACY6xLtAj7jUquwFfos7jUglFdXXRkmIkrMBleAwn0T:XmK2ACYStALposjFlRrMSA7","tlshash":"94f2f1cbca64d044c0abba7dc21fcb344b761fec1b97e569b82a05814fba411497bcd6","first_seen":"2026-02-16T13:31:30.377659Z","last_seen":"2026-05-16T11:34:08.727742Z","times_seen":21,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/7.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/7.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 49773\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sat, 01 Nov 2025 18:00:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snzrFrmxRF48h1mMhp5%2F0Ox8%2BZ7YJ0jeqDSjYe2JI3vQx%2F1LPXYgK5fY6l%2BpP7zB%2BYkGxFghhXYZopieRwfT8WczNA0xjr6vkzw%2Fmn9gOMTwaZaW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f2abb95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"76d31ab574c376e0cc9e490f30331afa","sha1":"1db4e9ebe6cf17896254ff4666e71626e00d251c","sha256":"8b324857c3b5a0cdc5e4a85f63c76728fcf49fc581bc5384f3170645a7fc2ad1","sha512":"3d5bf59b4fcd36bb4e853578bd006a770e8f8b6931a3426334ccb3a0559d0898eadc3fdbebddf3ed3ebc418876c9fa03684b957b98b786ad428454a3f2918cad","ssdeep":"768:l6SxKULMW3iC1j5TUIoBEnj2WusC/S+7zTomIeJbZ4L3Yo7oNzBP4BgzX:MSxKoL19TKBo20C/S+boVKZ4rYo7oNhx","tlshash":"bb23f13604526d18bd4dc19a90112da3732859da914ee709ffd3eb4eea4f6b133a44fc","first_seen":"2026-01-20T12:19:48.024061Z","last_seen":"2026-04-02T03:29:17.424504Z","times_seen":9,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/8.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/8.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 44400\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 22 Sep 2024 09:47:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U4g%2BIP36a9gLPJnjGcRt%2BS%2FNxgVLVGo1ujosR0hqg0JyMNHLpzfogy%2FC3S3BN0GUBXZd6dhzCEiCX%2FZmgWbohJKj2HM3aLezvqZcK79l7FNC%2BZBv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f2ac195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"f0690d5ded3a4cb4e11a8b97265e4af5","sha1":"d67c4f82e4a1e8e6a35df7d39e1b33fd0fd5625a","sha256":"a210a8dd37d8d10d74679f4327f80a201151bb2bfaf64a0ca8a9f163f5554304","sha512":"47737bbd6a7410cb13fffcb8758570d5a5dd55574fa0c40fa154bbded332b6ff84d2504a1a1978678a335c33ae4eb6761fd80da0ea2a2680495d549d83bee01e","ssdeep":"768:wlSxi0EhTSQvdJjkM/otL0nvpGJSw0KYNs5RzDIrXs3QjCt5RsgPiGh2kiNqm/Ay:ESe3Jjk+oN2v+SwRYKDMXsAjGr2kiNqs","tlshash":"f813f1c18cf2d4ceb5be0e7dd94556d05eb62aa857d1097a93329a16008fcc1efba230","first_seen":"2025-08-23T14:08:14.141243Z","last_seen":"2026-05-18T07:10:28.789132Z","times_seen":30,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/scriptv1.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/spins/scriptv1.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1067\r\nlast-modified: Fri, 30 May 2025 15:33:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBs0cF3lLiOW7IbWyoCGFHxTJmUx94fF7m5%2F1awduP%2Bc4SvdDMgpwRjvFdhxE4Svng4YLZINPDyZ9tcm28KnjSZ%2BLxb56tjzZTzkAji0Y1labggh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672fac6095bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11584,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"e270af607dda93c863ad433b2eddcd91","sha1":"bf0d1dba2a4298c3293e4b3e820c81ae581890b2","sha256":"fc46a6567798a2fce34eba8fc0aaecc9b0818842e786acd4b7880f51cf5784b4","sha512":"2975bd918a9c170b226d23ee3742f7cfc96a3257a793ddd21fd422e130eb6136b8ada25db7d6b158a461bfceddea75b3a71fc3b4f6c8cf10a5d975129862b385","ssdeep":"192:e3FQCpC164YFhuj48+iif9v4xqY0D46Mwi5GwYF5WL4cSiI8KnxqQcb4/MZiPt:e3FoJYFJhiQgxqsaiMwYFx3iOnxqUuil","tlshash":"58328d48f35e1e956e3380ba117b50102b6d6c1b1906ce0cf86d28d86f91f6dfe7a94e","first_seen":"2024-04-05T06:22:58Z","last_seen":"2026-06-04T17:36:17.909095Z","times_seen":118,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/facebook.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/facebook.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 917\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdhccHlyz%2F%2BEz5XFu0wsX%2BaDRhxCggIV1wozsQih5ViDq5rfkEnxTlP1wDFET8Lo%2F6CS%2BeTZcwpDIp5rM4a5thpo2SqQ%2FXtoVFaylANneVQDvmsE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e68f695bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5015,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0776654563d9a9337b6f08e820f9c745","sha1":"cd6b3ba11c87c938dd89d91c69aee2aaff6c9a1e","sha256":"194c541d778941c9a19771900870da22cfc95e2541ba9bf3566e15f2bdf3e066","sha512":"1b95c42d0c0d78d8fe2bd272637681bad25d35ebbf0eb5658baca8ac34ce163aff466b01b008db597bc3f1e33cee39cc123ecc8e5414021f6f31df7e2e0384d5","ssdeep":"96:egscteF/naF3eFbFsOHMFp4wsZSFeTFejFCqKFpzJ0XDr:egscteF/naF3eFbFsAMFp4fSFeTFejFN","tlshash":"d8a19b971b270548f502dcaebfa51b57720e0863524fdc6bbf80755ccf865a486a374c","first_seen":"2025-07-31T05:17:41.193021Z","last_seen":"2026-04-02T03:29:17.44334Z","times_seen":16,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18778\r\ncf-ray: 9ced672efe77120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64cac444-495a\"\r\nlast-modified: Wed, 02 Aug 2023 21:01:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 213243\r\nexpires: Sat, 06 Feb 2027 13:31:02 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I6cc%2Bbb4Z21OZt%2FL%2FIjyuuvzxOai%2FVjyVoa3FXG4UakgCFXaCyh7uec92WTt3F%2FGjAYT%2BjZPatAUvaHEudE5UumPByvL3pOXJ7i3%2Bpx%2Ffrtq2%2FPVK%2FoaPUW2S7VLmKd87ZA2wO%2BT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102217,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"5222e06b77a1692fa2520a219840e6be","sha1":"8b4236206a8b86af3761a244277663046d7ff7ee","sha256":"0934b1fc0d3a766d41d3adf5e7a115875e66e98ebba408d965a41cf3d2cb4ab5","sha512":"cf780ba5def29277f562835b0b3a9129ce2aca8afc81a294d6a9a7f824a1c5bb81bac00d23d42946884606b7821642b12e17a2e92f424171446db2aea8b8340c","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuuprrlCq:M709gMGFiyPGuuprlCq","tlshash":"09a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-08T21:09:56.807528Z","times_seen":43368,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":55,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/6.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/6.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 43679\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sat, 04 Oct 2025 16:11:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=24KYz2igVRZ%2BU9UHYgrTrhx5zTbitF7Srb0NPwfGyPGaDpP8eYzxPmQSelMhXu8xbgPkJbWWG784PcITXzHmfQwK37hiEszEVRcRtWxO9RwLBHOU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f2ab495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"53a7a4f45f7081ee1661708b448c47b4","sha1":"7058b3b4e275a60e09150dbdb1081e89de2a10d8","sha256":"314d645a55cb761932e62c04341cd76b4f16e91a4388640605b842ce0521930f","sha512":"9b78b9fd0d536aa67fae6f3d399f67b6d9c67574b5927e983636496c1a555f20c6701fe9ddaa7e6045ec4369644cae1b0bae2124bd623d6b174e597b1faffb03","ssdeep":"768:TVt8bObtyzfWZ7JLo2zr3cUzP0IwZJh3cIfyzhhL33MHKdS10DvmjO087iXIK3:paCbeWZ7JZzrXpwZJ+/3xs107oaVK3","tlshash":"ed13f1358b56ae2b08c49f7c83b64b82613d70735e7df27e1c4d0e8a66642e806bf45d","first_seen":"2025-03-04T20:15:17.255963Z","last_seen":"2026-06-02T05:48:42.964545Z","times_seen":27,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: application/javascript\r\nexpires: Mon, 16 Feb 2026 14:19:02 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGBcpZPqCmPMUWFoaLhAPO8kq%2Fbh%2F7JspuPXTgUKnTZHAUFwr5MH5i6DjCIL9ZwbZnaDFdLmb9I6wY90URTBGpCAg3u%2BA53BTeV4pLTAx2Da2rpL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced672f7b9595bd-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T21:16:04.252453Z","times_seen":364199,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/bg-item.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/bg-item.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 21675\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:14:16 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bsb5kFInb%2BgSph4s3pTAOPZdmARI9aT7ZEbn1%2FXeTQfASBWu46iZRhhgzOTZDY4QC9tlYTVt6Dp1LmpmpOQsMUnTAr0iXsxF7gvCfTmd2G9pkRkv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced6732cd6695bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21675,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1632x1632, components 3","md5":"f87c3bd48ae8e7641800a4f4b813aa0e","sha1":"1142306c70534889c6cf8d5a4a9bf3546b02d131","sha256":"21bd3cc6ce5f914e39c22b6af807e63201b5fddfa419c983de92996e497ca04c","sha512":"4a4f68d45d7302a138ff9cfd0baed43c64c8a1f80745324097005f0d13609ea72491e2f46765153c746f7e1ac57d348b00afabb505d5ee3bf15639bf6919a351","ssdeep":"192:9jwztdTMPnIjosMFUL4ZFtqgz158ndGUwHgvRimIZ23jSJaH0b34C/h0H2mzkMjW:9OdO6MFUL4jtqgz38nKgux3jUzkMjetl","tlshash":"dba2a537fb06eb66c5cc37709dd39b09375744a183601606eaea0d356aeb3483c9dae1","first_seen":"2024-02-22T16:27:48Z","last_seen":"2026-05-30T18:01:54.045946Z","times_seen":135,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool@0.3.8/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://news.specialfors.com/","date":"2026-02-16T13:31:02.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/disable-devtool@0.3.8/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.specialfors.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6459\r\ncf-ray: 9ced672a7e1ca618-ARN\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.3.8\r\nx-jsd-version-type: version\r\netag: W/\"4372-cTTqYs22VcKkI7FmI2XJm6ZFwr0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230166-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 838827\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BlQzCFm9xRcEGIj2FJlExg8YFFaLjxXbt5QD5AHj7RMUmeX3GS8BW8xy0%2Bm9hFA5QiLXXpiysC0rNkTYEDfvwT9Sx%2BlQ80hgxkrOLnH5pgQIKZDCoYsEh4C2ClIWsY6ctPw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17266,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17245)","md5":"226c2fa3f39c0bb35bb5f1d9d120f9ec","sha1":"7134ea62cdb655c2a423b1662365c99ba645c2bd","sha256":"8a23f92a25922d13437d67f25ba2269b64080b5ec030f5cba982e0261abbfe04","sha512":"ff0d54f8a21ee16685e8e7c4cc3331c287d06105c792f8c659bb2d5852c82c04b0b1844b93cd837835740b42289e55df5099fb0f08161f666842827d506ea9ba","ssdeep":"192:m65oNqiwnCpJWhMpbh78nPVOC0H2ixrsqMEGtxiAIxMwoME8sOUiJE2KswywNC:mJ3+CH7pJ8nPVQH2WrsqOtcA8Jlsa/iC","tlshash":"2d72c6ccb5c3b0705bb7aab9507f050ab2356d56448c8150b23e95f82c7c5aec267f6c","first_seen":"2024-09-27T20:13:48Z","last_seen":"2026-06-01T20:46:52.163383Z","times_seen":1625,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":18,"dns":1,"connect":8,"send":0,"wait":18,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/loader.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/loader.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 598\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXks2WNmnXSm9IZxkDbUnlXgEPCj8JHc%2BXEB4jemQPZJD6sdgH5Zv0ZbJcLNEDFsuJjU7gnTRL0SttCovd%2BNvtr9pjX9f8q138bmOxnr6VzYSVrB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e68eb95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5907,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"5e45b9f875c2c76883f65660aeac3c62","sha1":"1bed11b55d8606af61d7091293672d6bbef60190","sha256":"123dcefbcb4cee978079f58af16e2ccebe7545eca71c801e6550899fe65f5cab","sha512":"dca8572e341d0e9687a70a2627d2ea0556a67be51294ae15aac0eaf1e65db40ef11f13ca481dcdf39c93ae6fd8de72d42b449ce34fc379b4e8aa24f4e648b4cf","ssdeep":"48:zAOJBWJ4s5niyu/otjrjYpW1nvnQnX1nvnQnkNFLnvnQnkQPQvnQnkaPt0NQnk6s:zl7WJ4gnic3Y5FaPFaM9niv/46","tlshash":"39c1841a08e349cd19aa45340e451e36d71e8423f56b3c63bacca1c4cffaa8a72c7dd5","first_seen":"2024-03-25T05:31:03Z","last_seen":"2026-06-06T02:23:39.360655Z","times_seen":200,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/16.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/16.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 217151\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Thu, 07 Aug 2025 06:27:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyCt%2BD3d8TXBhm2lZvcCWl1LNiaOfV20jYvC8pvFyDhxU1xb63taKgrXLeVA1zlQdbil73FGm%2Bqwa0PBHESa%2BMHLqdQTLpazP8KtCdjHBd5cRJHu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b3895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":217151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced","md5":"49424fa3c0c1188e1a5e6b55e0a1e8ee","sha1":"5dfdd5946f0203e322d0cb6db6c7fc37dfa4dfdd","sha256":"74773e1af803a0568bba8f3473d95a7717760027148f844a33efa1e637a774c3","sha512":"30447b6c59550d4f43cc2bae7a0f3bfb255a583082a85c46d8e1de073c609ef6d7c9949370620dafa462ca41743535e9ef5421703bb3312e7e92e05f5637fe58","ssdeep":"6144:AdFBGqG/qftdbtlJ1+a5AMT7ZXZ/MW9OHPjk:MFBy/qfZ/H73EWEk","tlshash":"9924239480fadf8dcb3e00fd4995886a05e4be44350e09216b9abe7dc79bddc3185f98","first_seen":"2025-10-13T14:31:11.18765Z","last_seen":"2026-02-16T13:34:37.255557Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/close.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/close.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1170\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:14:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZKqVops5ghcyCBSZk%2BOjOt36iqLR89ZEUVthjs70nLwW7XcDNv2l%2BG78Cjk2NzbeUY2b7IBwFUqUZ3GhTM8TkxYpW9PydjIYJlTxfnQ%2FAJjYmG%2FT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b3b95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 43 x 45, 8-bit/color RGBA, non-interlaced","md5":"68fb5b6f86421b10e17cb96a65cbe4d3","sha1":"80dd39fc67e874953d49ceb2321a1147d0018821","sha256":"d0eda953f3d7bb15aa078cb44b27702566108120d8b9b37e9a3324e2b767aa08","sha512":"ce1acad1d513c03a18e935cc6a9901bd828e63417ef454b11f002a8da58b833c993f170e9cb483e2b04d2b29e25146c509176183966584d21dfaa3dffa975998","ssdeep":"","tlshash":"2821c6c40c38049ed54bad25132e40a8ab19f075c25a12fa6c3ea63a734f73525b2f6b","first_seen":"2023-07-14T06:38:20Z","last_seen":"2026-05-31T06:09:53.745668Z","times_seen":254,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/codeflag-link.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/spins/codeflag-link.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 46001\r\nlast-modified: Sun, 11 May 2025 15:13:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1YiRrAuQV6Bzr1XIdj5PMq6%2F343HJ3OBxX3FAsDRWQ4YTZEhmTbwS5sVcZ%2BX8b%2BL7IzSp0cdVLJdwc5zIRtSv6R%2F4p%2BxPmiEm3wDUr3zwoCBoADN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672fac4b95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":462811,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1591)","md5":"5674ef5a95b8f48ba0a8405d056ba0ce","sha1":"9991445667304928434eb128a38ab05902c38391","sha256":"595f1377e816f8f8f50b3cc558c4cf3f4a83a20ac45675b3e558b6aed1d0d42a","sha512":"5a3a0916c466dab4209820c2270e23da544432c26af5d6c6baaea7ec1b5baac0cebbb764a1afb48aea2fe55d71ac9b32f1141e78d86ba6f4655d3c67cb7f60c6","ssdeep":"3072:CsJjxDkcrFNjeNkWGlXQlXaDiNQOdrZXCiu:C8xAcvyOxlXQlXuPFiu","tlshash":"5aa4f092d6216b16f750b63841a67d89298c59db8cbd7d8876ed9b8c0f2c0be4f7c10c","first_seen":"2023-10-14T05:17:14Z","last_seen":"2026-06-04T17:36:17.847327Z","times_seen":464,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/slide-header-zone.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/spins/slide-header-zone.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 170\r\nlast-modified: Sun, 11 May 2025 15:13:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8i9c5guvwSC8Jv9aBAGLSerfk5qTfcYgdC6q%2BLW43JMsAcQI6NYHCrn1kFJhWWuygMvHg8p%2BHA374EQGVNaKCq40Cx5h3a76CZorB1v5aYApJiTh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672fac5b95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":463,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"23fadc0c71e7f2c94c3182feaa7fd676","sha1":"e24a2dbd5148d5308ce06f9a00d110f4b9b9d328","sha256":"c20d80e2252d02ae778c0bc34e224a36962ea1ff0dd367b216e6864d0d168d45","sha512":"8b4f7cd53f65e159432ec5a8665d23cabfa4a17394d6a974bebb59550d0221f8bdbfd921c9105fcf53530b7d3c89492b72294a5221ac6ea8d588f0a95b9f3ce5","ssdeep":"","tlshash":"6af0a00295ad3c14c1929428ef69cd0364e60902880ade84bcd8004f1fd4e55f1df7f8","first_seen":"2024-02-22T16:27:47Z","last_seen":"2026-06-02T05:48:42.998577Z","times_seen":143,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/guide/e4eb1c730c28901ed581443a28f421d3.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/guide/e4eb1c730c28901ed581443a28f421d3.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 41758\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HfzYYNp1XyqtEIYHbgl6ofz0ywvDrLDJhxYXMPeKBx%2BWbtud8QomK1P%2Fn9FtCX7SrwODLcGC8mM7v2%2FvS5A8XDqUmu8F3M5x9%2BjsC%2B1JXJbxTU9S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f9be295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41758,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 350x200, components 3","md5":"2cffdf981f6e507ab0e247efd0abb1d6","sha1":"16e29910c12456808fc0b4264c80701dcf18ae0c","sha256":"16168eac028d2dc822d14f510caa506dc8e2a706c1883108f7e43d8f4649e700","sha512":"932d8f48e7e5027fff10ad9c30bd828692aca72b338a038d103708e86beae1530cb9a211ab77b3c6885e1829838b5f20a781876c199a0c91338da9b34c825d67","ssdeep":"768:XAbiOGCT+OObsOmFDwZLdbgQSKvOmC2vWrMeI37orABaZ0Dv1lJl9:XAbiv9gOM4bgQSKLCxV80rAEZWv7Z","tlshash":"f013f1b02f824771ff8c9d3a28552c2647077370ec6641e436d67eb66a18ba97f1f428","first_seen":"2023-12-07T16:49:18Z","last_seen":"2026-04-02T03:29:17.438457Z","times_seen":159,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pubgmobile.com/act/a20180515iggamepc/logo.png","fqdn":"www.pubgmobile.com","domain":"pubgmobile.com","tld":"com"},"ip":{"addr":"23.36.77.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wetv.acc.qq.com","organization":"Shenzhen Tencent Computer Systems Company Limited"},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 20 Aug 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:4F:6C:29:E1:78:09:89:14:73:DD:3E:E0:A8:51:4A:2D:66:7B:8E","sha256":"99:9F:2E:0B:B0:27:1B:99:6F:33:B9:56:2B:F7:CA:20:C4:D5:D5:35:48:AC:0C:D7:6A:93:8E:04:15:CB:DE:41"}}},"request":{"raw":"GET /act/a20180515iggamepc/logo.png HTTP/1.1\r\nHost: www.pubgmobile.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"5ff6baa2-3bf2\"\r\nlast-modified: Mon, 08 May 2023 08:25:46 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 6055\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=43200\r\nexpires: Tue, 17 Feb 2026 01:31:03 GMT\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\nakamai-grn: 0.4f4d2417.1771248663.1db5f735\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6055,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a74329a2054a9e096a43ba8742dd9523","sha1":"4ccac3041bf854721b91dcb45286b8488dd9f072","sha256":"cde9945e91f0e51058869d687cd24c8f58804f25623999f1291c71b3697093b6","sha512":"3d51b997a5d18c92ccc271986c5265842f52a89fcf01877648bd5425c28a38bfe13b361ba707a53a431eceaf043c7d94b84eaf626b36078d17844299667f3204","ssdeep":"96:rGg+ly+erOPEHe10mDphbf+AB1+4iXuKIwe/i8WbGr7bIGvNN7EMkOSP:rGjI+pPECXgABdie/zxkGvz7EHOSP","tlshash":"47c17d7c937448a8fc9d41b59605198102b2c342af8a2c96bc41e314e329a67fa33e8c","first_seen":"2023-05-08T13:41:48Z","last_seen":"2026-06-05T03:08:03.252293Z","times_seen":740,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":326,"dns":473,"connect":2,"send":0,"wait":12,"receive":1,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/link.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/link.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 6526\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPF5IWzFD2mQenGSj9y%2BNE5ERYDz6F4V0VWiufbWuSwGCXv5vHPRPH857li7cbRjCLDiLg8q6Rk9nsZWv7NIQoLZ7NJWYkwkF9KKYMnAbwem4gi8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f9bea95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 77 x 74, 8-bit/color RGBA, non-interlaced","md5":"48c050386aace34c60f16a01fdf74c3f","sha1":"53768d24571ce30d02d038a196cee350baf19d8f","sha256":"b318d6f5d2b095f2ee11e25716a02d4de816c93eb2d0ccd26459e03b65962b14","sha512":"ef29d0f8a69a353a563fcfc2f82d3aacf4a2306e16a61fd4b232365605234549eddfb59c606fc89579a0e0870aad22af993a95e123390a8ddec3bf2fd939a145","ssdeep":"192:1pfLypqJ+wO767KiTf/wpCWAKgNQw9JIn:1pDyY37/7EYSwTu","tlshash":"1cd1b0cf17cb25784d6a279c973a19f2fed310806524b39505839bfbdce0b46d4816aa","first_seen":"2024-01-05T16:39:52Z","last_seen":"2026-05-18T07:10:28.792763Z","times_seen":222,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/bg-pop-btn-m.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/bg-pop-btn-m.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 1472\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:14:18 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=maPmN0eJGlOfT0p30KPGTVqEiqv%2F1bysPeeP7Vnoa0paPQfFnXznnKrRJ0cdlaRMMoE8KBJa0X36YPqBJy8xe%2FswmCQ3zV0k7qmNolh4ywkqbYcs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced6732cd6895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1472,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 597 x 79, 8-bit colormap, non-interlaced","md5":"94ec8b608e632076dd8f56d86708cfd3","sha1":"01b83a99d1b6eb20b7ab4d0f0e3004b64e34a0c0","sha256":"042262bf97d7754173565e479cb19b63cf577067d946453696bf83b0581edd66","sha512":"08f7203a8f79138eb5ed76f8e936a4e4c93072bf9466e282454ff665d822c863bfcf62e77231167c60a1d6939481372a3a03d96be62ad9fd55126dbff4ddf7cd","ssdeep":"","tlshash":"3331c9d3448c4a96f246449782076baae45cd9f07d18c7bf0595cdb40ff8c3915968df","first_seen":"2024-02-22T16:27:48Z","last_seen":"2026-06-02T05:48:43.036232Z","times_seen":166,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/lenzz.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/lenzz.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 788\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Mon, 27 Jan 2025 13:04:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmjMNmno3uJiXsQIamEBUBNKeJ00Mvg7TvvV9FQDtXQdoRMrD8nLrv0VMH7KFHqtkETzCDIrxI7I7w1j5BMRGZJQ%2FOOFZomcQt2uGu0SedVlNegM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e892995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3275,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"45117b4ec316fca2fc80478c643b3ad2","sha1":"3721f1552b699889780be18b1e19986def78ba54","sha256":"53bb9df9b3bf4cd50f762a2d10959bbc1f78017c71a6dbd7b8fe21cae46b0956","sha512":"1fe678edc2b0951512892fc5cf42c8277f9c622ed0674fec4e4a73bbfc54414e38e5b2d771c232b6e856499f6b507ac6fe01a35652d771b1a0bab15602a2fb4c","ssdeep":"","tlshash":"306140669d180004e336e735bbb00f6df92104a7e60706abbbd8f514dba976c2722ec4","first_seen":"2025-07-27T06:58:26.674812Z","last_seen":"2026-02-16T13:34:37.312798Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/title/title4.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/title/title4.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26550\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ijwmW77VJFn%2FAqAcNoLeGqtG1%2FHrF8jgIiSHmBX%2FkUz27eD11xovOhdz5%2BEfusfGwQKoKNwU3Ilqxo1vpM6eeDVtLsDvJ7vltfOicvYW1RQ%2BjkBZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672ec9cc95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x380, components 3","md5":"ceaa0b9ca6eeb770090db92cf7c2a047","sha1":"cb08bf066a169cabaa53e6fa79ee4d8d42021870","sha256":"1606e4cc1fa36c65e284e8aa4ea41f18436e258ab1fc648257414d9558c08eaa","sha512":"549dc7b1bd09362234ec8d4cbce0d8041d26afcb826dd4138f253c064aee12bfc0b1e8f342b0f3fde9f577fc8f45b2ae44dd22d2abdb44976120503df5e296f0","ssdeep":"768:gYd2oIzxP7uYSQge2SIh5khdJJINbl/5mojCyupMAM:rI8+gsIudJJINZYojCyCMAM","tlshash":"20c2c00b7ebf2258c04eb2b7a6b75578eb6bdc585603c73608de4f9c845c8bce481425","first_seen":"2025-07-31T05:17:41.213681Z","last_seen":"2026-04-02T03:29:17.47709Z","times_seen":16,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/10.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/10.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 25162\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sat, 04 Oct 2025 16:11:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mleHPJfNDRr15%2FpEcmbIVOHHzGo3evPWr88dVJxKo8nh7ahnCtMHn1BqkGtUII6%2FliH80BdIEIj9VxbHSTxJpdpwpTKFviV3ZhkxaORMdHtHBp4C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b2595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit colormap, non-interlaced","md5":"a0e11a7d8eea7811f94578b389e327ff","sha1":"4bfcfe7df3495b2016ac023804f4072c90388afb","sha256":"fa96e5a6b527a55460b2855769eaad1cd9971fdccc74a7d0272309a4ba91a2fc","sha512":"f60e03ff640c17968e07122acd8f1f7ae3f6110671d4ca97acce500a62479c18fca9a4948bf35c32bb027e34f3c8baa53da33e62d84b4014abd618533d45f02c","ssdeep":"384:804Kfqa0jhHoTXn7vWeeAocay5rPERpx5tIg723IA2auivS2bfjDlAK/y:804la0jBorLWyrktIX3JZvSGl/y","tlshash":"3fb2e021dcfb9052cc6f28f4cc169ad706b39c5204264a73dae93b81dc5515fe50be9b","first_seen":"2024-04-16T05:43:22Z","last_seen":"2026-05-13T19:15:32.307605Z","times_seen":33,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/title/title2.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/title/title2.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 30519\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4VaGx0CX6gnAXONIFzbd25nXEP522LaODlKDZM4fxcYdPAi97IMxy48HXWl1v7%2F3FBCnYiBLgqBvGi%2BqlWQQyUONkP4flTiIoUhrrwNl9gnQkOq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672ec9ab95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30519,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x380, components 3","md5":"aa796ef166d233ef9f4d053faaf21f7a","sha1":"3dab8601124242b11f45a7b7a8fa42a2d53e50fb","sha256":"139de5f0081366aedeb990339f9e99776f823d43bc97e791d569103ffa35bef3","sha512":"6857a82cee5477e69c79bf1d55a62c9f464bf06c420d53e297bd2337ed29e1ab834e7e7af2902573bdf4141c1e7e0326f483b33843655973cf28c53c40c592a9","ssdeep":"768:Wu9WvuKlyxoBf3b6z7iG76oG/KSiQUJNYCtGmbO:3sWKlKoBLg7i//KSCz1GGO","tlshash":"84d2f1351e73d11cc4b7aa7aa56522308dcee22993b6f3884e183c6ac4876bc44373c3","first_seen":"2025-07-31T05:17:41.102927Z","last_seen":"2026-04-02T03:29:17.459535Z","times_seen":16,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/tokens.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/tokens.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 29942\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:14:26 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpzqIK1J8IuS4IXJVr3WnaCESLNrmCOKH57%2F5OOzUZZrUr3AW71z5DO59k20zJsH5%2BRazLZ33lj%2BaFcEc8bYIzwKz0YjOAVEf0dwhgTVDHbmLE0%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f0a7f95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29942,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 135 x 130, 8-bit/color RGBA, non-interlaced","md5":"d02c9d4d558a113e2aebd45c7d8237dc","sha1":"edd72f80a319adf3fec2f3f061c1b82d6bf59aa7","sha256":"7fb8131422bba9cda088005359870721b090dcd043d3cea030367be68c6328a6","sha512":"81fc37e296d450d71c8581bc49d681546fa6e5a32456b9e9463fc97ef9d4013f95476b521b3298c48fca2f93e5b3b1e08050d44e2a40a366c18ff81ce330cacc","ssdeep":"384:d8lsNP0aaonUDdKzrxQFq++i1gPf/DLKnNjSTqSph9WfdNo3pl1U3VieMlgNfWk1:d8+NP46CKYR1gPXW5STvBWFmRaLegNf7","tlshash":"98d2f1421cd2d07e2a4ba7ef8efd337f9a2765710068ead4b299dc1b003724a75e5970","first_seen":"2023-04-30T19:27:11Z","last_seen":"2026-05-30T18:01:54.041344Z","times_seen":266,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/13.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/13.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 36640\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwVqXWVSezIM5oIMLumcPaSuqc2ShAdli7QS5NlWR98jdb9L0DG6eEKKvq1ne86ppcfTANChXavuiqrewsj7CqNCz%2BBeXfwuAgdyGOn9EkTli6aO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b2c95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":36640,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b3a839a759d0403f4e2645ccc2d7d6f7","sha1":"0a2a09d3ca75b9a2fdd7198c15dd7d34066225fb","sha256":"255e84dd3395a7be094dfdbd60f9a3df16a5741419dceeeab0cecb82101e4787","sha512":"e647cc5af229b6db025cb4f785c5a5e11ef09f2b4b07eccdf83c648daaa4f8e159b000bdba7db9fdc124f7f02798e03ba171696a43cb0e088efa63b3efe46267","ssdeep":"768:IRG5XErKMO07aUdxu6AUnJ9YkAHbeCZWGR+BaoM2ZnhXK3PVa7jWc:c5mqxfFXYh7eCZW/55K39aR","tlshash":"e9f2e09e3874d2bdfde1020056b8caa2ce61c2cae5e13516b4078cb5ed92fcd4694af5","first_seen":"2024-12-09T16:53:48.092205Z","last_seen":"2026-05-29T12:33:19.644096Z","times_seen":37,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/icon_2.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/icon_2.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 41672\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rxhvvUkrbKMjloj3oftgfgAfT0IETWl4vcbqVgPQtOILA3%2FlOsggZCc0lYe9O00wPMPbAu06%2F0DYdWejbyJW8jtoQoCYrtP3ScQLxtOch%2Foodvit\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b8295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41672,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 554x554, components 3","md5":"a3f64c4dbc59578bde87272fab800586","sha1":"3d458492b06598b93382b3675e5b59aad8aac436","sha256":"0fa244d4efd45a45b32d1319ec495e307381445f62dceb071892f47e431daa81","sha512":"159aa56e5f297c706280220df6dd8f6271bd2a3d88b0ebc58d14dc348dba92f27c7b309394964d406d50094495e200aaa1033b54488961a14262b853a8fe7b34","ssdeep":"768:gWVVSelIFYe7CiG/uvprHA2FEPwZ9dGIJcgF6GDUuKenycmpfnAXu9O4HCV:gMpe2FYp7owDcIJcgF6RuK0yZAXMO4He","tlshash":"4b13f2421bea14030320b071416cd36da1f1c636b9796ba98f27e1f2e5d72af47afd42","first_seen":"2023-05-01T09:29:40Z","last_seen":"2026-05-31T06:09:53.734269Z","times_seen":356,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/Twitter-Show-Password.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/Twitter-Show-Password.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 8467\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:14:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oynJrkOmzX7oSaFDTAGzMz0c8whTKOSxYpYRVVUlJBXHvVdejQ4ZO%2BqjePuUl8O0rqJFYcvyyZVrJ4xiMjWmYNHYpyohwQRNuadkMR9DHkuBVb%2B4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b8895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8467,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 656, 8-bit colormap, non-interlaced","md5":"e58ab8c9dc9b456402091bbed9198647","sha1":"681838b791d579b01c97f59d507273e1bd280850","sha256":"25c782de8f6ba07c850d68722d5ae268609170783a6bd51283a2cee86c5b8efb","sha512":"d8d8da0fcb386d09b9a42ba597f5d6d2ac60d6eedf9535ef7d1ca035dfaa4a51902b218a4db776512632a52275cc81a57f987431818e01d218a4d3ad227420ed","ssdeep":"192:YPGaQqyS2e6pXLg60GtkWDLDYNhIB+Obe3RVjrpOKLGZBOIHliuER1v:YPGFqDKUutnDnYNSMWYP5PwBOIoDN","tlshash":"0402c0a9400843b4d26059feb8ba5fcac5a688ddb4d85f67ec1e3e43037d61d604b973","first_seen":"2023-07-02T16:12:44Z","last_seen":"2026-06-05T03:08:03.278191Z","times_seen":251,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/load.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/load.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2996\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5A2w19BF8KwxTyaYDtTpJIVWTIrkO8otP%2FGCKTAsVAOMhDQUnLRbbEGRUNMVyCDYJifQBqrUhUwylRuxWgdKR3jSO9uHD8PIxFzM5Lik1OOdOCaK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b9195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"c5ac1db50750a1177795f474678b2be2","sha1":"ef0ab1883cbc85bd4d0a53ca3963236d268d908c","sha256":"9ee0b7416b35942defe3c7c7840abf3af799a478ebf8b9c437ccf96898b808fd","sha512":"3f7923f394d213ec4885df4ae77250ced3ee0c19f34725534d0521392593d9c65498fae3a7710317c24444a748a2fad830ca10ac94310132aa9b504550c9dab3","ssdeep":"","tlshash":"13514cd9b256b4f4e78863cd201da7789b7e228a4141c3144e98c359deb4e85c5c91a8","first_seen":"2024-02-07T03:32:15Z","last_seen":"2026-05-30T18:01:54.019807Z","times_seen":164,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29707\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 00:33:16 GMT\r\nexpires: Sun, 14 Feb 2027 00:33:16 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 219467\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84320,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32180)","md5":"32015dd42e9582a80a84736f5d9a44d7","sha1":"41b4bfbaa96be6d1440db6e78004ade1c134e276","sha256":"8af93bd675e1cfd9ecc850e862819fdac6e3ad1f5d761f970e409c7d9c63bdc3","sha512":"eda31b5c7d371d4b3acced51fa92f27a417515317cf437aae09a47c3acc8a36bdbb5a5e70f0fbfd82d3725edf45850dde8ca52c20f9a2d6e038b8eaaceee3cf1","ssdeep":"1536:AP1vk7i6GUHdXXeyQazBu+4HhiO2wd0uJO1z6/A4fGAub0i4ULgGiyz4npa98Hrb:z4UdWJiz6UAIJ8pa98Hrb","tlshash":"a283d6d9b2c67062977734b851bf410bb17a98dab80c8c60f0a4d4e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T20:56:18.65713Z","times_seen":15239,"resource_available":true,"data":null}},"time_used":561,"timings":{"blocked":164,"dns":9,"connect":21,"send":0,"wait":56,"receive":9,"ssl":299},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/css/style-kangcopy.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24996\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:45:02 GMT\r\nlast-modified: Sun, 11 May 2025 15:13:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 27961\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpyDrIrgsP0WdPj2V4s6%2BKGLHaGdFTuk2LoHiUJSLm2qnGvGu7%2FxjTPW0GYExo9VlkxDMEcJeSeJuieQYwDa6VW5K1IgiP%2BtqJQb2GLdtfZnU%2FBg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced6734daa195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24996,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24996, version 1.40","md5":"2018d35e708e07985693c6bc12a59861","sha1":"12faf69d54217b30d4458fffad689e758b8a91c6","sha256":"c2293fa86d99d0f1f06b2ac7f85ae0517e4a3bacfd9946de7b012f04aa2d831c","sha512":"5f80cb586d6a9c04f1f3e550283694d99fdb98bd37298dcddf94b1add4da93dfa315d123cf6527fd051a012fd38c0f9f642f707ce9f914c5a7075747be7fc42d","ssdeep":"384:HsmgD0cC1mO9aJlKA9BsPsjL+baPkl5kaa4t6+ECn9CWDBZ1hZXjhY4ev+Vmn:MmLmHJlxuPl/FT1DXjhE8mn","tlshash":"6db2e16940090d26c0722a71d3b293d8774053aee2d60eeb86790d6eddecd933c79eb5","first_seen":"2023-04-10T08:44:25Z","last_seen":"2026-06-04T17:36:17.837455Z","times_seen":479,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/twitter.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/twitter.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 1137\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBOqIHnWpsKgtMfZPj4uk2g8GZ4lz%2F0LDBdD%2Bsj%2BVMlfrAOoM5GJ7rxHsmqlIRDQgkr7aUOxI1ckbPYqjDLoM7lpbWP%2Fv7W2OCuR9dgR42CtcqMd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e790095bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7140,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dfcbfd11e52d013c501130302d5d7bd7","sha1":"12adca605fe8e7f812903f145f183f7eb0d1a550","sha256":"17db2fb6bb3875499a7f9263cfa01757bced79621dc89d7fd7eac99daf367215","sha512":"86259700f2d003591673464739339b14a93e58a32364303965bcbbcb0bb0a5e828e3385ce6252e4b7bd11960755c85f6fc10234a97983ad59c764075ad493762","ssdeep":"96:/aVJLMKW46yRPnk4sLFAMkErO8KZfkli6AOYNHA8Uopo4P:SVZv98ZLFA7ErO8KZMli6AOyAro3","tlshash":"c8e1eea79f261508f502e8f9ff566b9666094013534fcca3be4c7618cfc66584bb274c","first_seen":"2025-07-31T05:17:41.054854Z","last_seen":"2026-04-02T03:29:17.478989Z","times_seen":16,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/title/title6.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/title/title6.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27552\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ii%2FC7zRNeAPTYNBVgeUNLTeryhYeuJoOa94drjkEEdfDJR%2BoQml3l2Zukdb%2BxbG4oU9pzJMnnDFUdhdmkCzHR8%2FGRoYI2xGNNvlrKnqYnZOV8jdO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672ed9e295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x380, components 3","md5":"8fb6b99d38daed7eb6c690a9ec019175","sha1":"4517eba3cdc12bf476adb0e4af754887fc3e0b96","sha256":"89ca46cea683eebd4628332bdf2468ad17f85a828c48e07ad971589e9ab0c77f","sha512":"9e1b9c021bdf8f315833fd5cef52351a7960581ff6da3a721a63b94177465be3102d19f68719727e620e0a1fdbeac7329c42688a78bd3826d2fa2cf2a823baf2","ssdeep":"768:rI2VGt0heXSNowa4PWqHlPa1Qwyl7dLi/Vf9:rI2Qt0AXADa4rHxwy8Vf9","tlshash":"ddc2cfa1b29bcf63fb396679e6c86b30c8047810774b4bd051da060e1befd911b7856a","first_seen":"2025-07-31T05:17:41.084228Z","last_seen":"2026-04-02T03:29:17.463814Z","times_seen":16,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/uc.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/uc.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 40903\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sat, 07 Sep 2024 02:11:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6ZWY5E3rY7fLnh6vGjx1VHn9OiOhvAmoBdGkCsGyc0UcY3G%2BiOE%2BVLrXAXt90VHDKITuu%2Fg4CcxUuH6st4y2t7%2B9SmIALyraCckcwqEra3ofxYk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672eea2695bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"4fbcbdb4164c249c7468c0db8d6771f5","sha1":"e79d92a2090b1a45007d4fa24ff8af1480c593f1","sha256":"15a4ec9ccb827349795d3ca1701ac4a1fe874421fd9c3c6d3ea817210b9cf636","sha512":"66260a5fd0f9891a05ca32fe9707c2c436bc5e63b2f7a7f0dace6768414cd21fac5a080cdf376f767873c57429ef73dbb643eabeb4917c7039e49b8512467464","ssdeep":"768:fz50Mukxw0208UIARowNCF16/DHcemINAeiV5fb96PITBGbskeCP3zIgJ9w:b50MHGH03/RS14S9HfbwwTB30zHw","tlshash":"6503f1a3e7e0a91007819f904eafab9cb876bc2b47377580613b77162355d54d3ecb42","first_seen":"2025-08-23T14:08:14.162733Z","last_seen":"2026-05-29T12:33:19.636222Z","times_seen":22,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/5.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/5.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 43267\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sat, 01 Nov 2025 18:00:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30cpVO23P8EeCBkTcSy4cvdIshNAs65LwOnFeJe63lS2KdLXZLgj6xgp39c%2BUR0qy57Tow4Jip8LGIHF7s9kIctGmyCS7M1imGfEdwJ5jN5%2F898M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f1a8395bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 280 x 280, 8-bit/color RGBA, non-interlaced","md5":"e2238ff7534b7599e6b9996d1e93aa7f","sha1":"387a52faa6c526dfc6ecb2576fd4b69b7603367f","sha256":"d9e3f9f7d69d4d21d0e112ac59d58a3e0a45fc2d4b699ebb6f4983c6ff06bbe2","sha512":"73d52a59269473836a55d2fa181243d7a79e37c133adbb97936501a57a13598e769c9a594de09111432b637b04e976c44e1a1c05cc7142a60197da955565b452","ssdeep":"768:l2pRFg29HjnOL7jLHIgjaYPMBGlyJcnyxIowreiHHkV98Vak2PcZaE:lIFgoOjLJuYP0GkJcyxIowreiHHM98ZD","tlshash":"a113f104107c0d63719e00affb53ff5526d69a6004e61dbe299baf2edf6722a720b407","first_seen":"2026-01-20T12:19:48.04258Z","last_seen":"2026-04-02T03:29:17.433043Z","times_seen":11,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/icon-twitter.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/icon-twitter.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 5997\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7bwXmND6PMvJQpsYKHlcR2ez2DVKy9QIFOYu%2F22U9SejXc0e58QBcnmne7b1n9ednLoTkDaa%2FSfFpils0moSTz%2BAEco%2FfHGNfyHYmL1GxRBlukNp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b7d95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced","md5":"3102bd5ece1855fd21122d8f0e2f6b43","sha1":"79e8a83aa0eaa45dd07914726ad40736fd0bcbcf","sha256":"4b3a0f6de375b108b3fd927b85f45660478919a1dcc7051ff227e4bf8d49d9de","sha512":"3c2cf28e956f19e6b8ff56a50f3e4a9cca00db32fefefca05679756d422905c0030f9a1ef7923eff4c7b907b600e580e064a76fd1ccd6f13353e209ce22c4c3b","ssdeep":"96:5KbjeqR6yWefSE9K4JoARywhJfepn0WS3IBPLWbqhqtf9Xb/19R5mz1FfHfpz2:wLpGGyypOn0WZGq4fLIHxK","tlshash":"c4c19e3c04bc78bd2173434781655d2c461b09a7f608cd7f7ca2c9b483a9681dfda622","first_seen":"2023-11-05T14:08:59Z","last_seen":"2026-05-31T06:09:53.796863Z","times_seen":263,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/linked.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/linked.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3351\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwcMWPBJTafyMkrymUwD%2F13Txd9oDKgtHhMsKUvJCDSo9LNHqjehRVR7fBVE28itl8emfEgz9e4YSAI3FsAnwoGYSlDH5V%2BiLhGaImK3V2jhDU%2Bo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f9bef95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 64, 8-bit/color RGBA, non-interlaced","md5":"597e0382d5c89bd00c8a28aabe189ac2","sha1":"3dcffcd896f19b2ea417fc3a22efe6b1ca87b88f","sha256":"8c45811d2c467b8de6e4e32f71d2732c378fbb5bbb3ada5e32ad6c91f4553c11","sha512":"d8b8a670184195157972265db7c1dc4f8af4ac1951e0b8e74c4fdafa579e381b1af6c41159281cc5d9460f044afd7878be53f18ac819903e9dc26c6fdd994156","ssdeep":"","tlshash":"0e615b16953bae3edea8b036f2e25cf12c2100a965e1afaf1d18d05d003a43f9d515f0","first_seen":"2025-07-19T11:45:36.066466Z","last_seen":"2026-04-02T03:29:17.475202Z","times_seen":18,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/google.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/google.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 6520\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sat, 14 Dec 2024 00:31:50 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHG89%2Ba03pHEtSFx27%2B3Bnn5%2FTYfKFYxnVDk%2BFDHbq0bay%2BwboC7DVHdByqOYDKtV2rRj1GJL7OY4HbIZ5t1mhouIy6BEu3rDTkzOZUZ7ztc7NQg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f9bf095bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"b847ca8aef54c72c8222a1bf968f2ee3","sha1":"8fa97eb0310e5f4cb7a705c66d5cd9808a5202f1","sha256":"8d7ea74b8bf16b4c2422c9907d172b09a7f59e9c7f492e8c37887be4c9929062","sha512":"101937f15e9554dbda616764d2ceef874d91dec5a060a13bacebdd45557ec8019191ed4a359f2d8156e7cbcad9b746d454f387434b4b917867c35651d906edc2","ssdeep":"192:BnlMLJ0IdTQ3EgB/yWcIM2M1h4e5uyu2olb4q:BlMLVCUu/y/Iup5X8J","tlshash":"94d17caa0c89f5a0d705bff6272dcf510c741e915686a2164ee126c833aa33f81e91de","first_seen":"2024-09-17T16:02:30Z","last_seen":"2026-06-02T05:48:42.983456Z","times_seen":64,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://news.specialfors.com/","date":"2026-02-16T13:31:02.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://news.specialfors.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/html\r\nlocation: https://gilang.fortoday.asia/scrip/\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5IuiIb6i6KJem3KNRsMNXbgV%2BabZi%2Fm45OStsOMuUaRk78B5jVcyW8XHfl1lF5p7hslMD%2F1koC%2BHMi%2BXF%2FUjaVt9WGua%2F5jP4B6YL43%2Bl2nFlhn\"}]}\r\ncf-ray: 9ced672add3d6e70-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":143276,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":73,"dns":41,"connect":8,"send":0,"wait":231,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5845\r\ncf-ray: 9ced672eee6b120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ed9-1149f\"\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 196841\r\nexpires: Sat, 06 Feb 2027 13:31:02 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=baPxznK91UJf%2BTbeXJnK4jQrpNEYr9gYaTAktEn4gHNJ%2BVW1bMy8YR3VrYCo7IdujasivRkvFhjHQiWswAJw9sZIERG9Kc%2BBKyP2GKnmTMWiIdSviz%2BOxl0PYC%2Fkl%2BdniusZuSMS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70815,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9365fe85b7e4db79a87015e52c3db6c","sha1":"2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9","sha256":"dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56","sha512":"ad142d178576c2d02f5eca2ee22500b369171e2dcb8fd344ef1251efb0c4ec61ecc6063d4535b2f77773317803206f13a224530f8e55b0335d4e251a80e15e64","ssdeep":"768:/KvcqyF7I4rb84dLM+JKvcqyF7I4rb84dLM+k:B/nLMu/nLM5","tlshash":"40631be8e80900d26fb1cc03ef62b7ca1685f0a3f9d10dd8f17a998c29d16551597fab","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-06-08T12:26:35.778175Z","times_seen":10304,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":1,"connect":7,"send":0,"wait":60,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/title/title1.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/title/title1.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22483\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:36 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYyfMXmsUA4pc9e%2B6pfgST0K5G7uz7PLIYqcLS95XvHf8M54rCXEBodMPMYccHiRXHv%2FGmOT%2BDQi4jbF5TZBMA3XKxPOd5c74YR%2BhHLgwdhCnpjJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672eb99995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22483,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x380, components 3","md5":"d9e82dea900506d4ee778a836c15ad03","sha1":"d566819c3f166ae17eeb83a33a5b027e3ac1c3e1","sha256":"f30e5c3ff3fd87b59201e98d589eb185c36cb1bfb70509717f3f626207954753","sha512":"1acd80b506f630d0cdccc12d070416f6553f88728ccbf47b3d1859b068720abfaceeb8f31875dffea5e9eaab2d94f32862daeca83e167c7aeefffe19263ad4bd","ssdeep":"384:Fs1cjfH0he0zTzEa8hp92EG2lJ9PfVnATyR8888qPskPnoJ:rfHt0zXShp95G4VQ5PskfoJ","tlshash":"dda2c06a9fa2cd70d5c1ef3a47e249359cc84d2071a38be51f687f120fdaa544ce3882","first_seen":"2025-07-31T05:17:41.231122Z","last_seen":"2026-04-02T03:29:17.454676Z","times_seen":16,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/icon-facebook.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/icon-facebook.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 5468\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:00 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=volkKmVr3GbVWVvy88dMTwdRJFxdOwnAX0bLwRCq9QcuHPo4wuiZAxKwYjmsYhBww39Ke%2FcsSl%2BIzgJ%2Fnk7F%2BrmJer0PmbMVYNf3rr1aWBKpNNYo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b8c95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit colormap, non-interlaced","md5":"2d797a69acc678581d3a4ea0fb0636ed","sha1":"3c13f1b3e8fa01cc284ed3492dcb2efd447d06bc","sha256":"44a4d8218d1a959cd0ff8d764fcf5306aeb21e1689725b63825bd7ee79186baa","sha512":"8170837d9a0516f73e4f00e2f7a39a55a5e36044973255ab1bf024c6461b34c56d9795c73048c2500cafb4919bc41d69251e7cecdccc459bbef6e830bae1469d","ssdeep":"96:J5Bf3B/0KPf3fZEQI0zuhi3Zl3Q7Ov/E5cEj6yGEbfB55MQ7PnU7:vBl0S3ZEQvihiJpQ7OlEGijB55Z7M7","tlshash":"c7b15d87e7044a31fa0d26393b8707732262fdb221e3045f197772ca0d703442e79ea8","first_seen":"2023-07-06T22:42:29Z","last_seen":"2026-05-31T06:09:53.746589Z","times_seen":396,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/slide-notif-zone.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/spins/slide-notif-zone.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 210\r\nlast-modified: Sun, 11 May 2025 15:13:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5j3OMszpr%2BUxrM5WcjTVMWMSQ8MRTHQfaJOHEBFAFe9xEzmCHvDSEtWiYg5igOF9iVW53byzxXN2c7%2F0jGQQE%2FkskOzmBAr2MN3pz70FVj6RkVyc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672fac5995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":572,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"fe5f9cefd8cdeb7223204985d4fcff9b","sha1":"07290f0580629134fae84811d25cf7e4efc1429b","sha256":"0876d5efeb88bbb02434e56b729b0285c11cbedd3c5ab2b5b7b18a2f8d89d240","sha512":"4e03d07e6893ddc0d9dcc0c76707e139096d8d83f30b2511dce95f04b1f91ec31446ea2ac931bf8998ae3c9f91444cd515b176cfc1f9ba3bac0e7d0c518da395","ssdeep":"","tlshash":"08f08b0db664293d49e3a43c1e5ac90138e80d008e08bbc4f8f860578fb0e252aecaf5","first_seen":"2024-02-22T16:27:46Z","last_seen":"2026-06-04T17:36:17.898417Z","times_seen":221,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/css/material-design-iconic-font.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gilang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 5845\r\ncf-ray: 9ced672fba07120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ed9-1149f\"\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 196842\r\nexpires: Sat, 06 Feb 2027 13:31:03 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TLnigNfQQHCXAPb1dpZK%2BVW9MFfJ8YS5sDPAH7aAZQcyhlHxk2d9Y%2FTtsEEWDkUjOnSPRjFYOEkmvF5n2JkpPrGbWaWIZXGqBBocJ7opNqMxOBx9qmGJke9S5j53LMIKWCTw6Ne%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70815,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e9365fe85b7e4db79a87015e52c3db6c","sha1":"2e2b5eb6e08f0f3d11fe0ada97c962a23ba6a0d9","sha256":"dec3e9f0190a504ed0c8f4a5e957c107206ba106cac4a1bbb6cbac6369a16d56","sha512":"ad142d178576c2d02f5eca2ee22500b369171e2dcb8fd344ef1251efb0c4ec61ecc6063d4535b2f77773317803206f13a224530f8e55b0335d4e251a80e15e64","ssdeep":"768:/KvcqyF7I4rb84dLM+JKvcqyF7I4rb84dLM+k:B/nLMu/nLM5","tlshash":"40631be8e80900d26fb1cc03ef62b7ca1685f0a3f9d10dd8f17a998c29d16551597fab","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-06-08T12:26:35.778175Z","times_seen":10304,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/media/open.mp3","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/media/open.mp3 HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 16 Feb 2026 13:31:04 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 12675\r\nlast-modified: Sun, 11 May 2025 15:19:54 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncontent-range: bytes 0-12674/12675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2psmHfjQbekshTJGp4TRQbA5GbP9eZxzWkcpJUN5DJ1s6NKjnQWuTLzQIXdudM9wu0cha%2BEQ47WJwr5ZcjQIVhjcG9sSQDVXSsiFZRjqfHVwYzF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced67355bf295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12675,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"58418a30e1310bf4fafa9fa0e57c18d6","sha1":"b477e72668b181c3080d6b921e2edf15ef134f17","sha256":"d5ad34e8bb64fba432c1a12b24cd1e532104d0183045e73abaaec72aa824df1d","sha512":"082eb64f97dd80d382019c11f002badf74c35ba0c27e7d6ddbf04a0ef8f028b005a183224c6481f642f06609b166c1b24dcedb248d5a3f756492a88007c8daa8","ssdeep":"192:NRg5B+tUSp4IpICb0rswRVqb+nmCkyKEM7+sXspvPC9y8ZlgM:cvmmr1+60Ff+uP+M","tlshash":"26428e077f56010ff9e4a73531af2431e9c45e5e28a9cbeb36108bc095af3947b295ca","first_seen":"2023-04-07T19:47:22Z","last_seen":"2026-06-04T17:36:17.856198Z","times_seen":704,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/media/close.mp3","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/media/close.mp3 HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 16 Feb 2026 13:31:04 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 12675\r\nlast-modified: Sun, 11 May 2025 15:19:58 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncontent-range: bytes 0-12674/12675\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HVic2V2IBkITzBGOz66dXKf2vhUGdVzXDbfRNqzWc1piAhEX5OiSrbUueTRUT%2BoOsY3VNkOzendrCDPbSWyfKsmQ2l2KRk5gSUjcnigbGdy9LHyc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced67355bf995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12675,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"2056bdcfbd551273ee207f8c6ff9d257","sha1":"6fe68c9917d3409710aee4147ada311093d33ba6","sha256":"d7633fdf0d543880acc3fdaf578728d7becc1ff429ba054921d3313f73a5a4a7","sha512":"01a0022764f49e0c395d9f40fc73f123a424401e388d05373ab44ad33bd046d106881bd1f158b417030eabd8c9b52504d19155c225a1a632ef3c99ffbe771399","ssdeep":"192:kI/h/NAQ/Qa4cLtUDImzKBlSV9hME7Be85sqHARf9jt5EIJMcL:1/LcktUDBzOWX7Be85sGIr5EUMcL","tlshash":"0b429e012b05c12ff7292f7d301f86b8e0983a8f2a22cfe1a0179f94887f151672d954","first_seen":"2023-04-07T19:47:22Z","last_seen":"2026-06-04T17:36:17.901635Z","times_seen":699,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/12.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/12.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 15294\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Wed, 27 Aug 2025 06:47:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2dLJwUJ64mstRxL3fx5NmLU%2FnigdiZYOW3vrGbtz5WMzGV0XSBN%2F0PdAO5dpsos3uSlKC3BBef70fbnlYNrLOUKvFwSpBgvXAJVmKyO9Kbvd8TV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b2b95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 556 x 543, 8-bit colormap, non-interlaced","md5":"7cb34961c5da7be99d0b3cf3d2394892","sha1":"ba5a9b0c4c3d916b65c30fa1c560246e13ff122e","sha256":"5ec6dc9824138a6a66378b8c6de830e704fcf4a0b28911c1461395d8338f2e30","sha512":"4bff6da31015e023fe4a7eb55bcbd3c424f359bc12c6307240f018930bef5a96ce5b8ff9326b134c20f4d5cce047c098610c984f540f524d854babf3098f96dc","ssdeep":"384:lj8mHIdduiqZ48Td17WAirsD0N6if0wVUkU+OV:GmQduiqZ48Tv9iGifFVUkhS","tlshash":"fd62cf9bd9538e7380930f1843d9f738ae87a46c7a25d08afd06f85d109e6d06009fcb","first_seen":"2025-09-20T05:43:57.426849Z","last_seen":"2026-05-13T19:15:32.270207Z","times_seen":23,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/logo.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/logo.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 216556\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Mon, 02 Jun 2025 14:01:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VhavOvMw4%2BP7DNNvQXBxkRDEYhREDOSDY0gBSQD9nl1LXCRaO%2Fa%2FV65zZ7tcYCblxHZoDKooj7zlRBYhEfN0Ugg52yhyltGRATG4%2BusElS7AnEZd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b7995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":216556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 515, 8-bit/color RGBA, non-interlaced","md5":"d012b1b2a80cd27f78da9a2e997b0e46","sha1":"9605fa2a6ce8000bf2a72ec3dd62c3db950d70e8","sha256":"ecaddfcb509304f0cd100b771c7dcbe1b7fcaeec7e62fb8ba7bb21ad1682ebca","sha512":"43d252dd33135d96f2d05c966880a3bcf1db809408c783574006781ac2f8ee7b4d7ff05ef27bb4b1f533a96fada9bfe3389ac739a8eaa6da322164d1e9efeae7","ssdeep":"3072:b4PHJnlv2zX3tPC17xOgZG08rxbbMUHCBNgx3/cV0Puu8apXn57P2Hb9nc:JX3tPE7xOgZGHn7x3DhFxF8hc","tlshash":"ed242352dca3c2468d8f1731fac4af8b3513d5c1ced00ab1923252aed641b6b3ab954f","first_seen":"2025-07-31T05:17:41.162579Z","last_seen":"2026-03-07T05:12:03.575169Z","times_seen":16,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/title/title7.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/title/title7.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 22023\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6yMAGcWHrdWAj7TCYuD9Lnb3zMhQmjSxv4uHVUVSGw%2BE8Cmlpc1qi3BhL4h1FtLiMhIGJfCe1EO74q%2BKbOk9Wv2WMXMIVC%2F3tpFYGCuzkA84QtwW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672eda0195bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x380, components 3","md5":"1164db8ed3e40d0ce846b2ee4ee7c5e4","sha1":"42c1b1139dcdfa5c1feceb7925ea5ffd365f8e66","sha256":"f84622e43fd6f147bc262a1e6d9929b261bc1c307e566415ca035ac962543208","sha512":"719783ae70c084ae1a3bd7f676f22cc968445305713674fdddd06e1fdd18342afecdf2f835d64fdbee74a6679235aa28caa6db84416d657745b4859c26f49785","ssdeep":"384:8ws8vPj/gCf7zP675DRQxmxxi0Vv7NOpCZ2y6vPowCa:8yP1fqsmxxiEv7NOpCL64w/","tlshash":"58a2c0c0f7a39c47fa648d3161269cc6946884ed8d5b12d9d7940dc1cbe34d3a962397","first_seen":"2025-07-31T05:17:41.129391Z","last_seen":"2026-04-02T03:29:17.415108Z","times_seen":16,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://news.specialfors.com/","date":"2026-02-16T13:31:02.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/ HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://news.specialfors.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G1E2BrlM5pFf53r%2FTy4pRYBfxjdJ8lnM7qRnsK9I969JAeLJt5GyFaO04a38C%2Faql2W0SXnJnB%2BVRrq4p7s%2FTLLFzcH6j3UIe11PxILJ%2BZxeRdfs\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nlast-modified: Mon, 16 Feb 2026 13:13:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: 9ced672c5aa46e70-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":143276,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (913), with CRLF line terminators","md5":"979b54aa907063cf8a12add80c2a0ef0","sha1":"d5d771140f1a91d96b2303ccc7ea5558649b9942","sha256":"ed56fea2bb7709c322068901bb3f6131b16d52a012012131b6638209edea4c7e","sha512":"4da443f1c3b50de1a26f44ace91cb54189b1c6563b747b28d0f30da0af22a6ea855af7b54c2bcdf1c5b2d1b5b54265f71b76a64614a1bf5ca76d508ef3f86ee7","ssdeep":"3072:jq8W8SIIukdn7z6XYXukePuJcK86XsRMs//z+5:jq8W8SIIukdn7z6XYXukePuJ2RMs//zw","tlshash":"e9e3d8618510682a913387f9ebb1575af2600403d7074969bbf8b383eff1d188a62fdc","first_seen":"2026-02-16T13:31:30.430431Z","last_seen":"2026-02-16T13:34:37.264296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/codeflag-link.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/codeflag-link.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 1802\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhgKhvo5CJSsYPNwAIEccVeOZ3zX62H%2BSxmpFoOB51j84V3KnN%2FGNAdyBtX7sTtngwBDIMvc1Za9CqmVRZNYi02YOALPTBNPFcuuFXXbeKeJbM%2FF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e68ca95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20575,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"2ede4c4f04b8d4e0a7f3ba17cf7e10de","sha1":"b2aad0fc115b0f5123dafe2ffa827b5fb005c342","sha256":"3603cdff3f7af5e18bc120728099ef179c02dfa4dbf105a51093d5e501ffa032","sha512":"2968df1a3151d4cdde745daa575409a13873b181b27f6af11a70adf9888899c4b4c4ec4631ad825a66afc4283b739036c579ab220b99f0e69218cd42cabf662a","ssdeep":"192:MNfWPseI0uGOq1ha18df0UOu7nV0RucR6exG6:bPseI0XOq1ha18df0UOunV0RlRf06","tlshash":"21921e2ccb6239cbb73f9771277007429f767017a912052cb2f63d952fe10a694a2ed9","first_seen":"2024-02-22T16:27:48Z","last_seen":"2026-06-04T17:36:17.899211Z","times_seen":202,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/style-kangcopy.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/style-kangcopy.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 7363\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bK9OJxkeI1U2ymQlzMupp8T5VZbb%2FqnuV4WEOglwfwoFKKl5ntJzvKWRWxxBRCMc6MhEqWDcx4HLXBMYY7IS8MqlVV5LULLTDTBUmZrCF0nHh9OQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e68d595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":60364,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (913)","md5":"e4ff0f70cbcae2f24499dd2840ae89ca","sha1":"fe3a431f462844b7d732fd536399e997c7544af5","sha256":"c1cc978d973aa343c293345c1c52b2cbcf68da137a2db2e4713844974cbb1846","sha512":"eb05a7c84638d39f59d741330f628c81c0972addc065741aebce30a8dd0946c8c2de50568f0b2b10c772a15809b84bb96aa741d6df97910ff740d8e42e6c5a94","ssdeep":"1536:XeRNMqDp75lIF4Y2oEmTbucehaPd0NRWgqi/w+oyS2qkCAyf0ZsHFyllPLV0q1VK:XeRNMqDptlIF4Y2oEmTbucehaPd0NRWr","tlshash":"544340931b331448f84ad5a9aff6571632191483a24fc86abfdc718ccf856d486a3f8d","first_seen":"2025-07-31T05:17:41.094138Z","last_seen":"2026-04-02T03:29:17.483038Z","times_seen":16,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/animate.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/animate.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 3792\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQdVSIa8N8YsPxmrVMe9gmPdZ6BgHXL2ALSnkP%2FgmX6gLfWSvu94IOV7yZc2AflrJTIOT3HqCX4kyG38E6en1a5R2kPpUredSw6%2F4u6IVX2%2Bio93\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e68e495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80278,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ca763b35dde8eb037a15a37a4a4a4ead","sha1":"96f79daac19b3c1750ce7fcb97c432afb8340e98","sha256":"b1dff1fceb1103ae1939d6f02695597e7724f07e4e6f66f4893a5648ec7066b4","sha512":"a684974dcb845c08125dfe4c640a8d60fd2dbf62c4bf9aeb599b24f7902ed7cbd0a1fae42d53fa37acb157c50fdc0158636fb4b95764f2094fdc6f7c9834ecc8","ssdeep":"384:WQiuHPeRe4cyHNb3Y4P/ezeHVLVNWzWjK1RPclTb+u:XPeReYYSezeRWzWjK1RPclTb+u","tlshash":"08732c7e3992114453270b6583ef0e68663ce56318269ce9b7ce498bdf86f7d23c9207","first_seen":"2024-02-22T16:27:48Z","last_seen":"2026-06-06T02:23:39.363362Z","times_seen":250,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/shop.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/shop.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 622\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OKdB3asdzVJFzRM7yUWJDGflNzPCuf1drCLhSYSXiXtIW9l1sl7MCEPqZFmuVw%2F9t%2F1ewSonQumLoqiKUIbbtmYSIv9gLPBoa5XyQuNSEF1r53wl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e891a95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2089,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"0373399df4f0e0701bb3c7ae1793d38a","sha1":"75e067da7a93c7724045b5ff51bc964ab1c6ff13","sha256":"8ebe9b7ea3ce8f52e34a6e97cfdd53fa56abe42b54bace30b9a20bab4a6878c5","sha512":"9cf33609f4c717018f26a05565d5c6152e963442234f6c388a7b6fa8cce1e245232408cb800baffbe10fdd4883676bcda77119642906c85fa73863c96817580d","ssdeep":"","tlshash":"f84142a5e658448ef321a4fafb713769ff584893c70f42b9b2e47648cbc02182a717d5","first_seen":"2025-07-31T05:17:41.06932Z","last_seen":"2026-04-02T03:29:17.427575Z","times_seen":16,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/9.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/9.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 13100\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sat, 08 Nov 2025 22:43:10 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASHnOyIq5ksc728M7Jns2nFQnAjtCbkCQRqXqCQSPxL8t61xe42n6Ph63UMYg3yEp%2BUhH%2FzVJ7oOqqaXG8aI0GFFylsT38qifjLOB9LWeJhZ39cD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f2acf95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13100,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"3b61a92568be87325198c5517e4b5d23","sha1":"b4f432decfc6cb2748e1fe7f6c414bb2395f8380","sha256":"c3284a38c693214f7abc8835b8359493ccf397a2ae325f36f2c3e966aa685a0b","sha512":"75a0a9bba69189048b531d52f5870226df3b46d799e3d74f41f8f9822ddc97e9830630a9a8db34328c70b7221c63a2645b8b617c9069cf8417b055eb64ef56d4","ssdeep":"384:oRpa32F/njKqAELxt9FJmcWIjAOr97paJ1r:Y4C/+qJLx4c3rNpe1r","tlshash":"9c42bf6a9c2a19b2ea12749d4899d92ecc360dccd120e4fe7da1f6e72ffc5d23212005","first_seen":"2025-04-08T10:46:38.427312Z","last_seen":"2026-03-14T19:27:07.267335Z","times_seen":30,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /ajax/libs/jquery/1.9.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33018\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 06:16:39 GMT\r\nexpires: Sat, 13 Feb 2027 06:16:39 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 285264\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":92629,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32089)","md5":"397754ba49e9e0cf4e7c190da78dda05","sha1":"ae49e56999d82802727455f0ba83b63acd90a22b","sha256":"c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4","sha512":"8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb","ssdeep":"1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe","tlshash":"8c932bdd72d2b03257ab30bd106f540ff2361959280d8850f268d8f9bc79a49a277f6d","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-06-08T20:58:18.855781Z","times_seen":68627,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":172,"dns":10,"connect":22,"send":0,"wait":22,"receive":23,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/fonts/DINMITTELSCHRIFTSTD.ae4cacf317c4c9c6befd.woff HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: font/woff\r\ncontent-length: 24996\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:45:02 GMT\r\nlast-modified: Sun, 11 May 2025 15:13:02 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NQ8OA3u6B4AEta0VNXLMOgFJCoQn9aKfy%2FKxKyhZ5tl9rqt%2FeBCofByUdPn1y%2Boway8xfWqQ7d%2BvLTGHzPZeB38oF1BG0%2BiS4F05VdIMxojxrFH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced67331e5c95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":24996,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24996, version 1.40","md5":"2018d35e708e07985693c6bc12a59861","sha1":"12faf69d54217b30d4458fffad689e758b8a91c6","sha256":"c2293fa86d99d0f1f06b2ac7f85ae0517e4a3bacfd9946de7b012f04aa2d831c","sha512":"5f80cb586d6a9c04f1f3e550283694d99fdb98bd37298dcddf94b1add4da93dfa315d123cf6527fd051a012fd38c0f9f642f707ce9f914c5a7075747be7fc42d","ssdeep":"384:HsmgD0cC1mO9aJlKA9BsPsjL+baPkl5kaa4t6+ECn9CWDBZ1hZXjhY4ev+Vmn:MmLmHJlxuPl/FT1DXjhE8mn","tlshash":"6db2e16940090d26c0722a71d3b293d8774053aee2d60eeb86790d6eddecd933c79eb5","first_seen":"2023-04-10T08:44:25Z","last_seen":"2026-06-04T17:36:17.837455Z","times_seen":479,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gilang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:10:51 GMT\r\nexpires: Sat, 13 Feb 2027 03:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 296412\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-08T21:16:12.332851Z","times_seen":873942,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":86,"dns":1,"connect":8,"send":0,"wait":9,"receive":10,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"site-assets.fontawesome.com/releases/v6.4.2/css/all.css","fqdn":"site-assets.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Dec 2025 21:28:44 GMT","end":"Thu, 19 Mar 2026 22:28:40 GMT"},"fingerprint":{"sha1":"87:09:C0:02:92:4C:46:4B:44:24:E8:82:D9:66:67:19:1E:B7:36:86","sha256":"4D:6C:5D:B0:58:E0:25:6E:02:7C:52:F9:DB:54:71:C6:EC:6F:60:D2:DE:87:67:6C:31:2D:09:E5:90:3C:58:E6"}}},"request":{"raw":"GET /releases/v6.4.2/css/all.css HTTP/1.1\r\nHost: site-assets.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gilang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: uNYM5NC6UszGWO4xD0E6nUm2yxBn3C1D2j5uTaYDF0X7C4+lJ2e01w+Plqhz1Ctw/ClVwh0athtMncP+/8WsFA==\r\nx-amz-request-id: E9CSDWE5E0NQE6PW\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Tue, 01 Aug 2023 19:17:11 GMT\r\netag: W/\"bf2a5dfaa82bf7a17ae051d0fc06aa60\"\r\nx-amz-server-side-encryption: AES256\r\nexpires: Tue, 16 Feb 2027 13:31:02 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ced672f199a5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":511995,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52040)","md5":"bf2a5dfaa82bf7a17ae051d0fc06aa60","sha1":"26751288b759e1429f408258ecb3d654239f56b8","sha256":"f5044ae8cd744eb4bb6a0741f4ce3b8b41145e460aea7205fb198005d10a0bde","sha512":"5a0a49bcfb14e5131f25e07941b11b55fcae1065fe7a67881e134815d73649dc97540d7523244b91d1d96477276f1b3fb42100405af66045abaaa1c544bf3c79","ssdeep":"3072:A2bNzUcZmZd1FHU2kbVxYgjpjlCSFJoKjH1oB/Ry/0S68xbFxDQjJ:HbNz1kZd1FHUzdRLJBjHyB/RE6K6J","tlshash":"c8b4e9a0a05520dcb3d7e60f5b02b629e4b3f33ed9814f5fe1d5484e0dd3a6871867aa","first_seen":"2023-08-09T11:09:21Z","last_seen":"2026-06-08T07:54:41.094032Z","times_seen":1698,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":1,"dns":54,"connect":1,"send":0,"wait":78,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/title/title3.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/title/title3.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19279\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:40 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzibIVCWtY6u%2BY5ULeQG8pFMKFeTTgH6cWpE5ZyRjM4XZFYVJEQsB92G%2FLtNxmCZHrBGoEMJYxVExKC1%2Fwdd3KbHyu5LzbKCEFyh1RK4zY2afDKJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672ec9ad95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19279,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x380, components 3","md5":"50c6c95fa95d6a3e09a9376b6ebbe147","sha1":"c495eddb1f37a89080e3d747373bd51a1877067e","sha256":"97fd2b69a4b6edc03d504a463d99d03cd552473a58c19e081fc75374522a7302","sha512":"d5f7b93600e5cb3a479265d3095c3fe6154bf5ffbc54cba88daf70edfb96374b984ce514d2bb3d21cbd305d0b680db2695b966f3e15c0ec2d6a923e7593feeb5","ssdeep":"384:5mXE4FEYiywWS6s8TnxUMXDESQf1UbuFMxHYtG/5h419YJeZ:5mUkEDr67UMTH45s5C+eZ","tlshash":"b282bf16bc071696f1308ef773aa4185e3a9ca3809729aca5c5db72ef4c606bdc741d0","first_seen":"2025-07-31T05:17:41.202838Z","last_seen":"2026-04-02T03:29:17.452088Z","times_seen":16,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/1.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/1.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 30588\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sat, 14 Feb 2026 13:54:24 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iy5qFg9MYMUcXzXcNU3lSened7EnOWzz%2Fzl97gsta1NZv6RIsv3LoAkrZ40WtOl8BA0koyVbD2gKSotBstLTiL92bN%2F8zlxXUubPzsgobqO0ecri\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672eea0995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":30588,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"dbfcc23ea30d2c7ced410ba9b3c5a0ca","sha1":"9fa77d50b783906e733870b493bac3bd27866dd5","sha256":"4da5ae27f2538b998e3e76dcd6029bba028a6ac9ed78784fa9746a546e049b95","sha512":"a78456ee8c46b2515d48ead99608ae790934546ead540bf375bef5bcebb8d54f8f3189df6698d6f580662927af43b6ea4fc285f227afc120ec56d21f7eb3c46e","ssdeep":"768:t2XefFvfVNL5HWRPFBEbiqEmucDhu1wWJzd0Dqh0l:t2+JhUFBQZjhbizmP","tlshash":"b8d2f1c9f7710081231748578a6d9f27d92aa60df30c758edb292efed6b3a921915342","first_seen":"2026-02-16T13:31:30.459645Z","last_seen":"2026-05-02T14:51:08.577835Z","times_seen":9,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/4.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/4.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 78002\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 22 Sep 2024 09:49:44 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVGw3%2FiH5RoHREeraibz5Bjg60yDQEy71mxkXzJhGBfqFOutbtpTXkd10IkwQlmsIa19mVXBZ8pSEdLdzJy6m48O7uDmqcalnpVO6YS0ZZKOebZj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f0a7495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"fcc0a600f4327e2cd946ff49367b0e20","sha1":"100f3ddc04edcbb4472db84645fa64fb9ed55b2f","sha256":"65ca51edca23c53b3cb1b213f5c007f6f6fbdbba1594b9492dec25d434c6da1c","sha512":"1362a0e9066657c2c20442266285c65ef4eda7784447b88da5e05c0cd6dfd89f96b67464e8585a9015af49705a8ce75abcd5dcf53682633dbd187802ce7b51d4","ssdeep":"1536:r0iwPm9/v8F9wLbYnoS0DU2Lh9ApXujMqjP7KsBSFmbuROIc5HCrf/UKB:xw8X8LPALhFjwxwdE","tlshash":"027302b84782061b10afa4ddd9bb29c0c0697c794a51bf44bbf3b06c16e9d78beb1740","first_seen":"2025-04-26T14:32:24.388273Z","last_seen":"2026-05-07T20:02:39.462969Z","times_seen":8,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29671\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 06:19:33 GMT\r\nexpires: Sat, 13 Feb 2027 06:19:33 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 285090\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84245,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T21:04:56.239966Z","times_seen":58455,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":167,"dns":8,"connect":21,"send":0,"wait":44,"receive":12,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/google.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/google.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 867\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WFAjgFQA5kCpXT5%2B4w1SxeaElD0YGKmqDsgoPFayAF2Nx3ntqJos3YI%2BqK2MaHSTwpXecIr6I4hP76UMwyMyrucFkTckJUzs5Xv%2FE6QBb4yl5rkR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e892495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4913,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4780c25d021b0626fa13ce88cf4a2687","sha1":"3dbeaa3bd9657e4506703d18a2d4f9c6adeba415","sha256":"b537242dfb83663b51fc7ae93aa16d59e6e53fe0e17a479dd6507b6d7a829a53","sha512":"105963afa51dfd912cbf7713297547616cccfc7ea054df0c473a13bea44018e9a1d478c107f73ad2e954a1fd7c3297be16ce7f68c8338e189857efa64ab9e62c","ssdeep":"96:la0TUzTUs6LCLlQMk619By6g2dXIr6rXKK3KKk1:/U3Us6LCLlQ16PBy6ww9m","tlshash":"85a1795aea106005b032dfbdbbb28656d95a00a7db0380b87f8d67818fb156c4371fcd","first_seen":"2025-07-31T05:17:41.199414Z","last_seen":"2026-04-02T03:29:17.422131Z","times_seen":16,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/11.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/11.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 53726\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Wed, 27 Aug 2025 06:47:28 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYcmk0hiAxztb9w0zikNAPdv4boKIyHL8I31KnG%2BaRvVhs2MSLDejoNTtD1bgRRMsA1rxFZCk6Sxuu5rqqn28B6GtEsFz0VMdCMfbhmRt0taFEiq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b2895bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"20eef2be1e2356f89238e4bb158f8c53","sha1":"ac69d54bfe5c2ae7449d08b59baa83793a05c353","sha256":"306cbfbad098d44c0b5b229522414c6aae9131a4132a70b5b281dd46ce066536","sha512":"b14100685d301b4c851ba6efb74272ebb2343def5fd3aedf4db4266e2c31a9c4e6365ffa0a387e79c410449d269a4caf5baaad3057fffc3e553791f3febb8355","ssdeep":"1536:a+LbV2H35KO5K3jGQkyrpPcXWe54xUd2ZgJcXDk/TaY4m:a+QHpK+K3i0rpeCzZVXDk/TaYx","tlshash":"ff3302d86b9b09518ec719b8f3751b56c9b0b2458f401500720d5aefbfbaf740a3b291","first_seen":"2025-09-20T05:43:57.405653Z","last_seen":"2026-05-13T19:15:32.263964Z","times_seen":29,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/14.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/14.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 44378\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3%2FcLgl9W3UIhOhtOta9FPeaqvsFhbmxMNyrTV6hFsuzjLLYscDBw7KcqN6yqo1oyjx0bkzBNkWpEH24kkHJ30sqYTt6EfsEkS5xfct5WChXdGsI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b3295bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":44378,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"9665828be7b6f58c283ec013c85a7c3f","sha1":"2dded3180a150d60de0d738486c3c074429d816c","sha256":"5058d3671ac6a5f186e756d1ad0e1108247df39a03165f42e288ca6442817a65","sha512":"2b0a2877384fd9cb41b33fea33573bf221768acd92f0709446e8b1defcd977fa9bf8a96d72437d5ab2280d743b8605d9134a9d50886164db8ad425e5090e17b0","ssdeep":"768:1i+FXnUCHAdYp1PduhQLs2Drz7J/g6FXbqKRpNViyyK3:sijgdQOK1rF5XbxdVbN3","tlshash":"3f130186b75278ff822396209c7dfe6ac6944539f1ba3b20413e6f28315c52e5cb521e","first_seen":"2024-12-09T16:53:48.094138Z","last_seen":"2026-05-29T12:33:19.657566Z","times_seen":38,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/15.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/15.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 85859\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sat, 26 Apr 2025 10:09:32 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kVCt576YU5K24px%2FXtZAhf%2F5uICur3%2BaKD%2FdZ1GD9q%2Fthm1IcKYtLXaeTtNAM2GiTA9N8k3tLHjsxdGiqk%2Bt8m0bx5eu7ObS8GG%2BQq%2B1u%2FMr2erM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b3595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":85859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced","md5":"f38fdb4cc4179a081f54d1ce912dc31d","sha1":"3228ffa5a1098aa557b07e09f5afdaea359e773a","sha256":"a538b7e0b919b0eeb76eb2728aa18213dd39dc534e03ce544fc5fc9d005fd531","sha512":"72cb2324836efb715e5df865970f3005fedc99b87abf3d6ad3e79ea96591209851d3771cbe0397df8154339678370edb5092431880a26c90359d7cc852d7c89c","ssdeep":"1536:1xahFInQ21VsEvCzghvslZnl16QTg7dqV2bL5DEBz5RV8+eNiruaIONRTuMKHC:4inRLWzghvsvtcdqVGL5IFg6NR6MJ","tlshash":"bb83f1e9da7534daf5170607314c33f1aac82d5168a4c34be73e94e250570ab31a9fee","first_seen":"2025-04-26T14:32:24.381407Z","last_seen":"2026-05-30T18:01:54.003945Z","times_seen":31,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/kotak.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/kotak.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 110688\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVTv83jG%2FkjuSm%2BsrDfPPDZ3Vv2eVD9ZzIxWlnRqdtJe9pLQMRmsqP52bOfns3icYy9p6xSynp5vK4N5UcrYSw3iahfFgvU5zPQnF%2Bkp3Kyu4GP2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f9be595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":110688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 396 x 396, 8-bit/color RGBA, non-interlaced","md5":"10cb6a2da72f74f0783993831c68ee01","sha1":"a8bb4739cdbd42beef1c9c26397ac47db610bf3d","sha256":"f8d5fdd7704bc05e7bf6b331e65af394ec5d09b67917cc53e711ffca7f97f99a","sha512":"e19b143a0df6c7698bab68580a8f5e4bf128600bc794ba3c5ac233544c023957f11e31ca05ffb516b6eaadfcd468d26ff398f8f01f5919535cfa34252972bab5","ssdeep":"3072:fnNI8aUIIpM288lSVsx1skGRaht3bgEOHa26V:Xn4L8c+sohd0St","tlshash":"2ab3128fb199f0688ff11b73b95021bb4efe18da1c9321e144e76a6064d2d31a815fcb","first_seen":"2023-10-28T01:32:48Z","last_seen":"2026-05-31T06:09:53.868177Z","times_seen":223,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/load.gif","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/load.gif HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6518\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOyljW5t%2BM2G2th3fO1wL%2FCzapmq1bKEJLKNzvGIjeYasHMKVxFWZ2zyr%2B1IVj6bXoRzFwZoqOol%2BK%2F4%2BvM6FAjgr4e7Qpjjohlxkhtpbd5axLx7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f9be995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6518,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 164 x 38","md5":"144bb7d6f1e1cb408835fcd849acaf41","sha1":"8bc47b81f5b2231fe6ef713f70dfff07961c6720","sha256":"9a8c5f0bc8f65663a4bd8afee1623cfecb94f3c327e86705685f46a622ff6b66","sha512":"d90bd8fd31eb60cb6f64ce6c7ea06ef6814e15982fba76c283496f798d15474c0f230a93bba250b219ec9912aed16b5d3686072a348c3d6e7481b1b7cf9f1442","ssdeep":"96:62OdLI7ETbpPx/7LI7EkJTLI7EWLGzlLI7EULI7EbLI7EdLI7EhQGv:kIQTl1IQEIQMGhIQyIQvIQFIQhQGv","tlshash":"83d1b63ce3c1be14e4446a7a94af7f3d461459346b58166f306adb20ba123fc9e4c3d6","first_seen":"2023-10-28T01:32:47Z","last_seen":"2026-05-31T06:09:53.823817Z","times_seen":281,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/link.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/spins/link.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 888\r\nlast-modified: Fri, 30 May 2025 15:33:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXiJwKKEcJYZnKyIGOmJeSlgz9DxIEWlVo6HxlzW17fbbJXo7T5DBgLTFIzCFDnR7uFAjcxwBGhhyi8ghaANYmdNej4IYj6UplQ7%2FMxAhyfGHlGF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672fac6595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5875,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1a28e206687159182a7029e0b1e749ff","sha1":"540487c8f7fa248f41d20948e10bda345c2cd0f4","sha256":"73c092107d16d864acd39af84fa5dcadf7d31e798e5190c680ea2042ba30d8e9","sha512":"fa56776de14d07c4dd08bcf755a6a3e069a0ae80594d0ba4dc847d62edb979894a8dfb8bce6f531e7c5a5c56e01f360f0b62955365987077c7b6ec2836f1d74e","ssdeep":"96:VnHEWiHRwiKLAN4LSz7btQtMrAEevdlFLeN4Lq73hUJeJAJKE+6rd:lkWiHRwiKsN4t2rrgaN4XQJJB6rd","tlshash":"2ec177047a195881997797b6b0bb9440eb2d072f09118f09f8bc29c86f70f16fa76d9e","first_seen":"2025-07-31T05:17:41.165681Z","last_seen":"2026-04-02T03:29:17.429301Z","times_seen":16,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/xgoogle.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/spins/xgoogle.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 984\r\nlast-modified: Fri, 30 May 2025 15:33:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTtvG0xQAl3DE0wvUmkBtesAyvgSOvjK9PYzJfw2pY5uxCcQlSLJfFHJCPul5WieNzQ%2FziV3hS2671LDnQa0uq%2F8U1eS7tMuPHI1nDbAAlhdbszR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672fbc8c95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7065,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7178130c1983ed5d91af1c23a89f5ca9","sha1":"2786b6a14b4bd745fa29e3d65da01ea0e6e74f4f","sha256":"e68690c05ba5f036ea0f2b538f3923136129d9cfb486a09d4049b94f4287298a","sha512":"eafbbc8789533472ae8ebfc9405d3344abe5d5f0f33cb69945b71ad272156d2a8851920964084d32e4bafa4afa3c43ec649300ccd8a6bf2970081dc37597d58b","ssdeep":"96:ORPgRiv6Ye48stLy4LjLFLlJX4MAP11lOZL6xgSIIBKut8LYLWLsLfBPS5YgP65V:0dZ8ste4vJGPicCwqnW","tlshash":"efe17f0b71291e9f9976d67622b64014fe7c481b45018f08fcac18c82f71e46bab7dde","first_seen":"2025-07-31T05:17:41.146124Z","last_seen":"2026-04-02T03:29:17.482183Z","times_seen":16,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/Twitter-Hide-Password.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/Twitter-Hide-Password.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 7981\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:14:54 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S550wFvaPtg3VIacRmsJXj6KmYAou8BJaYQ5u6%2FJ2aaqRV%2FoD%2B29zr6pLA2HzUag8oQdahvZKo%2BFMcEW9PPS1iGlX0xEo268c8ZvzqbtdU1xWFYI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b8595bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 656 x 656, 8-bit colormap, non-interlaced","md5":"2c25cd03bc9be4e6f35f56dc4021ced7","sha1":"19c523751edca5b183f0ee367a0aa0c8bce4579c","sha256":"4f7bf31fcbac8ecbfb2893999cf1d757fe10e38a65527ff4241484a838f0c998","sha512":"67f6407ee19afe5fbb43d7a76f3a45ef3c8c39cbb635ee2e8864cace694517113ee4dc535d31192df79b7e413ad29bf32ff065296774da186a971a32fc57dd9a","ssdeep":"96:1L3Ki6jYH7ukZ3nCaVGTnuRYnqdrWimbH5MIOKDSrSbZBh65eX787Zv8xZdZ1ksR:p3cCaK4TnuqYrWVZMIhmGbZHvXrxNJrt","tlshash":"23f1bf3b271cadf2ff4e94b52afc8d82cb9138795ad0c44b99e11d6078d3e5aa395084","first_seen":"2023-07-02T16:12:44Z","last_seen":"2026-06-05T03:08:03.278682Z","times_seen":202,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/icon_fb.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/icon_fb.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 4549\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:04 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BxAOMptMZ60JcwM13ZCRkTfK2xpGFdFqgHKTfnnljfrx0yNRr8pvV6syd35Zk8Z0n9mfYBAN7lyjhJNzEw2ziuxhqfZMQ%2BxaON7IrlQ9AhI%2BHrC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b8d95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"55eef055b7e3c9a7b01e75bf1d946602","sha1":"298bedf186fdcc606901513a2edbb5bc3ca233e6","sha256":"9af17159dff494810a71a37678db1df805f264b935730d1c2e5a4d970305917f","sha512":"b96646a67b2ddd551b83bde69157d6f1fabead3cc483762e56f18a28f42e6c1f9aa30e5bbb99bafb4af38831dfb1e43de7089e56aaf73a18108e2afcf8bb3a4a","ssdeep":"96:WT3/BEXqBW6ZdU6fMksxK8K4fV1sIAHQ6Y+qJ8fV:WbO6+ksxKU/f6Y+bV","tlshash":"cf917e92e4cf0abaffe5b15e21441b3aea1b5f621c3466c6172451288edcde7257c10d","first_seen":"2023-05-02T16:35:05Z","last_seen":"2026-05-31T06:09:53.846087Z","times_seen":627,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/guide/e7acdbd75bf8259cae9cc3a6f3d6ca01.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 28733\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 11 May 2025 15:15:46 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEc1jLEXWRjPZIbhZLWDHLSWUXZWGlthXpWo7hjJjxlMKcz6f65HBXkQAVaH%2BI74uJnxMz%2F3F7riJT%2FLPbyieCVmgfl3DId%2BTGs8WJE5wJ6dV9O5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f9be395bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28733,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 350x200, components 3","md5":"766039d78bd5674c819db24244539ff4","sha1":"31765fa105e4e0dfc7778ec77e89bdfe0ea399bb","sha256":"680f159f2ffd2583ddcac5783bbd8ff63c9ae9be0d94ff56948d9b41051ccab7","sha512":"8975240e2e3d3cfa6845209f08103b6f44207488d2554f8b2b5beca096952b8869fc0e9af9bcfc79d8576540e29e1746eacdd45dd8be63ef7d55f3c7d0c549f8","ssdeep":"768:xcTTVEZn/nsLppGxNs8s0jrK6nRB6Ufy/0Fo30ayu+mD:xcTZm/EpGjs8XK8RJf6Ao3eu+mD","tlshash":"68d2f100dbd031c6d39e43f250b915a2557f88fa5226934a7cc738cca6958eec0f9f6a","first_seen":"2023-12-12T03:00:09Z","last_seen":"2026-04-02T03:29:17.439327Z","times_seen":155,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/scripts.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/spins/scripts.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1186\r\nlast-modified: Sun, 11 May 2025 15:13:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nwMOUvRiGRIP19EphTN75eskljbjnb0tzdyldK53MROSNQ01iFHgRfpGNHRbm18Czky8wACc2U1Bj%2FwC%2Br8hjlAr33xmZt3f8YTAeFmTBykpFDm9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672fac5095bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8379,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"713da5406f59ec303ad4d966e9bcd452","sha1":"5d562589e0144d07f5151f0d00cf68959300d204","sha256":"d2fe2d180334a8f5a594522b569c0a889863b1989222ba69b24ca8f54c55c3ec","sha512":"aa4efebc89cd4bc0d05562f3f302c369b211bfcb8f67754f2294f33ede89da1f114fdedd1d25d088334596230034ad0760d6be5bc5ad69bd48a6db0e74ee83aa","ssdeep":"192:jai2ExGnwSP/dlj3VM+lWiDFiSKWij7Jy1ihyTHvDfH2AuX:jaiZxAHdlj3VMqWi5iSKWiXCiCPDfH2H","tlshash":"fb027986b5d52c41a47bb8b5123f1158355c880b210acf05fdbca6ed2f22e279d76b8f","first_seen":"2024-02-22T16:27:47Z","last_seen":"2026-06-02T05:48:43.033125Z","times_seen":97,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":849,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/spins/senderv2.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/spins/senderv2.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 26954\r\nlast-modified: Sun, 11 May 2025 15:13:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRP24Lisrg3tYeKFFfThW0i%2B%2FrWX5jKfjW9LtKLHDWk4i8ke20DHIMe53OWDRB0iG2KMc6xO1N3MdNxHXmmF%2FGvgZi%2F3OO0MoQzIJi6sB1XziC0P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672fac5495bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":93345,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a331c1236fa6f0dd6c9f3f9e98df2e9a","sha1":"5121042afd07566cb65f1046310e6958972db704","sha256":"add7fa0bb5ecff1a86355cc79ac10ec188fc78981ac88911a590b6d53692f034","sha512":"86251be8d03f0ca5f409f7ed03854d31bbc5bd0f97f59fbc7790da1ab3c8911b120883926911afab8a85ba1d19f06ee1a9959a476c28fcf0ad2c42c9e8cbe463","ssdeep":"1536:uKQY+JGsQzbPOe28QUm+I8jKqmLSIPHchdaevC1sGlIC1q5Y:pbBan+IZLSIPHchdaevC1sGlIC1q5Y","tlshash":"669340c176c17c8603876b76371bb1e6e53f4c986184899af110fc90f4f9a22fae56b1","first_seen":"2024-02-22T16:27:46Z","last_seen":"2026-06-04T17:36:17.867099Z","times_seen":118,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gilang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:10:51 GMT\r\nexpires: Sat, 13 Feb 2027 03:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 296412\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-08T21:16:12.332851Z","times_seen":873942,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":87,"dns":0,"connect":10,"send":0,"wait":17,"receive":4,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/title/title5.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/title/title5.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23454\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:42 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BArfLGQ4ItEzS06yh2zu3Ixa24jarRIi0XQx%2Fvw5SCUUBzZylGFHqgL3gvHjhJmQmi7lqKV%2BazcJKRnxCN06GaAMYae6L%2FDhZikEJOOjGT3yP2RD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672ec9ce95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23454,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x380, components 3","md5":"5726c7081e485f5d67a6c125354184c6","sha1":"0027bb13f06f4ed3ac0efb97e0eaabefd3b7271e","sha256":"d624f934de9fc9563f6635c711a9b87656433ec0a590fae3d7b3e5f7093e446c","sha512":"10a63cf82687dcdade0972ebd2982ba94749a6ae50cf21a1def8c8a9d02df4815e051cc4782ccc8d1ab476cf82ac9ef44bb100dbe616431a8fb5c200673d2774","ssdeep":"384:isJ2OMijkURdhH1gnanZRmpYzW0J5OYdRQX2Ylqx+aRKHCIuUHilRzL4fDZK/:X0wrJ1ganZRmVGvTQX2Eqx+xHCIuUClv","tlshash":"2fb29d1c3695fa4ef70e6f788ace4aba7b8901021bd35247e9001e9073778e75e27b40","first_seen":"2025-07-31T05:17:41.045527Z","last_seen":"2026-04-02T03:29:17.486645Z","times_seen":16,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"news.specialfors.com/","fqdn":"news.specialfors.com","domain":"specialfors.com","tld":"com"},"ip":{"addr":"104.21.85.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T13:31:01.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"specialfors.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 15:20:18 GMT","end":"Thu, 23 Apr 2026 16:18:47 GMT"},"fingerprint":{"sha1":"68:E6:C7:99:AC:7D:04:0D:60:1E:7A:F3:6A:A7:28:71:AD:4F:E7:17","sha256":"67:9D:3C:13:E3:90:BF:48:1C:B3:F9:36:E2:41:B9:0D:9E:D4:B7:DC:D3:EE:5D:66:82:48:AC:F3:86:0D:0A:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: news.specialfors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:01 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 16 Feb 2026 05:09:50 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRKaImKMnvWIQdTvD16jAzEAvo291Jd%2BCrTIr%2BwTcKnQr1UalQB2qFgetPdRUFlEORiuTAvIAoDHULEM%2BA55Nts7HvMZ3vSPJe3j%2BUdngCJ0S3Fx\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncache-control: max-age=1800\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9ced6725efc26e70-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":897,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4dc0c332a4b4218b5302ee667e64a6a4","sha1":"ffc5bf2be104f22976585ee857e88fa7f2e05feb","sha256":"6efdfc6f6bf1ffe95fdb2c567161192c7d84c881735254f1a2589524eb94a0a6","sha512":"aaeb3a5e5aacab308274be3552c0384657b57d72634765894341279ecf511634422aef58c3733f9d545ca6db1bae9a16b0bf11c2a6697bf531095e8959855df8","ssdeep":"","tlshash":"d41189976c4228184030c3746afaf09dea9704a337018671bdfd3a174f74b828897bd8","first_seen":"2026-02-16T13:31:30.481981Z","last_seen":"2026-04-02T03:29:17.426684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":38,"dns":1,"connect":8,"send":0,"wait":571,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"news.specialfors.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"news.specialfors.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"news.specialfors.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/css/lins.css","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/css/lins.css HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 1074\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:12:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=2,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfKpWro3bEm7LcJb0PVQ0ViYKpW58kzDTV31W6x%2Bao2v3uoHJwnARmZ%2BrKBZxDVIehdE%2B4i4QkxxYT3OQUbQqF3OU5xIFkwCk2QXmbRXHCLTtyH5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672e790e95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5491,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"db78cf83ec0a5eb80a7f65af687c4da8","sha1":"2f65443774751820d0ab5f2d0bc4a121c2f257d4","sha256":"66167c1482d58f6f761ac2ec137488154a46c355429c74a4dc10865bd33a8444","sha512":"5409f58e849596d381b3a660362684cf2a0acacf2d21ea94c65cade79ac66f63c69dff34feb8078f52cf025e9009081bffc673c4916cd05a6af93528ee4d025c","ssdeep":"96:N/xFEw9fL7du+7LQNe0tKJTw1xAQzahJgy7B:Rd7dJXQNe4KJTw1xAQzaHgy7B","tlshash":"4eb1cc209605a105b0369ebaaba2b316e54414638747467ffff0b380cff55689761fce","first_seen":"2025-07-31T05:17:41.152009Z","last_seen":"2026-04-02T03:29:17.446594Z","times_seen":16,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700|Teko:300,400,500","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700|Teko:300,400,500 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 16 Feb 2026 13:31:03 GMT\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncache-control: private, max-age=86400\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24899,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"bbb0673ff5bf4a8964b87445cad3abcc","sha1":"c6aa15eb0e0753794b8066cbf104f11dd340d52e","sha256":"2a77cc2f64f2636df24132aafae79359498c0b9d29422d88c0864cff622c16d7","sha512":"8ce126ca4337c662f7a3cf6480a50bb054ae79c7b55798a78a826397339fb5434e30daadf2195cd82f8f5b2cd55ad19ccd563e1d6af3ca3b4783607d9543c9b1","ssdeep":"768:38XguBSivFRa1KRzBfiiMgFK1GIBEiNnr7gr8yBOijh1T:MJiWt","tlshash":"e5b20ca1041b500097834ce223cebf35fe1f52507142d0b5abfdab6baddbc6652693ad","first_seen":"2025-11-23T00:37:31.222975Z","last_seen":"2026-02-19T13:19:54.484958Z","times_seen":82,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":326,"dns":8,"connect":21,"send":0,"wait":32,"receive":0,"ssl":378},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/lenzz/3.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:02.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/lenzz/3.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 22139\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:16:20 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0v07vNNjl2G1VTPUZtOLDiZ68YozhCxv9rXtpsib96ZajCK2ELWT6fIEu8pcikrgCbgWvzs5RCL%2BKCPFYi1%2BwzGisBhDImIsIQw2TJdAEWlSnTfe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f0a7095bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22139,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit colormap, non-interlaced","md5":"f2da3583c3a9efd372034ee83f2274ba","sha1":"3d7688ff15393ad038a54851ba64128c116080e4","sha256":"bfb551be6a0157558d4145e40555a5d6d5f08ab7820f36146938155d147e6d5c","sha512":"494b3a3ccc61b73f498ac3ffdb03a2e2dcac1edd684f4730b86401f4c5bb6f6ee2953d1db63f0a96b02168883b2aced6f50fa069a03e101c7a55c8626ba63351","ssdeep":"384:J5Dc1Rb6fDlhLMhp6dnCPg5foT/Y/LcAowvcsFnT3SkaEvwUubgqLGQb:Gb6fDl+0d5Cw4twPlbvSZyc","tlshash":"efa2e0035dc4e422c68955fa82391ab23f044fa93467c7ef504b75924b7a39f54938e3","first_seen":"2024-02-22T16:27:47Z","last_seen":"2026-05-30T18:01:54.02652Z","times_seen":132,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/alert.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/alert.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3209\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:14:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZwYNJ5j7EvZcYIffwDEurXB6OzGrwfLL5GRpen7FgePQcSr7yje1yX52VC9XUf2JtqoI9Bgjl1RS9DvA4JU746CSFqpJcZ5CXPq8F3w1eZ8ouEq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f7b8a95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 86, 8-bit/color RGBA, non-interlaced","md5":"647348a6c16dc7ffa7582cef63d47247","sha1":"8ef22a07be992cc94060b8b855be9ebfaed98d9c","sha256":"5717e656143df2f6d333dc7d08fe1c25727cd8a2076e5d8242e65cf256e8a1ef","sha512":"37c5015d0dacc74599d823f894c05d31a6da0d307ad02cebc3ccf28c87e383fa5e66e02895ff8e19890505778daac9cb3edf04f0880cd9b69040fda685a4a77a","ssdeep":"","tlshash":"e2615c6a90a27ec7f575322f59792884c0f989d6f433267d3c18d5b108cd7a7467051f","first_seen":"2023-11-05T14:08:59Z","last_seen":"2026-05-31T06:09:53.731147Z","times_seen":262,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/assets/footer-login.png","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/assets/footer-login.png HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 32122\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:53 GMT\r\nlast-modified: Sun, 11 May 2025 15:14:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30009\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEN6JolVeislF28b66xLzImLqMeyHc8N4NjNHp1FlZ%2BQIbyvrxGeFk9Kf4fj5ITAo%2BAt2kR2cJSvBUxws3%2BG6FT%2FkgkcRytVxBzv2%2FquiqWILVE7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f9beb95bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32122,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3264 x 137, 8-bit colormap, non-interlaced","md5":"2fa9fdf8ac903d54547edb9781d47929","sha1":"27f9ad0ea399abb49664456eec40a1356c59d301","sha256":"4d4a7b0d14fc65fef6cad85261d864fc4cbc4deb2d5e69eba55e30df4b531694","sha512":"3cb88582c8decbb1039fef251470a7a2d2b8dbc04bedf30da49f5611fcd16c8d7b3041dd76701713902601b4b62f5ca845d6a9f42ae31ed47381f6eef250b217","ssdeep":"768:gHbC5KJlVbR7WezrRqfDSvKcn+sox4q4b6i9yfJ6hA3UcdxZJ/:gHbyKLxbROaVR9Vi3ldh","tlshash":"86e2f1eeacb2b17cf4a8e0c61dd8e419118b35f62278c11e02f26552397677b634938f","first_seen":"2024-08-20T07:44:32.2501Z","last_seen":"2026-04-02T03:29:17.441207Z","times_seen":18,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.10.2.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.10.2.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-16bb3\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\nage: 2469966\r\nx-served-by: cache-lga13622-LGA, cache-hel1410026-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1, 26475\r\nx-timer: S1771248663.103890,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 32788\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93107,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32072)","md5":"628072e7212db1e8cdacb22b21752cda","sha1":"0511abe9863c2ea7084efa7e24d1d86c5b3974f1","sha256":"0ba081f546084bd5097aa8a73c75931d5aa1fc4d6e846e53c21f98e6a1509988","sha512":"3aa68568ff2592ead412a0c7f5c39abc37ac562f00b7c16af07cd5eff881aadce77ec71040b36c0ad9c2d2aa4edd7744fa72b0f44cb8b485d4f283b1b49c2141","ssdeep":"1536:L4mCgi8DyCuXXFiJ+L0kJQsJVPEKLQRZdC/RlfDknv+p0WzH/IoSZ7qABZnu0sFv:LGsKXlI2p0WPSbDrstfam","tlshash":"3f93f8ddb2d1b06257bb21bd006f540ff236195e280d8850f129e8eabc74a4d9277fad","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T20:56:21.740551Z","times_seen":15524,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":39,"connect":28,"send":0,"wait":28,"receive":10,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/material-design-iconic-font/2.2.0/fonts/Material-Design-Iconic-Font.woff2?v=2.2.0 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gilang.fortoday.asia\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 38384\r\ncf-ray: 9ced673398d2f375-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5eb03ed9-95f0\"\r\nlast-modified: Mon, 04 May 2020 16:12:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 551167\r\nexpires: Sat, 06 Feb 2027 13:31:03 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=V1FsnP9zVYH6s4RZ10Cn8rYKddGW5sV8oTQl1di98c1wukFliUlZ3BPIQJmqS4dsfZoDeolKN1LajSPFcNB06ID4qVOlEDuuOq9FENbh65oJLkOQgxPFokuo5iVav4W3k7wNnd27\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38384,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 38384, version 1.0","md5":"a4d31128b633bc0b1cc1f18a34fb3851","sha1":"6ee4c79372c3fd679706306ede47e4b03cf53d60","sha256":"e8eea96e29a7c0a72612ab85ca3229979666467a28349642c2176e7189a1a39c","sha512":"c129c0cb100feea6d00b739d1cde2a7362b2f45f38da3e4c949193f40e59abc9c387ada4bb230b00fd62e137409e18def7c1636e1cd463f8070106e8b7e21d48","ssdeep":"768:FQ+usUhhv0N8qSRCjPCyloYRNcIsTh38i8/3V93ut0f:FQlsUhtYLBl/nGpUvI0f","tlshash":"db03f163b5a6f248eb812d7523b052ae52cc22434f93e19df585d72cefc615e025f722","first_seen":"2023-04-05T03:25:07Z","last_seen":"2026-06-08T16:56:07.195755Z","times_seen":5807,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":43,"dns":1,"connect":0,"send":0,"wait":29,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/scrip/img/footer.jpg","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /scrip/img/footer.jpg HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gilang.fortoday.asia/scrip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 194473\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 23 Feb 2026 05:10:52 GMT\r\nlast-modified: Sun, 08 Feb 2026 13:29:08 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=4,i=?0\r\nage: 30010\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIiGV0KBGOac5ZUEk9GVbeBsTRpx4%2BCOnLeBSvqIkZBYff9fl9KMDWIcR0OqagJ1Kldjm8udhNbA3asVZQ6xlAKwAkHbCNWRQJuc2rX2%2BDbELqOX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ced672f5b3995bd-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":194473,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 897x1280, components 3","md5":"e21eb53cf71bc8113bbcbe1887ea69d8","sha1":"ed22c144de0ad5761db18543e9333082de4e9b86","sha256":"16307c376575a097c71440a9faef4a8eed1b21fe79218d686db1fc30ad92dacc","sha512":"22d01018190e3b1ac2a3cf6cb2dd33a8fe1357bfbefb281c82418fde7e4626fb352d9fab736ddd18a78f3cfc586b518dfdf0fc4d496062009546f991bc42e9d6","ssdeep":"3072:d0+Qazpd6MQrR1i474/5lePTDIqavo5JymcSJK4DapwOCXZ2kaWX2yO:i+bNd6MQ7iIklVvvoGmcSJ/apqgImyO","tlshash":"e014bd8b42dbce64dafd443539d38909295710b3172fc629ea1fe9eab46cfc17210b61","first_seen":"2026-02-16T13:31:30.489084Z","last_seen":"2026-02-16T13:34:37.268732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ced67358c7895bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19844,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gilang.fortoday.asia/cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js?","fqdn":"gilang.fortoday.asia","domain":"fortoday.asia","tld":"asia"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gilang.fortoday.asia/scrip/","date":"2026-02-16T13:31:03.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fortoday.asia","organization":""},"issuer":{"commonName":"Cloudflare TLS Issuing ECC CA 3","organization":"SSL Corporation"},"validity":{"start":"Thu, 22 Jan 2026 01:37:47 GMT","end":"Wed, 22 Apr 2026 01:46:02 GMT"},"fingerprint":{"sha1":"C5:0C:E8:28:8A:BA:86:46:62:A0:C1:06:2C:68:C9:ED:09:E0:15:66","sha256":"45:9F:C0:05:CD:06:AE:52:67:43:0E:3C:D1:AE:D5:1B:E3:89:9F:56:EB:DD:C4:F6:CF:AF:55:66:A9:4C:C3:B6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/60138c04e6b2/main.js? HTTP/1.1\r\nHost: gilang.fortoday.asia\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 16 Feb 2026 13:31:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ced6735bcf495bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19844,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19844), with no line terminators","md5":"ef1d511f025dde9c80da61f06f6c15a6","sha1":"fa2bf4ca1813640e8baea42a7c3b8d2a25269b45","sha256":"7ba579fd20a1d26ad13639edd8b7ee230b0b854a781f2f1299fe46c8d0991db5","sha512":"5587ca91e980cd20e440b35e77b3d216b5afe3d0692343b75054ae65e52069548ba4e200b8e6addb3b756c9779220809ec6ebc555cea971146ea17b4dd8e3bd9","ssdeep":"384:zwZrawUBOrlEYEpJxw0MKErNm63xeY/W1b7UIuYS9iG7GRqtHk74JtRR43D:8R+OdBa1XUIuY4asliqm","tlshash":"fd9231cd34d7b438627f80f6041f55abf79e69d06d1c281689309ae4bb31338566afc9","first_seen":"2026-02-16T13:31:30.490722Z","last_seen":"2026-02-16T13:31:30.490722Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-16","alert":"Phishing Block","trigger":"gilang.fortoday.asia","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"gilang.fortoday.asia","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}