{"report_id":"8609ca88-5974-4cd2-9945-2c4472ac3f26","version":0,"status":"done","tags":[],"date":"2026-08-14T00:36:45Z","url":{"schema":"http","addr":"menu-aktivasipayc.paylater.buzz/","fqdn":"menu-aktivasipayc.paylater.buzz","domain":"paylater.buzz","tld":"buzz"},"ip":{"addr":"104.21.85.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"menu-aktivasipayc.paylater.buzz/","fqdn":"menu-aktivasipayc.paylater.buzz","domain":"paylater.buzz","tld":"buzz"},"title":"Yuk Aktifkan DANA CICIL \u0026 PayLater","dom":{"size":22489,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1493)","md5":"d2656e0bce3a9a935a3eed0514dcaa5e","sha1":"56c3c17fb25f721963a2c25595bfd0e387ef01b3","sha256":"060620308fb17e7813c50addf99649a23f627dc096381a0e7664968281971c54","sha512":"cbf15fa99f2ee5db1177bfcf370bede54feb634b314b1ec57793dd0b910bea7e8e10874d056776308cdc8c4d0c317867816bca43bafb0ac86a05962854f554d0","ssdeep":"384:E5vzVsMnwk2PqVBfzqVr8KXAi2bpXb3D1r5VvclYnvem4y:E5N2Pefzgr8KXAi2btf1Vpemh","tlshash":"3ca2b631a1e42437018b97e999e6930b3db7d25bde47452436ac8be00fd2ec6dc2796c","dom_hash":"domhash227d6850cd45a5c322d437ad636e8adf","first_seen":"2026-08-14T00:36:47.635421Z","last_seen":"2026-08-14T00:36:47.635421Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"menu-aktivasipayc.paylater.buzz/","fqdn":"menu-aktivasipayc.paylater.buzz","domain":"paylater.buzz","tld":"buzz"},"ip":{"addr":"104.21.85.56","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-18T00:36:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-14","alert":"Phishing Block","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"picsum.photos","ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-09-14","domain_rank":29556,"first_seen":"2017-10-10T10:03:26Z","last_seen":"2026-08-09T06:41:21.494844Z","alert_count":0,"request_count":5,"received_data":4094,"sent_data":2820,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"menu-aktivasipayc.paylater.buzz","ip":{"addr":"172.67.202.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-29","domain_rank":0,"first_seen":"2026-08-14T00:28:08.519406Z","last_seen":"2026-08-14T00:28:08.519407Z","alert_count":12,"request_count":3,"received_data":24875,"sent_data":1593,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-08-10T05:01:08.148257Z","alert_count":0,"request_count":1,"received_data":31983,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.nlhost.my.id","ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-07","domain_rank":0,"first_seen":"2026-08-14T00:28:08.519878Z","last_seen":"2026-08-14T00:28:08.519878Z","alert_count":0,"request_count":22,"received_data":2409656,"sent_data":13127,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fastly.picsum.photos","ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2017-09-14","domain_rank":452388,"first_seen":"2023-01-26T01:05:02Z","last_seen":"2026-08-07T03:26:57.700032Z","alert_count":0,"request_count":5,"received_data":11560,"sent_data":2914,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1de0a6b10518fdda25d674e0044c9a1a","sha1":"d3a523004a99e2bb3b7a6d18163c8eac64cc3ee9","sha256":"e1ac4849b9d4a498b68f8aca01e6ed99a11d94b35a2cec533b3916b8fb722fd6","sha512":"644f6965a517343ebabf7f34414b5c87fe6c13db4f161db3838e694763c1d025640ad39112fd8024a91289d2125a4cac12e434107f1f69453976eefc6f1f3b51","ssdeep":"768:zFRvEuZijhc23t3cE0jvwzDIbb5sl2PUd1frhu/oXDh+bHooo7s43VaSqAlzM3mo:bEiBdbwXk5cFRW","tlshash":"44e218b6a455b13203fb41d750736217f33461223086c4e8e62ede4768639eba1e7f6e","size":31612,"data":"","first_seen":"2026-06-18T22:06:16.492131Z","last_seen":"2026-08-14T10:54:14.131148Z","times_seen":3729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"menu-aktivasipayc.paylater.buzz/","fqdn":"menu-aktivasipayc.paylater.buzz","domain":"paylater.buzz","tld":"buzz"},"ip":{"addr":"172.67.202.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ee7b5be3736912de57d9dfc2ca1932a","sha1":"e2c8a680df62f33a79765c413eed003f6f85f768","sha256":"b0066495755924ea1bec2a5861521b330417b782e0a1aecad55de4d660052f8a","sha512":"f2b278615cd9d64346dcaa5cc9d754666ede30effb39f284e8da20cb992f7783f3e61901d5acd7ebfdae89ba8a6b1215f2f023a794d95338e69601294c988aad","ssdeep":"192:jQBsKDia1rD/V4MSSjcR3DYnJjVMivRVgWXlk:cD1r5VvclYnv2","tlshash":"cb02bb16b2953579889f67fec5eb82943c3615c39d45c83428a88e240f909c9653abed","size":8616,"data":"","first_seen":"2026-08-01T06:15:40.378804Z","last_seen":"2026-08-14T00:36:47.677888Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/live1.js","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eac9b80d654ae34a63458afd75abf5d","sha1":"878bdbe7db7f3eb81fd5c81609b6d270da688c86","sha256":"7076cbfd0f8d1277ddf91ad31f92bbc4a7d90d197b7f1e34c0529fbec28d8aee","sha512":"c751234d70e32afc02f597f0c966af426be5d76be830c9e73943a8a9bcd15ff1a78bce608c0d5e9a247127db4c2cb6f23d3d3760c05c8168d9920d7048412bd4","ssdeep":"192:6dD0WIMMP9komQSNWOa6p20kYTd9XrWyu2jGZaoi:2oWIMMVXmQWlp20VaQf","tlshash":"2e3287adade320755d6287f58abf622835e9d91384cdc019b92ce3600f88d49f259dfc","size":11369,"data":"","first_seen":"2026-08-14T00:28:11.164965Z","last_seen":"2026-08-14T00:36:47.653742Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/b1.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.117Z","timestamp":1786667769117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/b1.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 03:41:08 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8R6moZCdVz1ivhjrPwYmD6N1qHYCz29b%2F64KNCBvYD41sLjfK8GjrR3NQ8Aozygo1fTYwBOVRKe3nhlLe%2FS87J5YhiT3936ZmnLsuWmKK12ZwYGv8lZrqWPy58ICKtvVuz9HWw%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234f88fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 398189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398189,"size_decoded":398870,"mime_type":"image/png","magic":"PNG image data, 1000 x 450, 8-bit/color RGBA, non-interlaced","md5":"b6600362f078cb2b36862092b7d6e93c","sha1":"401be385c721b9cd1edfe1693a925fd2561030de","sha256":"ad45791ca5f3defbb62d19a40a18b764e42c1b20ac461038487759da18a8a381","sha512":"9321cee0f59bdf0fdd67f0a3be0e928495f2f8a2d561153583d6cf6a288a909e97ed6fc71cfbfe9caf0742cdd7d2b35f59c3c49ff47f83701b66e3e1d4aea5e5","ssdeep":"6144:YdllxJe1WtuZZjzVhBmov3oDkvqMEI4wy0+sVnEo6tgknREeuBKLWpo2zFRGn9pL:Ydxw+uZhBdv3oDpMWBs50nueYpGbn9rB","tlshash":"4c842300f47e00696528181150e0bdfbefc6128bba554def39d16f369cde6ed5a02a8f","first_seen":"2026-06-15T09:40:28.329013Z","last_seen":"2026-08-14T00:36:47.638585Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/1037/64/64.jpg?hmac=CElSfKFtr6fLmUxnzZJU1_sD-sxkJOUnb563Ers0wj4","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:15.636Z","timestamp":1786667775636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/1037/64/64.jpg?hmac=CElSfKFtr6fLmUxnzZJU1_sD-sxkJOUnb563Ers0wj4 HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"1037-64x64.jpg\"\r\npicsum-id: 1037\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 76389\r\ndate: Fri, 14 Aug 2026 00:36:15 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786667776.637881,VS0,VE1\r\nvary: Origin\r\ncontent-length: 1478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1478,"size_decoded":1984,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"fb9fc7b574bb063ddb78c7075d546a79","sha1":"68ec3428ee7225ddc13aac602351667604f7ead4","sha256":"508d5e715e73f428a40ca13b71a1ac75e5cfa161508d5343e69713021fcd1c17","sha512":"78c9d65e0da531b4334465b3e18f2b8ebe110626973073baa23be7e07b9e42a4b1df807b49916c6b57f0c5ec9459595cc26f7c79cec53edd37f885a0ce454b7b","ssdeep":"","tlshash":"a2315013bb529d03fb63153e41e927206304eca2680d6b7f6bc27a1c9da7cf14cd62a4","first_seen":"2026-08-14T00:36:47.640053Z","last_seen":"2026-08-14T00:36:47.640053Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/2/64/64.jpg?hmac=76NcNXD8s1NJgkMvOWlxDHX3MAi9RFaqeN8PpI9XLRk","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:24.642Z","timestamp":1786667784642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/2/64/64.jpg?hmac=76NcNXD8s1NJgkMvOWlxDHX3MAi9RFaqeN8PpI9XLRk HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"2-64x64.jpg\"\r\npicsum-id: 2\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1241765\r\ndate: Fri, 14 Aug 2026 00:36:24 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786667785.644497,VS0,VE1\r\nvary: Origin\r\ncontent-length: 2113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2113,"size_decoded":2615,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"87c921127758018228f47604239b3e85","sha1":"2169a1c74cf986592ccef0b7a6b400a16dfc8ecc","sha256":"036405bda1470c15066edfa2ed6096ae885a897ac483011b413bb7d32d2afb14","sha512":"b15ea147148231feeaef9d2ec5f4ad72c1d6e9a9d14fbd2b326b0feb126a9892758064c871e8eaed9bc472353964e4becc69a43c703f9195b49f0b3ecf59742b","ssdeep":"","tlshash":"93412afeab274843fb0265bb347a67212b54cd325a06577738823d8c7d62df04d849a8","first_seen":"2025-12-01T05:59:00.38951Z","last_seen":"2026-08-14T00:36:47.642882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/b2.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.118Z","timestamp":1786667769118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/b2.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 03:41:14 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QT9abPNM97%2FckK5JgKORIVRUakhAJXoYTrnduOP8HDYyVT363uZ97fZlcU83li4gVGKfskez6LAwwMnQQRbL3dm%2BvIT8EsZP85uKpftVFW1dyHEFl%2Fmn40qKdxa8nJa5r%2BOKaA%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5683\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234f891c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 458061\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458061,"size_decoded":458746,"mime_type":"image/png","magic":"PNG image data, 1000 x 450, 8-bit/color RGBA, non-interlaced","md5":"d806531187d8c46119c17eba15549a18","sha1":"b8cbe7dd31f331299324f888ccb283f6636796de","sha256":"a9ad0a589499afe36d5992ce34c0d2189aaaf7bca9336e32b898d3d52653aa2c","sha512":"a8a64b2a292461ffe1ff4eb696062566edb27d6c95ced80c5bbc5228e85a841bf73a3a061f21da86745a6f07775c54e8e70e8d1efafc5f769dcce4c690cf0a4a","ssdeep":"12288:EoES50UU1s37HstEfa0R/5VD0IUWe80VPcYV8AzAwLm:EDBUP7MtEfaojDknPckxy","tlshash":"baa42313d131c49b6ad4ec9d95551b531c78fc3fb6eb32436aa9dd2a606a20fc3e1a0c","first_seen":"2026-06-15T09:40:28.346698Z","last_seen":"2026-08-14T00:36:47.646064Z","times_seen":14,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/pay.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.124Z","timestamp":1786667769124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/pay.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 01:32:22 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVHwdut6R9vY2PwvJSKCYFHqvLhTV1Yq493c8Iyjq5ucPMXdQCk4O6g3YKEsmoe1cDQ%2Fb7tnUlcq7zhJNPTbcTTDyXsTZ7DAl%2FSiFpN3yFTJevHow%2F%2Bdd2cnKI5eV%2Fc1ltUpWA%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5682\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe2350898c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114875\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114875,"size_decoded":115562,"mime_type":"image/png","magic":"PNG image data, 387 x 387, 8-bit/color RGBA, non-interlaced","md5":"abc2836118ef2a5d9b19232b3872eca1","sha1":"a62557390145bf5226fb0f434168de63b8600833","sha256":"e5e6f8b0953ba3fe6a5215e6bab29369012afac341780ee17f4d661a9e123c97","sha512":"26f5ed68d49b1c747e178b73d56fff3bf9bcce12005264580d5a690f5c596ae3efa2003d1383b1a9ee97ed905f828db6f5de8be5aabc8911657c2f059c0d9c56","ssdeep":"3072:cQvM6mWBhr+CIPSnkjiJuCckPlzbibesHh:NvM6vBhr+VxyuCjPWJh","tlshash":"37b31236ff4b2428f47c027154765661e935781a7892cbd0a798adc0270f26ebcc37ea","first_seen":"2026-06-15T09:40:28.35188Z","last_seen":"2026-08-14T00:36:47.647249Z","times_seen":14,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana14/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:24.610Z","timestamp":1786667784610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana14/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 00:36:24 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/2/64/64.jpg?hmac=76NcNXD8s1NJgkMvOWlxDHX3MAi9RFaqeN8PpI9XLRk\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2Fq2zp18C9FNgxMC%2FVKy7CjDwdSZA8%2FfWokb2uDQ9Sqq7DBN0%2B18Elgq2qYDONtvex5HA2vfUezQgkZ9%2BLD%2BKnE%2Bx%2BEP0OAy5zFDyn0NJH98A3EEPZ4Bq062QMSduAQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a2abe295da22dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T10:52:00.014682Z","times_seen":17885186,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/951/64/64.jpg?hmac=TOlJppEOIFOKD984nhdLvfZSXsYCjJY7FtV3nRSO7UQ","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:42.642Z","timestamp":1786667802642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/951/64/64.jpg?hmac=TOlJppEOIFOKD984nhdLvfZSXsYCjJY7FtV3nRSO7UQ HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"951-64x64.jpg\"\r\npicsum-id: 951\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 277784\r\ndate: Fri, 14 Aug 2026 00:36:42 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786667803.644188,VS0,VE1\r\nvary: Origin\r\ncontent-length: 1905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1905,"size_decoded":2410,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"500aa0caf926e8f68edd5ef1d998321c","sha1":"34f078855cc27a82435e6b59ca1c06ee636c548c","sha256":"275e94993ceb58f5eaa5f4576e5b448083028b773f980b80245545e1705c6739","sha512":"8089e7dbbe8745887e35d61f0ed6cf7d2f43d0e989fca6e6630459de77eec97c0acf5c1b30d0103a6f94333e2fc86e587246e9cebf2ed75ad00dd64a21e2b585","ssdeep":"","tlshash":"9341c640a7408d12eb0312bf24aa57506352ce96b9d9793f66811f0c6c7bcb4cdefa9c","first_seen":"2026-08-14T00:36:47.649569Z","last_seen":"2026-08-14T00:36:47.649569Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"menu-aktivasipayc.paylater.buzz/cdn-cgi/rum?","fqdn":"menu-aktivasipayc.paylater.buzz","domain":"paylater.buzz","tld":"buzz"},"ip":{"addr":"172.67.202.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.371Z","timestamp":1786667769371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paylater.buzz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:02:23 GMT","end":"Sun, 25 Oct 2026 13:02:22 GMT"},"fingerprint":{"sha1":"82:C3:FB:9C:04:F5:89:83:E8:A4:E5:82:06:F2:8A:EE:86:C1:72:7C","sha256":"97:7F:40:55:64:3B:08:15:34:DD:43:59:07:D5:29:EC:D9:0B:3A:13:BD:5C:3C:5F:29:E4:85:B8:D6:73:BA:3F"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: menu-aktivasipayc.paylater.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nContent-Length: 652\r\nOrigin: https://menu-aktivasipayc.paylater.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":652,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":774,\"startTime\":1786667768298,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.6.0\",\"timings\":2},\"pageloadId\":\"d431801f-dce5-45a8-940d-3392befd8a71\",\"location\":\"https://menu-aktivasipayc.paylater.buzz/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h3\",\"domainLookupStart\":29,\"domainLookupEnd\":34,\"connectStart\":35,\"connectEnd\":53,\"requestStart\":54,\"responseStart\":394,\"responseEnd\":499,\"domInteractive\":753,\"domComplete\":930,\"loadEventStart\":930,\"loadEventEnd\":930,\"transferSize\":7382,\"decodedBodySize\":22300},\"siteToken\":\"0f22ca2f69704679be97235461956330\",\"st\":2}"}},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CA2f%2FT6tqUTyij4%2FS%2FeVrgzab8wmxcnkUyi8Q%2Bv7PtkQmpC4UOi7Zj72dUKfUlASORGrBewyipCCouy%2BcbUbgjOSsp7Yml8P807KLDI1lMVNfTkgE0kWYWZkDoVsv6Dy8QidkAdMLbRr0BoSP6kkBKkT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2abe2368e7b0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":891,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-08-14T00:36:47.651888Z","times_seen":19420,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-14","alert":"Phishing Block","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/537/64/64.jpg?hmac=IoIKMIh_DrEY7Hwgmd59z8owhdEmJR3LyHO5d2lON7g","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:11.123Z","timestamp":1786667771123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/537/64/64.jpg?hmac=IoIKMIh_DrEY7Hwgmd59z8owhdEmJR3LyHO5d2lON7g HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"537-64x64.jpg\"\r\npicsum-id: 537\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 287858\r\ndate: Fri, 14 Aug 2026 00:36:11 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786667771.155213,VS0,VE1\r\nvary: Origin\r\ncontent-length: 1398\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1398,"size_decoded":1903,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"abe075899c07dafa6b0f13332e742f4c","sha1":"a83bfbe96192f29d6b6400f7aa1ff70f80cca617","sha256":"6c009488da91cf86ac37feee03a3f71499a7e00665fb65227a5e2d7b9ed60b27","sha512":"b382ec9f5064c64199097e1babe975d97b18c583d76b77beaa6bc955af71ce1050950f8268eb1975a84a5058b3b05c13b7f0c329b6d1b0478150f9a2d59217a6","ssdeep":"","tlshash":"fb216f123fa24a00ef22a57d54650f176702ad11a491fbbb31402c4ccc6acf44de46a6","first_seen":"2026-08-02T00:19:49.807507Z","last_seen":"2026-08-14T00:36:47.652824Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":3,"connect":9,"send":0,"wait":10,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/live1.js","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:08.890Z","timestamp":1786667768890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/live1.js HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:08 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 24 May 2026 08:28:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLWpTeA%2B1%2FwydlDfZvCXTl7ikBVC9jzaDJJrm%2F1XxBT2oC4wyDOsf2bypjPysDpBJ68HRiKTI8R8zXyDoldgvvdNGZlXH3LrlUC9zRaz8H%2F2MnH1ItijlI54I5Y4RvIpt%2F9nsQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\nage: 974\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a2abe233a854c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11372,"size_decoded":4810,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1127)","md5":"9eac9b80d654ae34a63458afd75abf5d","sha1":"878bdbe7db7f3eb81fd5c81609b6d270da688c86","sha256":"7076cbfd0f8d1277ddf91ad31f92bbc4a7d90d197b7f1e34c0529fbec28d8aee","sha512":"c751234d70e32afc02f597f0c966af426be5d76be830c9e73943a8a9bcd15ff1a78bce608c0d5e9a247127db4c2cb6f23d3d3760c05c8168d9920d7048412bd4","ssdeep":"192:6dD0WIMMP9komQSNWOa6p20kYTd9XrWyu2jGZaoi:2oWIMMVXmQWlp20VaQf","tlshash":"2e3287adade320755d6287f58abf622835e9d91384cdc019b92ce3600f88d49f259dfc","first_seen":"2026-08-14T00:28:11.164965Z","last_seen":"2026-08-14T00:36:47.653742Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/logo1.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.101Z","timestamp":1786667769101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/logo1.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 03:00:36 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHrooexVOwYY8LdLhW34GT4qeF03r2RsvVl9eJceHgAkX8DfZLMNvt6DHLvg79OMM76uCO2h30r3h2Z8G7viP3Eqg%2FShik9o1gkMe77ty6eb3tBUDrsSj%2BBwPvHykY9pL14fnA%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234d884c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1240\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1240,"size_decoded":1919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"52413b81c98ffd7edea500c4151d33da","sha1":"104c8baf88cd410c415fe5e73a451cac7cea377d","sha256":"a7f7d20fd5ac38f559317e0672bc1a5e071c7e18d504ce0834592c6d6e3d8399","sha512":"7139e11e5f16288c880e876129cde263139cc25f7ef62dc29efb540e499d62d205afd0d4d245c90232c75add160f954d81c9b4ab933cc243acb335176c9fc364","ssdeep":"","tlshash":"fa21b4614430b102e38e698ed1f95a36b0e82420b6c2f2030f01ad6eea67e81a133402","first_seen":"2025-06-11T19:32:57.524982Z","last_seen":"2026-08-14T00:36:47.655519Z","times_seen":26,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/promo.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.112Z","timestamp":1786667769112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/promo.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 23:07:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=958sH4OPzKJqFBsUeOKNblz1nxW0TI3HIhVgsCuP9A4m4yQRX7hnfTsFBQ9ivix5t3vK7k5OTVKtxkQxxgugzf6o5xIPVjGAtVSOoJBMX5t8Vq40zZRh0ljfU3ZppQ2Y8OIFyw%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234e889c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":3455,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7076931408bd8213139bdd2b07184596","sha1":"444fbfeacbad9104d8a89bded2f16a964018f681","sha256":"de65dc623ea9951a93d14db0b773596a7da1c33ae4189e5141b80c45a3d37fba","sha512":"2dc7b852933df00ef4490abb253d5c1cf987d7c5bf6ae9c932f96243220dc150c5424516d348861343ca3deb5875970a0a03de41342f14c8ee8da31151b187a8","ssdeep":"","tlshash":"9f511854cf980074a1fab5652888b9e78948f08f0669c56d13b1aeab48162de4e3237a","first_seen":"2026-06-15T09:40:28.327934Z","last_seen":"2026-08-14T00:36:47.656452Z","times_seen":14,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/hapus1.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.114Z","timestamp":1786667769114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/hapus1.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 22:36:24 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Y6%2FUUfIOwb86d2VVQZh%2Fl3nzkt53aRoPpxX8byucik765AeirIQVyliYPzzHi1Bsyewsp773XvBoMOL7PuJw%2FeV%2FZLEC4L44qgkG%2FkUqf8LInt8dafYZdx3v9GvNkGKOtXKAQ%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234f88bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21072\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21072,"size_decoded":21758,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"62cfb8bd87a428d83220555bbbad9ea3","sha1":"8192e82dad2da638e136211d376ed6863714961e","sha256":"8d6f802a605bd919bca9665a9c414ef99e6628e41767f4e2514fcf286cbeacd9","sha512":"9133be9bed72706c4d041e107665b0ca7a6391b76a7dcde3fffabedca455345b7673799f88787c1e6ecc82fe1cfe8e121e39e40d55babedb62990be3587252ed","ssdeep":"384:FvLTvxXjQtpnOYnQ0myZOuZ649w6S1/wX2FuiQoKQc3/05FBFrmyp:FhuOYAQJZ64K8mFxxKQe/05Fr6yp","tlshash":"5092d0249e4fe0df5f9b01f9b9506cbba764621b7c6a128153e36141db1d33f161ce05","first_seen":"2026-08-01T18:07:23.074476Z","last_seen":"2026-08-14T00:36:47.657321Z","times_seen":10,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/refund1.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.116Z","timestamp":1786667769116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/refund1.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 07:47:16 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MAyc1ZWOWFqLAoqPNGgA6pFt2UFA%2Fu0Bf8M8%2FwLNQS1vMKUgEjpm%2BAEUvDqZIpxksxXxcAwwCyaqyKfVFGxQLdZcrUDrVdZQfLvB%2BkrkjermjrCxxKxe75sr7X972nGW92wVqg%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234f88ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6494\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6494,"size_decoded":7177,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aedff0bc1101bb0bbc5411d1e657ca19","sha1":"1a7c10b419d33227f10f3b8c4bee48f3f670c9c3","sha256":"895196e6d98d05f173deb066dad65f5ffa2a4beed791e69e80ee58a0a211c03f","sha512":"f266e05a413065d93e97332dcbaaf64b90672668d1437af489322a415c3e5a881e2c11f9760e72d4be095bbacd4b2b12d319104e3bc914999195147424bd6253","ssdeep":"192:GQUWa2vt2Fu3z5mzb4820H9dQsL7s4XoXb:pUWvzsz7VddQBgUb","tlshash":"58d18d6e9e4c1f70a5057d1185982f245a3bc204cd34e2a8f64191c296cab18b6b3fa7","first_seen":"2026-06-15T09:40:28.321232Z","last_seen":"2026-08-14T00:36:47.658305Z","times_seen":14,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/saya.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.126Z","timestamp":1786667769126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/saya.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 01:37:22 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhDJtJnQgxuWIzHDfxrufEx9QhEy6deQwraGF3jERGyBTRxoDP0SA73XVlPBzWtkp7PK06T%2BTavs4ZjpnJW8UUbpJHkKUrim1LbxM0CGVUoHk42GF5iuugcLvf%2BKLTSX1vIyuQ%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5682\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe235289dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13520\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13520,"size_decoded":14200,"mime_type":"image/png","magic":"PNG image data, 113 x 113, 8-bit/color RGBA, non-interlaced","md5":"4cd5ae08cf3cc70b89cb5b2156ff7fa7","sha1":"bc179146ee6fe4f67831cb66675995ac30439ce1","sha256":"98e7950f714c91231f14868c131da1f49f3129ec947bc37b74c67c17bb524d6e","sha512":"421e168b082b9a8c0660ce8caf5ab1efc476106e1c2c5391ed161c6e132348773c81f2d316e1d7d7ab0ccc84d042fd17dad9452e6cb1cc70b33070874c43a6d1","ssdeep":"384:vJ5DaJlBXWnmFiP65bXhgtFnPZdD3+mlk4eb+IzYF:PIllWmkP6pWFnPZdDblRe5I","tlshash":"6552d05d8110a933cfc440b9be58837b56def948089e0d2d2430d2927435cd3b7fa987","first_seen":"2026-06-15T09:40:28.322369Z","last_seen":"2026-08-14T00:36:47.659241Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/aa73e51d16f99d6e64587cf2314bf40a-452-73.png_400x400q80.png_.webp","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.129Z","timestamp":1786667769129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/aa73e51d16f99d6e64587cf2314bf40a-452-73.png_400x400q80.png_.webp HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 08:11:58 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XTjiCAPfTXO2HDId49lnTap%2F1Ap8FUSDQ58djLYLw5gmVoiK2okiFCNeO3lBJM1LzG5%2BMBwBgwMSa12v1yrOfhxj%2B431azU2i0A6KFeJTJgeMN%2BEgd162rYGI7epAmWW6tTDHw%3D%3D\"}]}\r\ncontent-type: image/webp\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe235289ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8602\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8602,"size_decoded":9286,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f706c7e4177d600b2db777cd5ca1d4c8","sha1":"8c25928592e50e89d8877d31270521e5f1734373","sha256":"7bdad749dfacd05d026e64bc7a565239993898a56fd2f2e72762f0a73d6c6890","sha512":"247b05525e5ee8daaa2105c3fa3a41310ac3419f56f116c5e99a7ea50e51b0bb5cb10eec19a9b832e7e28b3648055757f763cb450d98e8151ec9d272c9945d64","ssdeep":"192:d+G+v2luiCWSt9KQk73g4gIHPJRE+ZLSPQlPlAOuhnp:QGYziCNuQe/gIvfVZLqCqOKp","tlshash":"2c02a09f7697011cda37b63e9883021ddd1856c735a881d49a36e1f59418e50cfc3fe9","first_seen":"2026-08-14T00:28:11.172262Z","last_seen":"2026-08-14T00:36:47.661239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"menu-aktivasipayc.paylater.buzz/icon.png","fqdn":"menu-aktivasipayc.paylater.buzz","domain":"paylater.buzz","tld":"buzz"},"ip":{"addr":"172.67.202.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.368Z","timestamp":1786667769368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paylater.buzz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:02:23 GMT","end":"Sun, 25 Oct 2026 13:02:22 GMT"},"fingerprint":{"sha1":"82:C3:FB:9C:04:F5:89:83:E8:A4:E5:82:06:F2:8A:EE:86:C1:72:7C","sha256":"97:7F:40:55:64:3B:08:15:34:DD:43:59:07:D5:29:EC:D9:0B:3A:13:BD:5C:3C:5F:29:E4:85:B8:D6:73:BA:3F"}}},"request":{"raw":"GET /icon.png HTTP/1.1\r\nHost: menu-aktivasipayc.paylater.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B61iQXqAmskJn6OVg80Hy63KeEbCLTCPDm4mlaScuindmy7%2Bc5ALAOD2FlenjavIuwJmMSBb2WMilEQCRcsH%2Fp61A5izrs08N0cb2m%2Bbslg25NgDPyaznM89jiT41JkCJuVd8BaebPm1whGmdIGHwSss\"}]}\r\ncontent-type: text/html; charset=iso-8859-1\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\ncf-ray: a2abe2368e790b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":914,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-08-14T09:57:08.762001Z","times_seen":57601,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-14","alert":"Phishing Block","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"menu-aktivasipayc.paylater.buzz/","fqdn":"menu-aktivasipayc.paylater.buzz","domain":"paylater.buzz","tld":"buzz"},"ip":{"addr":"172.67.202.187","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-14T00:36:08.324Z","timestamp":1786667768324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"paylater.buzz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 13:02:23 GMT","end":"Sun, 25 Oct 2026 13:02:22 GMT"},"fingerprint":{"sha1":"82:C3:FB:9C:04:F5:89:83:E8:A4:E5:82:06:F2:8A:EE:86:C1:72:7C","sha256":"97:7F:40:55:64:3B:08:15:34:DD:43:59:07:D5:29:EC:D9:0B:3A:13:BD:5C:3C:5F:29:E4:85:B8:D6:73:BA:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: menu-aktivasipayc.paylater.buzz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:08 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 21 Jul 2026 15:05:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ldg7uI6Yb9a1TyV%2BoVP2dpS1DBdvSa7fZLSzgbzVVuMxEuxWBEKDUmmcjjv1RkBSt5t4UMBWYWUCOcUY2ULrggDfaRkA%2BH%2FNeP9R2PFuOS92V9Lugx6ui7pCIaVjrE%2Bj3TA2ZsG1v29e9BS1kXNu%2BnGx\"}]}\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a2abe2302e4f0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":22300,"size_decoded":7722,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1493), with CRLF line terminators","md5":"9a1bce1a3cfaae08aba1835ba40155d2","sha1":"cf6fe35a783e92395f8f3115d5cbd51a56202155","sha256":"34fe274a365ea3547a3fa0c65cc2cbd511b9ce1a6ed27400852b6d25e1a7cafd","sha512":"dc2683c6c9ba2ca42bbf036d9ddce872e77f4640750b7a18d1bbc2adbd2fe09712580aee6f66046962c7b256f4dc8464641895e1f2aa90486b8a40ef9f62c96c","ssdeep":"384:xw0XY62HoGFAOve+fzUJq8KXA5EEgXb6/6rB2vcaYneQZ:xwIGFS+fzuq8KXA5EE2i6NGQZ","tlshash":"e7a2953151c4343641b787e989a5934afda7825bcf47842436ec8be60ff2e86dc2796c","first_seen":"2026-08-14T00:28:11.173504Z","last_seen":"2026-08-14T00:36:47.663474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":341,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-14","alert":"Phishing Block","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"menu-aktivasipayc.paylater.buzz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/logout.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.115Z","timestamp":1786667769115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/logout.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 06:21:42 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MltNadGUxdnqJuMHguOlhNTjr9ATPmiT70C58NvAZAPlawAWdoVB2OGJvhCLIkLP33H38XYnhDagxnQgvy6kukrRF6nnWAQJmCYRENKLack3AuuNVzubCDGrGctr4aP7lRA%2B6A%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234f88cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26870\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26870,"size_decoded":27548,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"9e96cfa0cc78c8cc31344d4701d6e7ff","sha1":"e6aada969ae5149c90e4f32a327766cfdaf5ac50","sha256":"951a16b1eff0e68f1be016285a80b86695b996e5c51cd4c63650e7755a5db802","sha512":"badb97d449d226eafc28d4c9b9a64ea32841bd4c3b4422d6fed7545bf1fca5bc1c26de124876bc55ec7cba9f119934c456b7386ff53b5b0573434e97f520e33c","ssdeep":"768:w1U30QUThIb08IkSCh0rZPhcBZThA5HkuouZa:kU5UThIbakSk09WBNKVouZa","tlshash":"f3c2f12dd239cabcc40405bab215f17de2116a539233952c184e435aaeb72e4dfd3f9e","first_seen":"2026-06-15T09:40:28.35625Z","last_seen":"2026-08-14T00:36:47.664935Z","times_seen":14,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/b3.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.120Z","timestamp":1786667769120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/b3.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 03:41:20 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzfxi6S92cJwqEhjFrhKWCzDSzHUG4qoDN0V9FGsDK3zLLY%2FVsK34gBgbQ%2FEhQlfynGI73Dbv9GaiJhcJoy8Ky9otoGq1UKRVMBBvab8Ql1JrjZ9b9gcdD637BlgwZhkCqZDhA%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234f892c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 390438\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390438,"size_decoded":391119,"mime_type":"image/png","magic":"PNG image data, 1000 x 450, 8-bit/color RGBA, non-interlaced","md5":"c59c6f24449f651d5a334b90a40f10eb","sha1":"fa91b43c3ea4a02799978cd13595e56a1997e602","sha256":"98e107264e718eb4bf6c8b34985599e75dc2763911d395f0ef5b49b531016561","sha512":"fce693762f54e6f6e0842318cfc6aaf35df30ad3998b8ddf8eff499e9239eecc78d53cbb4f83c7edfb776f28d2177e393959c31ede088f08be0594bfdc448bb4","ssdeep":"6144:ufgY/19+mNcT6+GTixwU4yPb5tjcp5LXCKss1K2wd5LOsx288oGAYK8JuEnnceGn:ufgi19c6dRyPb5tjWLydsY2wdNL0zoGi","tlshash":"798423c3b5bfbd7ab4ac47749ac55ed64a3977389928d0100c1207e158cce9829a9f4f","first_seen":"2026-06-15T09:40:28.347866Z","last_seen":"2026-08-14T00:36:47.665668Z","times_seen":14,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/dompet.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.125Z","timestamp":1786667769125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/dompet.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 01:35:56 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lN8KWNHxCSn6rNgg7VBqPTQhaDiLVJhCPbw7KU0zSzEsMJtY9ZLYfRX7Y%2F6i01HQWy%2F7Fy67CjlggRDvA%2BSMQvHGvXgJLkUcpGyBPeuf9E7nTsYg7RL%2B3zm8zWZVwVRoIjTn1w%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5682\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe235089bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6924,"size_decoded":7607,"mime_type":"image/png","magic":"PNG image data, 104 x 104, 8-bit/color RGBA, non-interlaced","md5":"d61a65f02e7a894d2bf0b8ff162c2be9","sha1":"02788353ca850b478415e527dbdfdc0e85b72a63","sha256":"4f61915847e9016dbba4a7e0fe8ea25d25413c7b1eb34bae93688cbb6642027f","sha512":"f345be21e819fa98463a762e3088d60f1c4341f3335a44a201edfdbc574d872428ed907bd34011562c35051aa4a26365285bd9ebfa9cbe72109301b4cd601718","ssdeep":"96:HvGyVZxoxBdlK6oAnvTEbQzWio/N9bt36eTRMLq7nnx1w4qnOq/DmSsfGEfB:O2x4BO6oAnLN+h6emGTxyJOQDLgTB","tlshash":"a0e18ec412f7a4a1c130a7727cfb3be2e6b7742c6812006b524ad80ab35fe067a53785","first_seen":"2026-06-15T09:40:28.312449Z","last_seen":"2026-08-14T00:36:47.666419Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana70/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:15.607Z","timestamp":1786667775607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana70/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 00:36:15 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/1037/64/64.jpg?hmac=CElSfKFtr6fLmUxnzZJU1_sD-sxkJOUnb563Ers0wj4\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGTf6Yfr%2FEtaWbAvbD3SacL4pc9xW1ouaXmwuhiN8KPM06ifMYo%2Fbq8fHa%2F1aUjzj22P3JIaByCRuf%2Bfd5Ur9jAbYw%2BPo2xIcU8MjiuFshF49mtFpmHhBtJ6UtUUGQs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a2abe25d8dabdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T10:52:00.014682Z","times_seen":17885186,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:08.885Z","timestamp":1786667768885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/page6.css HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:08 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 24 May 2026 08:20:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wEczWtkWpwZmF3t%2FovsqiGxTmhC0DZTfAmw2TSUpqsslwZYJQ4c8IqBkPszzlO4zN%2FOelv2AMAoAO35dzbJDMLksAUAHKSoEOO0zmXnH4ib5VaOmTYY4cM4dn%2Blihiej%2Fi8ng%3D%3D\"}]}\r\ncontent-type: text/css\r\nage: 974\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a2abe233a853c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30491,"size_decoded":7854,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (393)","md5":"c132029e6bf445230716b62db4046115","sha1":"4efa8582d95a30d4b4348be4e7977a2f6a962eea","sha256":"d9c44f44c816405f4b0797e135b52214a61f0957d4b43edf89069c6321d685bb","sha512":"7414b246186d63af4287dcf7ef77a2ed9f5dac34f37c1411c4dbfe602048070bd23f2824533f6a66874b6522498dee566a46f8953484c9ac7085d90af34a77f4","ssdeep":"768:hdokDySayBWlkpOAlRWuVP9ih4VEwgZ+S:7okmSayBWlkpOmRfVVS4VEwgZ+S","tlshash":"ebd2852353052409fa57e2947ea6878e513dc503f2068ebc7aed24a9cb4d3c845fb7e9","first_seen":"2026-08-14T00:28:11.163748Z","last_seen":"2026-08-14T00:36:47.667132Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":5,"connect":14,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/later1.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.110Z","timestamp":1786667769110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/later1.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 07:47:06 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ySaRCNlKfG6W8HWMPjaxrn6oREeOUOyZeMdNaWvDvrUPqLEJlCu8gg3y%2B6AIbLAD2h7p3VWzW4DM90JSWLuclQxAFgAabcO%2FgGkyfBbc1CuItzaLn%2Bt5fhrBXYK%2BrDfPtmidZw%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234e888c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14440,"size_decoded":15124,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dcb3ec5aecfbe0dce6948107f812a6e5","sha1":"60e3c8c1b53a8836c51c5ae6a808674694eef716","sha256":"9605c587515d4a584160b05c6e5a8c9289fadbe747c23c138e16aea43aa9e4c7","sha512":"a60fa9eca3a243f40f7884f4d81ab38183b4f289d9b0e51b245521772d1a853807c90fb07801f17cc8b2440f2905b089e1d309b5d27ccd1ef125544c6bd9f33f","ssdeep":"384:c7eBNSUGn4PDoiiBpzyhbd2ET1bTqj11+Jb4AVLGALeov6LQwLm8YUr:c7eAODSmNFT811+JlLG1olSYUr","tlshash":"9552d08067d319a585514893f4fb48d1fd032654e7b67089cfc581a78170f2b3dd63b6","first_seen":"2026-06-15T09:40:28.345468Z","last_seen":"2026-08-14T00:36:47.668519Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana13/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:33.613Z","timestamp":1786667793613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana13/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 00:36:33 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/528/64/64.jpg?hmac=YXC6bXgjNwGWt1OyLmMXv6acQL03INxaTRqRdoM8ecU\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\npriority: u=5,i\r\nage: 34771\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zpWrbaoB0CMRMZ5c0KJm7Qtb61%2FHOtEDUK%2Fc0l7Ke2FFHl9IVVI4VTBnamBpgPEFvpyZjPoskdqqc9xHrh2bIII78bkeyawtOS87krYAjG6oYkyWT2PtqqP7dD4e0jw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a2abe2ce1e93dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T10:52:00.014682Z","times_seen":17885186,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/mbg_ku/images/cs.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:08.895Z","timestamp":1786667768895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/mbg_ku/images/cs.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:08 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 28 Dec 2025 01:38:38 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AvTzrHp57DXgD%2BYOjsv%2FUyFs%2Fn6XLBy23OQsLujbrevnKjhMklSyUDXlg6T5iEXT2oi%2FEayN%2BSS6ME26tkA84YtR3PsmzmKgeqzJYNiYEJPH%2BVkF3ySc7GuUBgpGB18l8bC5w%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 974\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe233a855c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 313225\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313225,"size_decoded":313913,"mime_type":"image/png","magic":"PNG image data, 630 x 630, 8-bit/color RGBA, non-interlaced","md5":"637a4fa868eb8f545195d01218cf2632","sha1":"6c154a37c5e2867f5c9f4e193f608a9f7ada76aa","sha256":"5179aa1d6c54b7f1860bd9748b494249aa08320e67263fbbedd99d3d4f565f35","sha512":"76734da1168269da19821d913e0e890332a6a0d8cc1d423ce74959b9e0f78d767811fc84a597672d83f6c3abf288cc1a094a3a79d1d6dd81c0a60d5a32f72aff","ssdeep":"6144:Lap1NpLIRqGC58ehcxq6qIrXm0rRurAIE+XfvqA1hD55OsIlGhTwPKFH:Lk1nI4GC5UOIDm0aAIE+XfJrIDMuP0","tlshash":"3964233dd2660930ae1b59a059e197ace9d304bed356c52a402eff97f7952483c333e4","first_seen":"2026-08-14T00:28:11.150437Z","last_seen":"2026-08-14T00:36:47.669293Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/cicil.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.102Z","timestamp":1786667769102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/cicil.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 06:09:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xcebr4tyA03Q80MR5An2xQVY330nAmmMWCTQFwZswQpvf1WRPQoglnpzZzSg2Op7Cb82d9E49ihEViKMFIpejtRa8PV7PRGFzmbTmZgeoEw2UeyY1umQmLwHAbxiPH7aNqIX4g%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5682\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234d885c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28600,"size_decoded":29276,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"69c4eaedc29882d64ab88400e577ad1c","sha1":"020408ebfc520ba2ff1addbbee8676fcc4725c17","sha256":"516376a17db063e35b5d26072b32aa6b0218dc7edcb0219a750f2e0ec30bd7d6","sha512":"bb3d063340b4427d044664aee04dbc3bb706f78bd491530bb39d7565b95f4a50177350b71287d9d8835dddeddfc5576f416d0e1544cb29cc515bc8c486c52aa2","ssdeep":"768:MjPppwmsX3qS6eg01aDm0pTrWDT3g0NwF5zAyxh8KG4C0MmGfkx:SBpUX3q9eg0ICyf6M0jwhk4jLx","tlshash":"87d2e1c776e68d2e9040672f73689d020dd4ba12c854c237d9bb344f6247584eeb7ace","first_seen":"2026-06-15T09:40:28.342967Z","last_seen":"2026-08-14T00:36:47.670552Z","times_seen":14,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana67/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:11.080Z","timestamp":1786667771080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana67/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 14 Aug 2026 00:36:11 GMT\r\ncontent-length: 0\r\nlocation: https://fastly.picsum.photos/id/537/64/64.jpg?hmac=IoIKMIh_DrEY7Hwgmd59z8owhdEmJR3LyHO5d2lON7g\r\nserver: cloudflare\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsKg0maVgUC5XtKhoWezbAdMC3zMJegqKmbPPQvRIUov82wfI%2BAE3Dx0vr%2F4mVhfCzp5iQR6Kl3mg6VLgLlKM57lKRKUblKdzR0bmZp4YKjAb1vb%2FwET8%2BbAJGH88P8%3D\"}]}\r\ncf-ray: a2abe24159ef56a9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T10:52:00.014682Z","times_seen":17885186,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":19,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:08.892Z","timestamp":1786667768892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 23:19:16 GMT","end":"Mon, 14 Sep 2026 00:18:56 GMT"},"fingerprint":{"sha1":"01:A5:80:28:0F:5E:84:B1:08:EE:54:C9:F4:F3:C3:FC:06:95:D6:7D","sha256":"B7:24:7C:2C:71:F2:97:D3:B5:09:E3:56:33:A5:80:EA:81:4F:CC:0E:B9:1C:F3:13:E6:99:51:6A:04:9D:58:65"}}},"request":{"raw":"GET /beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://menu-aktivasipayc.paylater.buzz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 14 Aug 2026 00:36:08 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.6.0\"\r\nlast-modified: Thu, 18 Jun 2026 14:05:09 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2abe233ac861a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31612,"size_decoded":11735,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (31612), with no line terminators","md5":"1de0a6b10518fdda25d674e0044c9a1a","sha1":"d3a523004a99e2bb3b7a6d18163c8eac64cc3ee9","sha256":"e1ac4849b9d4a498b68f8aca01e6ed99a11d94b35a2cec533b3916b8fb722fd6","sha512":"644f6965a517343ebabf7f34414b5c87fe6c13db4f161db3838e694763c1d025640ad39112fd8024a91289d2125a4cac12e434107f1f69453976eefc6f1f3b51","ssdeep":"768:zFRvEuZijhc23t3cE0jvwzDIbb5sl2PUd1frhu/oXDh+bHooo7s43VaSqAlzM3mo:bEiBdbwXk5cFRW","tlshash":"44e218b6a455b13203fb41d750736217f33461223086c4e8e62ede4768639eba1e7f6e","first_seen":"2026-06-18T22:06:16.492131Z","last_seen":"2026-08-14T10:54:14.131148Z","times_seen":3729,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":11,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/beranda.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.121Z","timestamp":1786667769121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/beranda.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 01:31:54 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iJhLBowtCOfNGT%2FbglAiLesPeNC88b1C1zQfhy27TqxU%2Ft%2FOk3gpas6pU6BhF0l2hwSUncqKOeKu0FvK%2FsreopbvDDJtIKFr9KVt2ZU%2BR1yxSLz2dOGLmSyHwJdwL%2FAfFsE%2BA%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234f894c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8901\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8901,"size_decoded":9590,"mime_type":"image/png","magic":"PNG image data, 110 x 110, 8-bit/color RGBA, non-interlaced","md5":"a2ca3c7cc1b595fc2ec716df756d52fd","sha1":"1c5423a17b873b52ce134874bdb61a85571463d9","sha256":"c8a0b836f726e6479c0b3a49840d8d7addbf5754b9ed2cfb538f88e2bc616bbe","sha512":"5378f8f26757edddef8f10bae9292a94c165099582b705917bfc55d375ae73250c080d806def263fb41ee5a1973276c96120e6ebe3b7cdf9ae2a3022be95a5d3","ssdeep":"192:bnjhS2rqyrPkYmoE9vMfvgg4f9nvvKTus0E+lOYvneQPMvTsUw:bjhhr3xmoEA41URTYmQPMbs/","tlshash":"2d02a0bf21afd0adf71b08f15bed3d5b8436005f55f019fa8982b82a630308139d6729","first_seen":"2026-06-15T09:40:28.348955Z","last_seen":"2026-08-14T00:36:47.672084Z","times_seen":14,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/aktivitas.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.122Z","timestamp":1786667769122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/aktivitas.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 01:33:50 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZHg0Ax9BMCuPB7EBBbhF5k7%2FxqbCGKCwaIf4HuOvbTkR%2FfmBBt0UCx7ORI8hDEuyEJbTupNWh3XVhTHiSXKYdzgz7j%2F8g6hm9byJNo3LGqbfzPMj63RHoBufBkkj7Qw0M2cFQ%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5683\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe2350896c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9061\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9061,"size_decoded":9742,"mime_type":"image/png","magic":"PNG image data, 112 x 112, 8-bit/color RGBA, non-interlaced","md5":"239704ee96f99a157c73152a0d2874e8","sha1":"e126e34de7c1a4074452781ec31faf859a9d4f7d","sha256":"35d550c96abda34af866b781ce001d58c5c05e69d4b3e1390ff4c7c5e863ee84","sha512":"b0ef60fe5201546c0c783bec1f06369f7c021352896746c535a0cc31b7faa6cb821351c92b993f69f012ab78f37e48d50effd4b1b3a28aa70b6ef6104be14d51","ssdeep":"192:OqSAkdClWGlD8OJJCgNRrOH6Z5l1P9LP+VxfNh7AcqF+h/:VkggGltJJXNRryO539CV57At6","tlshash":"a112bf1ce3585fb6d78e827018fcd35dfe3c859896841ba6fe900df4198ba0a1297742","first_seen":"2026-06-15T09:40:28.310698Z","last_seen":"2026-08-14T00:36:47.67274Z","times_seen":14,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/popuplogin.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.127Z","timestamp":1786667769127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/popuplogin.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Apr 2026 11:25:52 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSKiM3sZ70mwUCwYtM6qrqrLwSuMtiIby9ecxScJvTU7h1k3M33vRl1Btp98m1gU8mptPnhQ9CqkaHYDrP%2B8tT1GfVXK7BtVjteYp30VEt13xzBdHs3o0e6o08J46St3j5jhKg%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5681\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe235289fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92817\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92817,"size_decoded":93495,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 859x1280, components 3","md5":"c1de3ab87a38095c903d10250aff8ea0","sha1":"8b9244c3904cfca542d0c960fc101ac43faa9e6d","sha256":"4124fa7285bc78c8f4b46a0e5ad70690d8cdc3ead22e5b6f20e5331c1c276b86","sha512":"c6b7751602e31e206fbc8a8e5c6709765bed4ad96f5a6ca577314969068d09893f0e05ac8cda12c837eacc99d7a2a951c97869bfdd418a7fd928184d41bedc40","ssdeep":"1536:GOsRUytjYqam5xh2sjC0OsAG3dESuVq12UREs5ggKM+7gzy:GODiha8YsTBdESuVqzLKM+7gzy","tlshash":"2693ada5e4af8fb28d35ba35039396353c93f2d8da5a34cc2f221624f45dd42da64f21","first_seen":"2026-08-14T00:28:11.174898Z","last_seen":"2026-08-14T00:36:47.67345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/bg2.mp4","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.022Z","timestamp":1786667769022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/bg2.mp4 HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 22 Apr 2026 11:51:22 GMT\r\nage: 5684\r\npriority: u=4,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSYI8%2BxOFumkB6a78ELYzYTo%2Bzzzl%2F0p%2FCOp2SoKC%2FhuYL3OlmtLrzRGZXYf5IvdHFjQk%2FnO%2BFrllu9h1qSnHpYcDfW3q39IkfIiKgcG8hIHty4pH555PWzYUB7GJ6%2B1dD1Zkg%3D%3D\"}]}\r\ncontent-type: video/mp4\r\ncontent-range: bytes 0-434023/434024\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234587ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 434024\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":434024,"size_decoded":434736,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"7cdc8711e119fcda39d122756a2b4df2","sha1":"1c6d30ede0930c642efe42b23e100c4650cf1ea2","sha256":"2b9031965924d646159e9f71583f193585b1288ae003bed1f6dbc1b55698ee00","sha512":"56d608e93ed75ffd90869af56fac1ae80a8a0c6b94bb0be7d29fe1bb12724a28ab3419d84fa77ce7373022eb65dc7b7b2b0d49d6b365cb06a812c14920ba8bce","ssdeep":"12288:Z3CW2UOhIH9BDh7vzI+2AP6Cs3zpeNLT90:32Fhw9VJvU66Csj4NLTK","tlshash":"499423524bbb6885fcc0023ccd73cb863a68d79ca6c29bff56a17510fd38e50ea54994","first_seen":"2026-08-14T00:28:11.151847Z","last_seen":"2026-08-14T00:36:47.674728Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.nlhost.my.id/dana_v15a/www/nlhost/menu/populer.png","fqdn":"code.nlhost.my.id","domain":"nlhost.my.id","tld":"my.id"},"ip":{"addr":"104.21.46.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:09.109Z","timestamp":1786667769109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nlhost.my.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Jul 2026 11:53:55 GMT","end":"Thu, 01 Oct 2026 12:52:41 GMT"},"fingerprint":{"sha1":"D3:A9:79:BC:64:20:FB:78:CA:4A:06:96:32:3C:C8:D8:BB:4C:C9:A9","sha256":"B4:D1:71:0D:9E:02:8A:C0:B5:99:9F:0E:0E:F2:42:1C:11:A4:7B:C6:F4:C2:CF:D7:04:42:13:F5:FA:D2:62:29"}}},"request":{"raw":"GET /dana_v15a/www/nlhost/menu/populer.png HTTP/1.1\r\nHost: code.nlhost.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://code.nlhost.my.id/dana_v15a/www/nlhost/menu/page6.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 14 Aug 2026 00:36:09 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 15 Apr 2026 23:07:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oFxUoGWJ7HagqBYa%2BlVZen1FHP5ER%2B6rZsPT3XIeeMdacy%2FeqCq7RpBMPtQOKf6Op60rIcEjjVnHsfRwSvC7%2BsUEkdU7iy5132cl0CU6Aig1c5eAY9Jhu4x8O%2FrFeVnFV9XHlQ%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 5684\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2abe234e886c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2648,"size_decoded":3333,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cf9d6a1a2b204f30b6d85304d302789","sha1":"d12ff55c46f4fde2c83642b8dc577ee428aa2df6","sha256":"9a68e7f383ccb428b6d7c02dff84117685f2eb22b9117da12e7df993aaecb6e6","sha512":"5c1be68e4527835571822a44880c43a2ddc660c3d9c72ef5fbcfa3d69bb87e97b82cf639f16e82be49a6f73405323cad245ac57eca110c6c8f622d4b9883c2ca","ssdeep":"","tlshash":"bc514c46226eb9c692994cf1d303ed1420c1846a742d29ac2e7647e2461f7f9bd9c37e","first_seen":"2026-06-15T09:40:28.306895Z","last_seen":"2026-08-14T00:36:47.675938Z","times_seen":14,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fastly.picsum.photos/id/528/64/64.jpg?hmac=YXC6bXgjNwGWt1OyLmMXv6acQL03INxaTRqRdoM8ecU","fqdn":"fastly.picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"151.101.65.91","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:33.629Z","timestamp":1786667793629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fastly.picsum.photos","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 08 Jul 2026 04:52:56 GMT","end":"Tue, 06 Oct 2026 04:52:55 GMT"},"fingerprint":{"sha1":"34:C2:4E:31:C5:7F:26:A9:73:2F:90:FE:E4:65:19:0A:A7:50:57:A3","sha256":"C2:42:9E:2D:E4:42:B6:DA:5A:29:78:1A:29:CF:ED:A3:3B:D7:6E:BC:E0:15:71:09:0D:21:19:5E:0C:5C:78:8B"}}},"request":{"raw":"GET /id/528/64/64.jpg?hmac=YXC6bXgjNwGWt1OyLmMXv6acQL03INxaTRqRdoM8ecU HTTP/1.1\r\nHost: fastly.picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncache-control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable\r\ncontent-disposition: inline; filename=\"528-64x64.jpg\"\r\npicsum-id: 528\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 281913\r\ndate: Fri, 14 Aug 2026 00:36:33 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1786667794.630719,VS0,VE1\r\nvary: Origin\r\ncontent-length: 2143\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2143,"size_decoded":2648,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 64x64, components 3","md5":"04c75b0a63583916ee339839cd7befbd","sha1":"53e7175617e01d1c1940ddce61860edc92a27049","sha256":"504019a10a3d5cd85eb05630b5e9b2c68af854b3eb79d154f109e5b93e7f94d1","sha512":"67efd3d63470551f1b10917ba0b91c8712acf53f9a789ed505d1e5f58b9d01af8a714c2d617a7d323a612b28f4234a32add32e36daea94efe067c790c948b778","ssdeep":"","tlshash":"7541e4878b91ae46eb02153401ae1322e534cda3b90863777499083c9d66cbacca46aa","first_seen":"2026-08-01T18:08:18.714056Z","last_seen":"2026-08-14T00:36:47.676827Z","times_seen":3,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"picsum.photos/seed/dana80/64/64.jpg","fqdn":"picsum.photos","domain":"picsum.photos","tld":"photos"},"ip":{"addr":"104.26.5.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://menu-aktivasipayc.paylater.buzz/","date":"2026-08-14T00:36:42.612Z","timestamp":1786667802612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"picsum.photos","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Jun 2026 08:37:55 GMT","end":"Fri, 25 Sep 2026 09:37:52 GMT"},"fingerprint":{"sha1":"B0:65:66:A5:82:E1:01:D8:EF:1E:61:81:28:52:7F:50:51:4E:E5:18","sha256":"44:22:5D:F9:7A:48:85:3C:6B:16:59:2F:CA:13:A1:D4:93:2D:4B:6D:CD:C4:A0:89:6C:41:6F:E4:F2:74:75:DF"}}},"request":{"raw":"GET /seed/dana80/64/64.jpg HTTP/1.1\r\nHost: picsum.photos\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://menu-aktivasipayc.paylater.buzz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Fri, 14 Aug 2026 00:36:42 GMT\r\nserver-timing: cfExtPri\r\nlocation: https://fastly.picsum.photos/id/951/64/64.jpg?hmac=TOlJppEOIFOKD984nhdLvfZSXsYCjJY7FtV3nRSO7UQ\r\ncache-control: public, max-age=86400, stale-while-revalidate=60, stale-if-error=43200\r\nvary: Origin\r\npriority: u=5,i\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rtkizNwUYcr3hAGpY1W9LXLvQF1Wviin8C4I8Ln9bsf0qRqYjraKReN3hMFIdtPzhXwWy5HYumk6Tbw2o%2Fd6fFRERvN3fTjJQOG9UH14UadaAhUzk6MlkeCf3F0HSs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\ncf-ray: a2abe3065b2fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T10:52:00.014682Z","times_seen":17885186,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}