{"report_id":"893037d4-70a5-4c3f-b51b-b638072d5f76","version":6,"status":"done","tags":[],"date":"2025-10-13T06:53:05Z","url":{"schema":"http","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"title":"LANGIT666BOS = Arena Taruhan Online Paling Seru Dengan Jackpot Fantastis"},"submit":{"url":{"schema":"http","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-17T06:53:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T06:52:43Z","timestamp":1760338363,"ip_dst":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.6","port":55276,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T06:52:43.810232+0000\",\"flow_id\":86894196769439,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":55276,\"dest_ip\":\"172.66.145.80\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":909,\"bytes_toclient\":5351,\"start\":\"2025-10-13T06:52:43.803487+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.k24klik.com","ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-04","domain_rank":117944,"first_seen":"2017-02-02T18:09:00Z","last_seen":"2025-10-07T03:19:17.03004Z","alert_count":0,"request_count":18,"received_data":228606,"sent_data":8085,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"langit666bos.online","ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"domain_registered":"2025-10-11","domain_rank":0,"first_seen":"2025-10-13T06:53:05.93205Z","last_seen":"2025-10-13T06:53:05.932051Z","alert_count":8,"request_count":8,"received_data":1131436,"sent_data":3672,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":1809,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":1,"received_data":8718,"sent_data":539,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cutt.ly","ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-13","domain_rank":3479,"first_seen":"2018-01-23T23:29:00Z","last_seen":"2025-10-07T18:05:27.942867Z","alert_count":0,"request_count":1,"received_data":652,"sent_data":573,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ajax.cloudflare.com","ip":{"addr":"104.17.72.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":17894,"first_seen":"2012-05-23T12:49:48Z","last_seen":"2025-10-07T03:19:17.169148Z","alert_count":0,"request_count":1,"received_data":39344,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-12T22:13:55.789176Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lh3.googleusercontent.com","ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":303,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2025-10-12T22:44:24.522339Z","alert_count":0,"request_count":1,"received_data":47403,"sent_data":474,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-13T06:52:43Z","timestamp":1760338363,"ip_dst":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.6","port":55276,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2025-10-13T06:52:43.810232+0000\",\"flow_id\":86894196769439,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.6\",\"src_port\":55276,\"dest_ip\":\"172.66.145.80\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":909,\"bytes_toclient\":5351,\"start\":\"2025-10-13T06:52:43.803487+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9ab5d895da44d5aed421bb2be883aed","sha1":"903a9e2130576ed8426fcd6e5a9d26ddfa2f3cba","sha256":"900801361b81508291409c87391dd92aae1041470909fb17f4b04f7a58940b85","sha512":"7dbecdace90d9e015a52d0a1ce0d96ad59fea8228bbc3770a00eafbfa94a1b304b12659738c4a0d910e78bd727d481004f50e3820d030d31f9af337fa0f2d489","ssdeep":"","tlshash":"3ee0d8dd76a39bc0c4307176bb9646f20a3354bcd22331b55a5d688a2375c240859a1b","size":357,"data":"","first_seen":"2025-07-23T14:25:30.589657Z","last_seen":"2026-03-30T21:50:02.920027Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"74424312f6d9df8e0e37646434c0267e","sha1":"300faeb546fa77e567ac207f766a71274bbb383a","sha256":"8123c19c4e083a18387b841d0baabe981778c99964950102d174a0ab1611855a","sha512":"e1d2727ae9df41c0095ed205302b1bbfe405dac7b706709f2fa472a89c64f5ce9d0d93809e08f7d9dbeb65fa466acb335462835e2d47c10da4572a710c407a0e","ssdeep":"","tlshash":"d5c08c08219b640466beb606f8ba432dfb1fd4ca126910deb94c09882d408790359e32","size":169,"data":"","first_seen":"2025-07-23T14:25:30.592451Z","last_seen":"2026-03-30T21:50:02.920584Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"65ace5fcaa520fa0ffc17466acca3208","sha1":"b7fd84f281d65922e3617516163642d03a9401a8","sha256":"95b99b2677c8b9663de881c61d27f7e4d363aec9ccdc32cf4ddd264a568b1b6c","sha512":"0e5701ac008337551286385ae24f18708a8a149d6b8e79382247f86a800dbeb4a71adef91d9f176c54729dc0d75a53795ad06c28448737632f047f6067dd8d42","ssdeep":"","tlshash":"11b01250465c49a5c9e211f152b8e9527a3290e4502d507d45f26a1e793205ef4f78bc","size":112,"data":"","first_seen":"2025-05-23T04:46:12.635885Z","last_seen":"2026-03-30T21:50:02.921506Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3b587f4820c4520be2a77c57cc9c613","sha1":"3d0e16cdc2b9c4357f8b77350509dde303eb0106","sha256":"39faef293964a9f937cddf2c6c0e02237dbdebc6d0de997a4655f38d50330586","sha512":"a4058732017fb3b7f9fd19a954b569116d3ac5ff45ebc74f8a2e3e00d56f2f653842867e639847b091f27564ec27d75cf3261db4a60c666c71188189a5fa3b1e","ssdeep":"","tlshash":"54514fdab6b66e5f513a7070f457a87eebc9a50fc70049b6c41e1080d3898a6e37385a","size":2708,"data":"","first_seen":"2025-05-23T04:46:12.636695Z","last_seen":"2026-03-30T21:50:02.923888Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"73269120540ebcd6856412b8c4ad4d06","sha1":"5ebfaf572fef13b294d27159ec3e3aed2d14cf80","sha256":"abaef3e7e2e7350b6a361d5e212bff6ed02b93f7f6681c0203c787452d7b61aa","sha512":"f5c0cf809aabe1148359b78dbc3f59b28e8cc728cd9d00cab8bfb078b961016f278d3f632db7975815c4659a8bc6892fbc72686694f90f7dda7b3bec6de81e23","ssdeep":"96:QidJ49sX0PjAwDZYqP4tXR1SMn8Lw0DqOTTrsvrrqP4ZpBOG5R2cZV:zJ46X0bBdYLFaM8LwKTTPqrrL8K","tlshash":"f09198d9b8e90c1196bc34b45c2f5a0d3fbd36255380e459e30cc8609b55dbab942d7f","size":4223,"data":"","first_seen":"2025-10-13T06:53:09.580197Z","last_seen":"2025-10-13T06:53:09.580197Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"62d228820be6da7b9e7de81f89ec6d24","sha1":"cfd37d0e6b2b178cf52f98ced0102cd1de21d907","sha256":"06d7be5357e652f1422151fb46081460b55c18bea1313c0ba61162a48e8e46c2","sha512":"ba3544c096e300fcc6318461f35187d2a00c8cadb9385b59bf2a985916ec6269eb82663a0a9241a6a9fae75c5ce2266051a6f363d4af4878db5a109c07701ba8","ssdeep":"","tlshash":"77d0974d39852e6423eb2533003b82c806b92790c20c8010482f584a1eb08eb311371e","size":251,"data":"","first_seen":"2025-07-23T14:25:30.605278Z","last_seen":"2026-03-30T21:50:02.927608Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"871fc75d83d3dcaee931cfb18a68cd08","sha1":"0998b44e1ecd0fd8c7fee9ada41de4aef9b8b76b","sha256":"5310543ddf67cd858fead8f16e4acccd8cdd6f7dd99a9e0caf97ef2b7db90ad5","sha512":"9ed8bc8de2ae2682c43c4883a108f32c5b4eae274a422f5d80d52c5b0d4da8a2f9538cf7941e0556610c239ad6fd7f74dde8693be9cec83ad8729df4369b34cd","ssdeep":"","tlshash":"3d7152eafd611cab46757073749b764c7faa6c0b8b818cb0d04c9094ff44529b3a2a5f","size":3631,"data":"","first_seen":"2025-10-13T06:53:09.582182Z","last_seen":"2025-10-13T06:53:09.582182Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbb330cbef85488fc128f528a24dc86e","sha1":"270678c29363e952b511e4935c0a7576585e9c15","sha256":"ae8bb3bd9189529cd0f3f7ec5c90a9d7d943f5d568c0b0c7dbea7d0eb383f638","sha512":"d5502eef127ca9c9c37a76e28dbcd5f6bca01fb078598940306a73ef1c24cef973656f2cdfe42bf669fa945349bc2b12f3f858677b248015be459caa82804815","ssdeep":"","tlshash":"5ad0a7ab1cb98d306799054b61f7e3ad27a12aa07b11950482c9cc1b6b61fd304a1968","size":236,"data":"","first_seen":"2025-05-23T04:46:12.622958Z","last_seen":"2026-03-30T21:50:02.942438Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-08T08:32:18.517285Z","times_seen":330960,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/sandbox%20eval%20code","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-08T08:39:04.52269Z","times_seen":779608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"962fb42f4a08ddab01072a649b4a2488","sha1":"4076109c87b782bed036bbb230c84231d65424ef","sha256":"0323fe4bbb6ddf464d93650ac7db020ac2afb59755444d2a10907f7939bb47b1","sha512":"48eb97426c179e6e48f001f67a7f27793e0a48e8a33aa38e350cf569eadf7bba06450936aee2e286fb518fbbd332a421a75719cbe2544999e8aa240d7eb595c9","ssdeep":"","tlshash":"46e0c2953140a0aa5633ed32a3ec7360ddf10445759fd87981880c94c03013d03aea6b","size":309,"data":"","first_seen":"2025-07-23T14:25:30.608948Z","last_seen":"2026-03-30T21:50:02.935902Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/jquery.raty.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86a847667db14615f2250f7e514c8c66","sha1":"7b308dedd78e158b1dc55f215909336b830c6749","sha256":"95e661e05ce7526f3a5527278e565ad71cda9dca5b80d72a0ce76bad97353a9f","sha512":"46cd8d256492da4123f776c2745cc8f4521ef4fc6c020d8b583e9052aa764c9c9fbcf75e1fdf89fc5cf7c0313fc2e9e2770d3bbc8dc84edc0633532259c0b906","ssdeep":"192:vdlRLpMwO35XNARENbYnPP3wGCGGtQ//iuX8:vdlXMt3HgENM3w7Q//iuX8","tlshash":"c1021fc8b38571069de33370249e674ee333ed8b9642402d783dc6d5ef6988995b2e78","size":8273,"data":"","first_seen":"2023-03-07T12:03:44Z","last_seen":"2026-04-07T12:08:00.002777Z","times_seen":340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfe195cd8bf666e980ae4cafd59e64fd","sha1":"d13e9f39d6b084f2a62b3b6cee6cddd9bfe167d6","sha256":"500650544ffe94bd60b6e36f5678e08d782507c3fe5ab88bdcec860a87d0f51c","sha512":"2b9d06826429c91fe845b335d2cb87ec73dd5e822007c2e9fa28424d29155f986dac94a5ff43bed6874b026336a0b95888c2be3762d76798605bf9187215c991","ssdeep":"","tlshash":"d6319434357c1f3acab79da2304b8198bd7a8087f206d8c4884d6e8417c2cb5796f8c5","size":1754,"data":"","first_seen":"2025-10-13T06:53:09.584985Z","last_seen":"2025-10-13T06:53:09.584985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"03041d8f329d29bc0772711df15bea3d","sha1":"91dff411830407d708036218580955fffb9890e0","sha256":"ddc7ef2ce41e8ae3e71735b965530836117ed5b4b39c9a8d20b4945dedcb63e9","sha512":"58ba028f269ffde4133d4c921f09216c3aa7a5960057bfcd5aa80f29b7b289b1505711e8a3073121f0e41a114ce609aa9e3f13f7df929c69eb9fdfa389783edd","ssdeep":"","tlshash":"2fd0125df594275da17a31f420379ee422590d0553d19701447f074d01a149f3c668ef","size":283,"data":"","first_seen":"2025-07-23T14:25:30.611862Z","last_seen":"2026-03-30T21:50:02.950328Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d24355c65ad1e2d6277cf03646b93b4","sha1":"60dafa561aeba7581fdb84b0a25822e5160e3b49","sha256":"c8ab15904ff618beaab82ac077ddb747d6d2faecc864fab4bac288de6f157e3f","sha512":"b118294b9cdabd2df518414a85df0efe3cd0c6cb043a38f4f9e30ec3d6e5112c4c2a19f9b0225edad7ce03f92bdcc05a8d09b3b46b3dde0821bacd8f7ed2f27e","ssdeep":"","tlshash":"e3f0c07e7098723d5473f2e5533bd81caeb62725b19168b3806d47681b4056901895ce","size":532,"data":"","first_seen":"2025-07-23T14:25:30.613468Z","last_seen":"2026-03-30T21:50:02.951682Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-08T08:39:04.471713Z","times_seen":778051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/7301462e/jquery.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8d64d0bc142b3f670cc0611b0aebcae","sha1":"abcd2ba13348f178b17141b445bc99f1917d47af","sha256":"47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4","sha512":"a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW","tlshash":"b393e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94840,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-08T06:15:39.810904Z","times_seen":19489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b85c698227ef128edf890051b6a110d","sha1":"c4b41cc0440f11eb4a2995360d79d5e12df4720d","sha256":"3e8d775722ea779779e96283d04c6133e1f3796e0a2e48f48ed4f21539da91e9","sha512":"e8a7113370e820d590c80b3e3038851017343787a5a2ab292548ddc479e1000682673bb1cf749f6ebd173e7de013ab9bf1833d76d775486fdfde4ef3cd99a8dd","ssdeep":"","tlshash":"fec080615c94f0d71c5c7d1458d10c65da0a48c36459e034fc95410bdc0518d3d04dc6","size":163,"data":"","first_seen":"2025-07-23T14:25:30.615733Z","last_seen":"2026-03-30T21:50:02.954676Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.cloudflare.com/cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js","fqdn":"ajax.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.72.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2654742314fe002baeef8dcdfda44ef3","sha1":"831198fa96dc623365f9c2efa1d860fb04b3eb47","sha256":"6b2e044c462b8b00dfb05d77740f8b8f2a90ce00e2e5ccf621eac288608c0649","sha512":"8eff30bd090b584a5b011510b8c6d0fbbc9cf8f1fd1e4534e042c942f05c15f0f00cc829b8f6f863ac69891cf4c81658f7e387bf83c09f74c25ce6143c9b0bf5","ssdeep":"768:AfBdJw5hgRwB+AGy2dNVaNRq1s54eZVx16Ehw:AfBdEBHwgd54eZVx16Ehw","tlshash":"4303ba8ab272b43643b76475b12f110ab237646d290a417cf114e8d67c7894ea337fbe","size":38536,"data":"","first_seen":"2023-03-07T12:21:55Z","last_seen":"2026-04-01T07:51:33.198154Z","times_seen":834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/lazyload.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b113c7191eb2ab3c2768374d090ebfeb","sha1":"5f562722bc9c60ed4eb5a6d709b782e0e8e40435","sha256":"0ff9cb70f9c7f802c9965d3573acc8444099a6fcd53fb132fb08fe50a0912d50","sha512":"aa977fe95791059840c3cbc6dab65d21965e9909129de16c898372b0def0788a2a4e4f5438d77865c9497bf476655c026e692b30031aafd960340091e4cddca1","ssdeep":"96:d0Q1y+ZltH75Z58Hieuc4aQuC3K5Vi8uchE4nuO+xGmNAdaGYnNPP9H8aKNuJgFA:dtyOltHNZ5NeVCa5k8Vll+xGsAQRNP6K","tlshash":"2c9134097902b93cb0ae767fc21b130a253ac5679579ec7064344c94befca93e216dca","size":4573,"data":"","first_seen":"2025-05-23T04:46:12.586437Z","last_seen":"2026-03-30T21:50:02.916999Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/stock.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/stock.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVrfMGDpCmqLFbS4pd9%2FPVO4xoLaE37oJRD9bP4vTXQ3AEMs%2Fw2af07qOx5thWMK31f%2FgC8LaJ5hlhS59wO5UCbIOkLb5wn%2FdqGAqTeU\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-38c\"\r\ncontent-encoding: br\r\ncf-ray: 98dcea732a742efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0063636e8e811fc24829f57f272aa86f","sha1":"5367d0b3eede0ed9893425db3a0826aa36f445a4","sha256":"8ef3c1989041007cfb2a857c3b6bc5b08510081074eb47e77880b847dfa10576","sha512":"5de6a94b1cf9166e456a3f1f0b86681189c56bc165ee9898808957cb7b24b9c7fa60e7af0886cbf277c3f251b8d3f803bc218eeb0b6e0137d8e9adc9194b713f","ssdeep":"","tlshash":"7d11d0aae27995d08103876690e475ed9adf68b423505ff0d6405be7a4e45ed17c4cc0","first_seen":"2025-06-27T22:59:24.594068Z","last_seen":"2026-03-30T21:50:02.913792Z","times_seen":60,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":778,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/images/favicon.png","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:44.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"langit666bos.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 05:52:50 GMT","end":"Sat, 10 Jan 2026 05:52:49 GMT"},"fingerprint":{"sha1":"A4:15:42:CB:5F:34:93:D2:98:CB:3F:73:DE:C5:D1:72:F3:EE:CA:81","sha256":"48:FB:02:AC:19:7F:CA:60:7A:39:34:AC:A5:BE:73:F9:A3:46:0B:01:00:DC:22:5D:0F:EE:62:FF:11:AF:59:C3"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: langit666bos.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 12 Oct 2025 07:38:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6068\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 06:52:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"52daa4e7566f7624ae50f7722e1fd1c0","sha1":"78fe093e054fc68b1333b19bdba2212cb40a06ad","sha256":"daa031d29c680c31f588c99d4656ffe17d013fcf98c94c28782834a860be59b3","sha512":"f898f89f1b529aade35ddf86645eedee94cbc5506d85b4561144eb80d9194b510d85e241da6b24abbf48a62d4de60eb2109338aef64b40bdd4c3c523b1b1f83a","ssdeep":"96:5aqxrzoNWLtwwVIzSDcdvnxWRG3fthIbvmJ5Al/RQtfvPmSF7lvZs8MuTfUtoq6:hV82IWDcdvnxWGfIbYAl/RQtH7s8MugK","tlshash":"58c18e366c517583c747600958eea5ccc5335acd988050049fe7a9db7f75a826eba0c3","first_seen":"2025-10-13T06:53:09.559353Z","last_seen":"2025-10-13T06:53:09.559353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/obat_asli.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/obat_asli.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=rKDngDuWoBUSHBV.xheccZSUxIMqz10HGX9GoeJeslY-1760338363.277905-1.0.1.1-sqoLmUYsUQ5qBZHM9TDSh8t4OdZ1LeSJBzIec3e.MTWJ4tLwrKjmypCV06tl4wsj0WSofT3Fka4iPdupakJSg9zCtl9iS0.jzgIkh9YEqwUVYAiEdhkhxIePqljrfOzAS4IwQU5U3W4tVW8UifRLArx_E4_JsTq67SkXfnUvMgM\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=rKDngDuWoBUSHBV.xheccZSUxIMqz10HGX9GoeJeslY-1760338363.277905-1.0.1.1-sqoLmUYsUQ5qBZHM9TDSh8t4OdZ1LeSJBzIec3e.MTWJ4tLwrKjmypCV06tl4wsj0WSofT3Fka4iPdupakJSg9zCtl9iS0.jzgIkh9YEqwUVYAiEdhkhxIePqljrfOzAS4IwQU5U3W4tVW8UifRLArx_E4_JsTq67SkXfnUvMgM; report-to cf-csp-endpoint\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-372\"\r\ncontent-encoding: br\r\ncf-ray: 98dcea7278ee2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":882,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74a3d5474458e62fbad8fa9f253f989a","sha1":"17536d3a92161cf5d5cae4d05b180bb8fc6c0ca3","sha256":"95ad77395c0cc676ea7af0190ba2a919bb0a564f1ef61fe68ff76b777765c2b9","sha512":"89e3c602c7e2f1b0c5a7746c9527ecb39693a5463eb6e930f8423cbe4f074a91432900b48e7441750d1504a7fa99901490e00de106666001d249c4d5acc782ca","ssdeep":"","tlshash":"6a1199e3d2f121c0d3255317f0e4213d6e83ad2833218eea9020aac1e5aaa68166cd90","first_seen":"2025-06-27T22:59:24.592671Z","last_seen":"2026-03-30T21:50:02.905262Z","times_seen":61,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/langit666bos","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"172.66.145.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"POST /langit666bos HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 50\r\nOrigin: https://langit666bos.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlocation: /csrf.php\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=bvo3vftgdao76e5ab3u8uj7fni; Secure; Path=/\r\ncf-ray: 98dcea75da180883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T08:38:17.057118Z","times_seen":13496014,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":34,"dns":20,"connect":1,"send":0,"wait":128,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-13T06:52:42.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"langit666bos.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 05:52:50 GMT","end":"Sat, 10 Jan 2026 05:52:49 GMT"},"fingerprint":{"sha1":"A4:15:42:CB:5F:34:93:D2:98:CB:3F:73:DE:C5:D1:72:F3:EE:CA:81","sha256":"48:FB:02:AC:19:7F:CA:60:7A:39:34:AC:A5:BE:73:F9:A3:46:0B:01:00:DC:22:5D:0F:EE:62:FF:11:AF:59:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: langit666bos.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 12 Oct 2025 07:39:32 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 20003\r\ncontent-type: text/html\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":89883,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (885), with CRLF line terminators","md5":"17b9be2cf56320280148c3dbeec1f4c3","sha1":"e103662779d159995cb1ce2bb9e1bbddeea42fc2","sha256":"713f88c6b5639b92104d2078a879fbcffaf6e0cd0b53da83b12ee3f6e6860670","sha512":"838cb1e76134b4b7ba3d3ab857550226481556668b06c94288f1341b5192f8e1c5c1f9ede5eee9dea54ea38ac4b43a1368c40977005bf96d43ad5d7800843ad6","ssdeep":"1536:FvRcTsiggjnXmB5urBX97JM602+hVmGH/t4fSfixp94z5igE23:9RcTsigAnXEurV3Yn","tlshash":"ff931996b9111c2b4333abf1a1326b1ce7658003cf0388a4b2dd9657f7d6db8a2275cd","first_seen":"2025-10-13T06:53:09.562157Z","last_seen":"2025-10-13T06:53:09.562157Z","times_seen":1,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":137,"dns":80,"connect":24,"send":0,"wait":155,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css?family=Poppins HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Oct 2025 06:52:43 GMT\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1123,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"48ff118e891bb4948701b2d75b360339","sha1":"f5c506042ed4472896a7084751b9be33e5eb1b69","sha256":"55ad63faf3956fc9fb6210fc7037e9aec3ad54586b2ea6fe6465d9c051d340a3","sha512":"5928eefa9e37943a01ffe206c48bce3811871c96f90a0dfe15c97e96a981dbed2a2e698561387fa4dbb12c4a64a3c096b2c4bad9f2b26b211b82f9936a2b4da8","ssdeep":"","tlshash":"ef219891087ae41467831cc5238e3c37ef0e9254b440a564abfe0c98ad67c654372b2d","first_seen":"2025-09-17T15:13:56.931672Z","last_seen":"2026-04-08T07:03:47.869634Z","times_seen":2480,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":284,"dns":0,"connect":37,"send":0,"wait":46,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/product-view.min.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/product-view.min.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-6673\"\r\nexpires: Wed, 05 Nov 2025 18:29:12 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 563010\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SbVXYZX9hGiUDe3TWaE%2FP%2Bv%2FSDFHE53ag0E3VkepUBrhD8W9adXIbO70iBbtWfABESrxoJATlv6eQgyvCgH4TJ%2BK7WoE07wgEeoEg5P\"}]}\r\ncf-ray: 98dcea702b0e2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26227,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26221), with no line terminators","md5":"515b35077bf4cc8e6d0531c6b27b8449","sha1":"fb45b03801b0ced7a5ec9d31fdf9f36eb4e6ebaf","sha256":"cf0365e3166ea7b698b1e91c3af0db8c59eb0b18a460c218c283a10f08a19051","sha512":"7870037aca238113980c8826b3874e36e39ced81fbc9873b6249c2632e4fcf9af0a06daac480fdf2ee5b90a59310271c1d8945f0d2c580dcb59a25527ce3b599","ssdeep":"384:4TxHuaq1dcXGeKDv8YCSCgQLP16/HVa23hL4bbPdna91Da91dxRDSR:1d7DtPHV8bha91Da91UR","tlshash":"cbc27333a840216db027c96bb691bbdd35248503f6135bbee5a736f4cf924cb1232b59","first_seen":"2025-05-23T04:46:12.600197Z","last_seen":"2026-03-30T21:50:02.911765Z","times_seen":77,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":68,"dns":18,"connect":4,"send":0,"wait":22,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/new_face.min.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/new_face.min.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-52fd\"\r\nexpires: Wed, 05 Nov 2025 09:31:21 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 595281\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JofRe%2BdHPS3iAYLNzVGrYvCRzOR%2Bc6vnbN%2BbNc1%2BwihX5VDeEWuEoGwa5KpRDUcwBOccNhOXbGrt2xavTXoS5svpkja%2B27np90foUTiG\"}]}\r\ncf-ray: 98dcea704b772efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21245,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (21239), with no line terminators","md5":"74ee19aa3fbebfcb266c0987418c593d","sha1":"ca1aae23e21e67bd7aff112ce07d5cdab99e2f42","sha256":"049e28bf5bb09e5e8a333aa7188e0b86c60247ab5a8f7d149790e411493ee260","sha512":"3b9edd7856e0480b2ee5da5b9f6d7ecaf59759d933429f047a6c9d7180e69841069b57791858c8f7780a3e41457a2f6adab949715e128da636c626bd7dfa4838","ssdeep":"384:16JkVlGDv+K00AVxDOlBXUxLlHnvrg7i2szOIQm:kKWizVxS7UBOTm","tlshash":"5092b6b3e924607ab47b956ab480b6dd32298517f7130bb6fd52b174c68bcd74332a08","first_seen":"2025-05-23T04:46:12.613703Z","last_seen":"2026-03-30T21:50:02.893811Z","times_seen":77,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":91,"dns":19,"connect":4,"send":0,"wait":7,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/fast_del.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/fast_del.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EziZfuGSFy38%2BooMNiO%2FiSE86NdMZHt7ev8kZ5tBA9xtAhfzB6qD%2Fu2szKWWBeZKCTMtdxP5D8A059KqvPYvI%2FYyZTxPP34ANiSID%2BqB\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-58f\"\r\ncontent-encoding: br\r\ncf-ray: 98dcea7278f32efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29f354b8ec27c82188dfab2b38c93dc8","sha1":"049a3b8186902a6e958ca7a642d7b34c17ea7881","sha256":"d4efe7c12e125b7ef8837a3868e94e31543fb385e45af5c39188414baa2b30cf","sha512":"723d62e068c7192a6775e992c1dd88b21d6980fd9eb511938728f56bf4bc3e96dc678a258aaa4751895512503200092b15d977b20a6c2a00837ad6d96ce70128","ssdeep":"","tlshash":"5f2189f867f11ac0cb8fa363e1e0321d599f28b97751cde0a21453d1ea6a1889718ca6","first_seen":"2025-06-27T22:59:24.537858Z","last_seen":"2026-03-30T21:50:02.917619Z","times_seen":61,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/7301462e/jquery.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /assets/7301462e/jquery.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 04:02:37 GMT\r\netag: \"68d36d5d-17278\"\r\nexpires: Mon, 10 Nov 2025 03:10:39 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 186123\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhJ%2FkoBsUs89elftzgcmMx83bMBXdDhWtBTXhxBybcwcQE1Hxz3mrKFmNIJv9cyZKYUHlAbGf62LGyg465W25uXHNXNZ%2FwFqizDlmCQB\"}]}\r\ncf-ray: 98dcea702b002efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94840,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"b8d64d0bc142b3f670cc0611b0aebcae","sha1":"abcd2ba13348f178b17141b445bc99f1917d47af","sha256":"47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4","sha512":"a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW","tlshash":"b393e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-08T06:15:39.810904Z","times_seen":19489,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":72,"dns":17,"connect":4,"send":0,"wait":20,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/images/logo.png","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"langit666bos.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 05:52:50 GMT","end":"Sat, 10 Jan 2026 05:52:49 GMT"},"fingerprint":{"sha1":"A4:15:42:CB:5F:34:93:D2:98:CB:3F:73:DE:C5:D1:72:F3:EE:CA:81","sha256":"48:FB:02:AC:19:7F:CA:60:7A:39:34:AC:A5:BE:73:F9:A3:46:0B:01:00:DC:22:5D:0F:EE:62:FF:11:AF:59:C3"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: langit666bos.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 12 Oct 2025 07:38:01 GMT\r\naccept-ranges: bytes\r\ncontent-length: 102514\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":102514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 700 x 200, 8-bit/color RGBA, non-interlaced","md5":"3e5ad32093fd8edf20c2b740d9f421fb","sha1":"2d7420911819e30c447420dbf8b1503fc15dbc9c","sha256":"64a81177cabc6996226bdbc1862d25d8b0d643f8747fd705477531356fe23bbd","sha512":"26ad681f962fe489ea2ac81425dec4613780fef7cd557e7441f9af3a100da1bcebf99a7cf04dd96eeac1cdd66a2f8e4c8dcebfe2fd54ce977f65fcb4b704fa06","ssdeep":"3072:3OcsHQYEzGvbU+oCFoqHgSP4qBSNBNy06c2:3OpwY+khJFoqASlBiM06V","tlshash":"a9a312bd96b5889c1ddb77011dcf1b0ad6d3fa99104cb12be18b948d887eee4a0d11d3","first_seen":"2025-10-13T06:53:09.566978Z","last_seen":"2025-10-13T06:53:09.566978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.cloudflare.com/cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js","fqdn":"ajax.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.72.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ajax.cloudflare.com","organization":""},"issuer":{"commonName":"SSL.com SSL Intermediate CA ECC R2","organization":"SSL Corp"},"validity":{"start":"Tue, 22 Jul 2025 21:17:06 GMT","end":"Wed, 22 Jul 2026 21:17:06 GMT"},"fingerprint":{"sha1":"0A:E4:BD:3C:8F:24:18:32:9A:06:80:47:CF:F3:8F:FD:9D:E2:24:19","sha256":"55:8D:D6:1D:0F:3C:F2:2D:23:FD:B5:16:FF:20:66:E1:51:97:A3:4C:82:4F:9F:9D:B4:EA:D1:08:86:16:F1:CB"}}},"request":{"raw":"GET /cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js HTTP/1.1\r\nHost: ajax.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Oct 2025 16:38:39 GMT\r\netag: W/\"68e5420f-9688\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GkpPyWPiBXP9MFhtV6mjbDgRv1MA7iWRCYDKYAQRwwV%2FpxaNAqP7iMObPKDb%2BMn29b7j675qVxkwMqmdIpdx43zuYFhlRm%2FI4rCD8g71czKTzQoOr4Lj7ZqY430agKCaRcX7oYs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15780000; includeSubDomains\r\nserver: cloudflare\r\ncf-ray: 98dcea7048cf0b51-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Wed, 15 Oct 2025 06:52:42 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38536,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38535)","md5":"2654742314fe002baeef8dcdfda44ef3","sha1":"831198fa96dc623365f9c2efa1d860fb04b3eb47","sha256":"6b2e044c462b8b00dfb05d77740f8b8f2a90ce00e2e5ccf621eac288608c0649","sha512":"8eff30bd090b584a5b011510b8c6d0fbbc9cf8f1fd1e4534e042c942f05c15f0f00cc829b8f6f863ac69891cf4c81658f7e387bf83c09f74c25ce6143c9b0bf5","ssdeep":"768:AfBdJw5hgRwB+AGy2dNVaNRq1s54eZVx16Ehw:AfBdEBHwgd54eZVx16Ehw","tlshash":"4303ba8ab272b43643b76475b12f110ab237646d290a417cf114e8d67c7894ea337fbe","first_seen":"2023-03-07T12:21:55Z","last_seen":"2026-04-01T07:51:33.198154Z","times_seen":834,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":31,"connect":7,"send":0,"wait":10,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/f5681ca0/swipper.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /assets/f5681ca0/swipper.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88nXFjb26xFsZ4HSiNvv%2FcaViTPcUfQBu9KHF9CoopuTlonM%2BxpFtPSXgJkJqtePYfQuIx3vWjNfrab60PDmuGqfyMv%2ByXrPmpf%2Fcfcu\"}]}\r\ncf-cache-status: BYPASS\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=01cplclpceh085e5e5l4sj5bc8; Path=/; Max-Age=3600; Expires=Mon, 13 Oct 2025 07:52:43 GMT\nYII_CSRF_TOKEN=1f1790d3f042060116daa7ff85b8e059530d7bb8s%3A40%3A%2210abd77ee6020f6d769459c70af3326f2e65dadc%22%3B; HttpOnly; Secure; Path=/\r\ncf-ray: 98dcea702b062efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T08:38:17.057118Z","times_seen":13496014,"resource_available":true,"data":null}},"time_used":864,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/images/ajax-loader.gif","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /images/ajax-loader.gif HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1737\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Apr 2024 06:50:54 GMT\r\netag: \"660cfc4e-6c9\"\r\nexpires: Mon, 10 Nov 2025 09:37:26 GMT\r\ncache-control: public, max-age=604800\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 162917\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GOSm5jcHldoxTqvD%2BVl1n6PimvgFoNqETeAtM93QiBzJfxeIeS9b2mk2qmVtiihqZP%2FxAz0Ib1H64lF1C8jpoqgYFMpdi65a1wE9z25%2F\"}]}\r\ncf-ray: 98dcea764a462efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1737,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"dd6b7b0bf5c3af22499abc0a9ee1e1b2","sha1":"e8c0018145d616fac4deb460d9c1d9c9dd4d3302","sha256":"0eddaab3b8cb0b15d81d62e5ae5960329c3e576ea78dc321b20734ab20271847","sha512":"8a4c36e3fdb61782f6fc9bf78140c96aa729b4e1120bda34995a90c9d827395e1460f744df17779091d206629664467b997e19a7a6e54e07135ab89e454df601","ssdeep":"","tlshash":"34316805dbf50636fbee21f850ae979c0d2f8af626d5072aac5331588c3446c467d8de","first_seen":"2023-04-06T12:06:14Z","last_seen":"2026-04-08T01:24:28.635244Z","times_seen":2183,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/lazyload.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /js/lazyload.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-11dd\"\r\nexpires: Sat, 08 Nov 2025 10:21:05 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 333097\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWAOzclO%2FtU47nWzIoCf%2FzVpEk0i8e4XXcpU9GVytzTgIuL%2B25quhb%2BHbK1SIpOsmcvwrlzyMj7%2FrdkSJZ800Ecf%2FCSU6DktbhPBAMOM\"}]}\r\ncf-ray: 98dcea702b082efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4573,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (861)","md5":"b113c7191eb2ab3c2768374d090ebfeb","sha1":"5f562722bc9c60ed4eb5a6d709b782e0e8e40435","sha256":"0ff9cb70f9c7f802c9965d3573acc8444099a6fcd53fb132fb08fe50a0912d50","sha512":"aa977fe95791059840c3cbc6dab65d21965e9909129de16c898372b0def0788a2a4e4f5438d77865c9497bf476655c026e692b30031aafd960340091e4cddca1","ssdeep":"96:d0Q1y+ZltH75Z58Hieuc4aQuC3K5Vi8uchE4nuO+xGmNAdaGYnNPP9H8aKNuJgFA:dtyOltHNZ5NeVCa5k8Vll+xGsAQRNP6K","tlshash":"2c9134097902b93cb0ae767fc21b130a253ac5679579ec7064344c94befca93e216dca","first_seen":"2025-05-23T04:46:12.586437Z","last_seen":"2026-03-30T21:50:02.916999Z","times_seen":86,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"langit666bos.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 05:52:50 GMT","end":"Sat, 10 Jan 2026 05:52:49 GMT"},"fingerprint":{"sha1":"A4:15:42:CB:5F:34:93:D2:98:CB:3F:73:DE:C5:D1:72:F3:EE:CA:81","sha256":"48:FB:02:AC:19:7F:CA:60:7A:39:34:AC:A5:BE:73:F9:A3:46:0B:01:00:DC:22:5D:0F:EE:62:FF:11:AF:59:C3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: langit666bos.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-08T07:16:35.042138Z","times_seen":143921,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/images/thumb-off.png","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /images/thumb-off.png HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 550\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Apr 2024 06:53:03 GMT\r\netag: \"660cfccf-226\"\r\nexpires: Sat, 08 Nov 2025 09:21:58 GMT\r\ncache-control: public, max-age=604800\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 336645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tlCZkmoHZo57Vk6ALvjck7gNbhY3s0Z4GPpSwiCCVkWDdhLRWVfZWUs1PVUdn6nGLlMnVoIBy7d05Q0eT013ScWbs5yIF41AwY%2FvakKi\"}]}\r\ncf-ray: 98dcea764a3a2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 20, 8-bit gray+alpha, non-interlaced","md5":"a67de3df5746d72238148c91acdf88b1","sha1":"f4484822d8df1e36ea327947094e1d37f51b786e","sha256":"89e81f3bf15878a24d69514b34e283fceb09da501dfb0b113f87491270881203","sha512":"e7a3be3011d0de2649a23ed46143bf806943c0745c86eba03a60eb980e01ce3794385ba806bf4089b0196f0392ca4e157adb7223a10bf56539f3102d503a9324","ssdeep":"","tlshash":"e2f020cef18cedac87ca370120fb038ec022b34b0102162e9142c1de640d7bce12ca96","first_seen":"2025-05-23T04:46:12.590456Z","last_seen":"2025-10-29T14:25:45.901554Z","times_seen":53,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/icon_share.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/icon_share.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=niHnLTe1z1CDM8XCGOsgMkLuZdr8aetuMIUWF3yhzbrYFp0TFoO9ssIBn2imvKtwzlufcrrckN%2BlRW0%2FUYEfXtV4dg2LIW9Mdkk7PMpH\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-2a2\"\r\ncontent-encoding: br\r\ncf-ray: 98dcea702b0a2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5696b1d179fc91bf444bef8b2f3f6be","sha1":"e041ae2f92ff26b46e23f71f813fdd7a4848e40a","sha256":"9d88d1b6da895dbc349d011815c003f1e21bddc621dc6cd5350ad93e239fd4e5","sha512":"5603a64119102271adbfca6350216212253d2d23853cb860231984a20cbc57c414116ebb61b06f41d51e71458e92be1b8ebc08c9d6c59bb359ad55c07df7db9b","ssdeep":"","tlshash":"73017da626fa6698a73c435112e8343e3373335433088cb483911fc4da5ed1e5e81ceb","first_seen":"2025-05-23T04:46:12.594908Z","last_seen":"2026-03-30T21:50:02.908057Z","times_seen":77,"resource_available":false,"data":null}},"time_used":855,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/pageOptimations/bootstrap5.critical.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/pageOptimations/bootstrap5.critical.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-fe9\"\r\nexpires: Mon, 10 Nov 2025 05:21:48 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 178254\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BVw1nnMFDw6ZvY7cc5dVd7Utmv%2FHZ6mvQRTfXSQDdyIDDQpmYdXnWszO%2BGOQrFUuPUyCpUGw0vuIKrysYuLtjd%2BkuLHOOnvGnw0mUFp\"}]}\r\ncf-ray: 98dcea704b6f2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4073,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"987bda5a665c762febdacef166c2346a","sha1":"08334b1540c49a021cb9c36ec175ce32abe7d9db","sha256":"fa1e64f45ae93a862fda973c11193ba11b556548852998669809cc9fc6fc944f","sha512":"d4388fddf30a480d911a0128fcf199b2b051ec16a282dd8c2f13557dc937bf1945a0fcad16c17bb723a2797c47b3db5f246a74e9be5e7b5106ea0e673c37d336","ssdeep":"","tlshash":"a9811e94e5733eec66a7889b37ca9e8727b459c7840af97479c372148f8802a35717cc","first_seen":"2025-05-23T04:46:12.585435Z","last_seen":"2026-03-30T21:50:02.9164Z","times_seen":77,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":90,"dns":20,"connect":5,"send":0,"wait":9,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://langit666bos.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98dcea716ebc21fe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-08T08:32:18.517285Z","times_seen":330960,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":19,"receive":0,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/d/11zD0FoRMHbqlm-nyfUFVlNNnidpJiI5v","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:44.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:47 GMT","end":"Mon, 15 Dec 2025 08:41:46 GMT"},"fingerprint":{"sha1":"F8:5F:63:28:35:3F:3B:74:50:6E:B0:8A:1E:82:1E:81:0B:2C:5D:57","sha256":"E5:11:BE:F6:31:91:0A:88:46:0E:37:CF:15:59:95:26:EE:40:53:A0:69:3F:0A:3E:F6:B4:44:43:15:61:C4:6F"}}},"request":{"raw":"GET /d/11zD0FoRMHbqlm-nyfUFVlNNnidpJiI5v HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"sprite.png\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 13 Oct 2025 06:52:44 GMT\r\nserver: fife\r\ncontent-length: 46883\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 494, 8-bit/color RGBA, non-interlaced","md5":"1a645aeeb5a228de82ed42583c1d4890","sha1":"d046b643a79c0a3a4d4e3db6bca29041a34fc95e","sha256":"5d4cb42389358523c07b9eaf4ced8fa9e7a6ee6789a1d6ea7c7f6abe10969737","sha512":"0c868b9f95854f5ba9b5cdd5ec25a009cc9d46e374e194efb19f7491ca751e36b48e52e1431255c60d215c602767dfbbd1d4709bdf105f30f07d3e19e273022a","ssdeep":"768:GcXruNYIALVz9XFaHANkdyM7i404bkDi2MC4vkPEilf2xY3WU+nmSfDQSTqJJqUd:G8VpVaAkAogovkcititmSfqJjuQ9rx","tlshash":"e42302734ffe9a2975694a3106f348c853d5ae6f8721afd3f40cc9e2623e3905632499","first_seen":"2025-05-23T04:46:12.593576Z","last_seen":"2026-03-30T21:50:02.918499Z","times_seen":77,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":65,"dns":1,"connect":7,"send":0,"wait":221,"receive":10,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/images/favicon.png","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:44.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"langit666bos.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 05:52:50 GMT","end":"Sat, 10 Jan 2026 05:52:49 GMT"},"fingerprint":{"sha1":"A4:15:42:CB:5F:34:93:D2:98:CB:3F:73:DE:C5:D1:72:F3:EE:CA:81","sha256":"48:FB:02:AC:19:7F:CA:60:7A:39:34:AC:A5:BE:73:F9:A3:46:0B:01:00:DC:22:5D:0F:EE:62:FF:11:AF:59:C3"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: langit666bos.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 12 Oct 2025 07:38:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6068\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 06:52:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"52daa4e7566f7624ae50f7722e1fd1c0","sha1":"78fe093e054fc68b1333b19bdba2212cb40a06ad","sha256":"daa031d29c680c31f588c99d4656ffe17d013fcf98c94c28782834a860be59b3","sha512":"f898f89f1b529aade35ddf86645eedee94cbc5506d85b4561144eb80d9194b510d85e241da6b24abbf48a62d4de60eb2109338aef64b40bdd4c3c523b1b1f83a","ssdeep":"96:5aqxrzoNWLtwwVIzSDcdvnxWRG3fthIbvmJ5Al/RQtfvPmSF7lvZs8MuTfUtoq6:hV82IWDcdvnxWGfIbYAl/RQtH7s8MugK","tlshash":"58c18e366c517583c747600958eea5ccc5335acd988050049fe7a9db7f75a826eba0c3","first_seen":"2025-10-13T06:53:09.559353Z","last_seen":"2025-10-13T06:53:09.559353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/images/banner.png","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"langit666bos.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 05:52:50 GMT","end":"Sat, 10 Jan 2026 05:52:49 GMT"},"fingerprint":{"sha1":"A4:15:42:CB:5F:34:93:D2:98:CB:3F:73:DE:C5:D1:72:F3:EE:CA:81","sha256":"48:FB:02:AC:19:7F:CA:60:7A:39:34:AC:A5:BE:73:F9:A3:46:0B:01:00:DC:22:5D:0F:EE:62:FF:11:AF:59:C3"}}},"request":{"raw":"GET /images/banner.png HTTP/1.1\r\nHost: langit666bos.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 12 Oct 2025 07:37:59 GMT\r\naccept-ranges: bytes\r\ncontent-length: 924394\r\ncontent-type: image/png\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":924394,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 720, 8-bit/color RGB, non-interlaced","md5":"c6fe3d632556a4f31d0ba206414d1715","sha1":"afc30f11a73cca7368272eacbe4b49588436e63b","sha256":"aa06f5e7991e6ca65b08d6b72880c9ab0d85fc02fd089e3773cffa61bf975dc3","sha512":"b0847e59179917495d00b417bbcb6ffe9c334f63a80780ad9e6f1387932e5114684364ab658c910b228c096367edf073c9f13f8899e949190cdc163526304dee","ssdeep":"24576:3sueYXlQfLQMIXbjjvBBEOWp7VWCFcaxhIRpo:3D0fQXbjHE7oycaxeRpo","tlshash":"801523ce355692c30b6cb31afe6f6e44595cb0b5cc30c6e1e292e48c97746f68049bb9","first_seen":"2025-10-13T06:53:09.57299Z","last_seen":"2025-10-13T06:53:09.57299Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/jquery.raty.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /js/jquery.raty.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\netag: W/\"68d35ff5-2051\"\r\nexpires: Sat, 08 Nov 2025 09:21:57 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 336645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dw6tXkz61bdNL2fE2IhYMbx%2BzJgjRUSWignRnHwDx3SiKs0ePDsQ4LSGx5hGpzuITs9tLV3vCALvN%2F1wMZPyHZAZPFfZAx2UbmYHvLWQ\"}]}\r\ncf-ray: 98dcea702b0c2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8273,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8081)","md5":"86a847667db14615f2250f7e514c8c66","sha1":"7b308dedd78e158b1dc55f215909336b830c6749","sha256":"95e661e05ce7526f3a5527278e565ad71cda9dca5b80d72a0ce76bad97353a9f","sha512":"46cd8d256492da4123f776c2745cc8f4521ef4fc6c020d8b583e9052aa764c9c9fbcf75e1fdf89fc5cf7c0313fc2e9e2770d3bbc8dc84edc0633532259c0b906","ssdeep":"192:vdlRLpMwO35XNARENbYnPP3wGCGGtQ//iuX8:vdlXMt3HgENM3w7Q//iuX8","tlshash":"c1021fc8b38571069de33370249e674ee333ed8b9642402d783dc6d5ef6988995b2e78","first_seen":"2023-03-07T12:03:44Z","last_seen":"2026-04-07T12:08:00.002777Z","times_seen":340,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":71,"dns":17,"connect":4,"send":0,"wait":24,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/icon/ic_live_chat_3_3.webp","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /icon/ic_live_chat_3_3.webp HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17018\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-427a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sy4LGQe5rSg%2Fq1Jf6fEcDR5edgGAGvLuC7UEcgOtuC8t3Ns5lxW8pui3M8oP2GccM15IPsjVOSI2EH9T8V0CoDn%2B9aAKPXrqxFpK4DdK\"}]}\r\ncf-ray: 98dcea702b0b2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f380115e93aa7ae9ba0fb19a9b4c9ca4","sha1":"a6468104f0f088803f528db8a63fcab036b2cabd","sha256":"cefb621c4fb284b7e2b829bc91f3a43c9b031e6fbef1a800793fa02bbeef3a76","sha512":"314f2538322fb8be7d8b6d3460d7d4f06af9ffa6dda249b5815d7b6e664d12848b79329f5cf11d0e156a59f4bbfdaf1ca0571d89c3b041acb3456bbf93dc0a7c","ssdeep":"384:bLFS7GcdTVIUEl74n+6moeTzzfKwym1RqoIN/1ax6Y22g8YIcI6Qr:/ARBVIUEl74goWfKdFYx727lIRr","tlshash":"ae72d1e1afe151ebc8413730236af677a63d1ffae2470b2265f0cb6168748023919596","first_seen":"2025-05-23T04:46:12.610572Z","last_seen":"2026-03-30T21:50:02.89562Z","times_seen":75,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":784,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/cdn-cgi/mirage_speedtest/1760338363784","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"langit666bos.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 05:52:50 GMT","end":"Sat, 10 Jan 2026 05:52:49 GMT"},"fingerprint":{"sha1":"A4:15:42:CB:5F:34:93:D2:98:CB:3F:73:DE:C5:D1:72:F3:EE:CA:81","sha256":"48:FB:02:AC:19:7F:CA:60:7A:39:34:AC:A5:BE:73:F9:A3:46:0B:01:00:DC:22:5D:0F:EE:62:FF:11:AF:59:C3"}}},"request":{"raw":"GET /cdn-cgi/mirage_speedtest/1760338363784 HTTP/1.1\r\nHost: langit666bos.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-08T07:16:35.042138Z","times_seen":143921,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"langit666bos.online/cdn-cgi/rum?","fqdn":"langit666bos.online","domain":"langit666bos.online","tld":"online"},"ip":{"addr":"149.202.144.252","port":443,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:44.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"langit666bos.online","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 05:52:50 GMT","end":"Sat, 10 Jan 2026 05:52:49 GMT"},"fingerprint":{"sha1":"A4:15:42:CB:5F:34:93:D2:98:CB:3F:73:DE:C5:D1:72:F3:EE:CA:81","sha256":"48:FB:02:AC:19:7F:CA:60:7A:39:34:AC:A5:BE:73:F9:A3:46:0B:01:00:DC:22:5D:0F:EE:62:FF:11:AF:59:C3"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: langit666bos.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1031\r\nOrigin: https://langit666bos.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Mon, 13 Oct 2025 06:52:44 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-08T07:16:35.042138Z","times_seen":143921,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-13","alert":"Sinkholed","trigger":"langit666bos.online","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/cart-shopping.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/cart-shopping.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:43 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umrj6GeIRUrbZjSH9h53tuSPrUKY2luuAtQM6o%2BrJYLaiozIxjwAoMQnLNnqTJKPgkD%2B5w8tn0YgG2StActXK2dbpSL2Hp6YSRtWiw0v\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 98dcea702b092efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":962,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b4f7e378d8bbd1ccc63aca6a923f98f","sha1":"4ecd450e96115010259bcb6497944ccd78856175","sha256":"2d5f59dc4879582a4f799b87d9fe8b0b985ea3f800c556177634c33a43d2face","sha512":"49b78abf45c75b465339e86b460c381980ab6d910a88c392a53eba8bf2f751df8f1262f7682a28abd26584efe9056ccfcd5f2e72e25924b919f4ea18929ebfd0","ssdeep":"","tlshash":"2111bda0b3e9e2541a23e3d0d13de866f71b14ff7841de8486a0eb99f47f05954c9850","first_seen":"2025-05-23T04:46:12.608659Z","last_seen":"2026-03-30T21:50:02.905969Z","times_seen":75,"resource_available":false,"data":null}},"time_used":885,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":817,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/k24-2022/k24.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/k24-2022/k24.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-4f25\"\r\nexpires: Wed, 05 Nov 2025 18:29:15 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 563007\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRAgHzG7OK2rYSO7xMEMzZKFps1pZGIBbgFZWyWhTI%2BHdIzMTYRCqX30X1T6PV4uUrkmzAKBC2cqg3f%2FOkfg8rWDWZXPSj4tV%2FxVJmv6\"}]}\r\ncf-ray: 98dcea704b752efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20261,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8dd9db32d02ed2c4e27811f163426a3b","sha1":"d71b12724812dddebff26cf45b4ec5de7afe5b50","sha256":"013fec5583e79e6a65cef698a73b8584b324ba0eaa7e5d786f8dee0dd0233b8a","sha512":"8e869ce18402d0c020100579751b3ed2685ed2e7fe69f08d08a526ecbede3474d9dbdb51f25cad14b4cbc93a47eba0e54d71aad2edd6201e7e817060d029512a","ssdeep":"384:KHkaLef9vQ/A9m2ziwrX6oM1w8+eqFDlromvgFY:v1f9vQ/A9msiwrXE1w8+eqFDlromvgFY","tlshash":"6692b0ee66e00504f626d65c5c11fa56b36d8403860dfd7fe6f3212cbec96d5e0a22e8","first_seen":"2025-05-23T04:46:12.604571Z","last_seen":"2026-03-30T21:50:02.903129Z","times_seen":77,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":15,"connect":5,"send":0,"wait":8,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/pageOptimations/font-awesome.critical.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:42.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/pageOptimations/font-awesome.critical.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:42 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\nx-xss-protection: 1; mode=block\r\nexpires: Thu, 06 Nov 2025 12:16:37 GMT\r\ncache-control: public, max-age=604800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gZ5cSJV%2F6JUdKkJOCNhhcxICRkDOWaUlXSeumq72PKniIHGyZlyX5UPHKWLWa2Iha%2FY2LAO7F%2F3MGhxYZ2QczaZpOMxaTVTo%2FuXxcGbY\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 498965\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff4-f7\"\r\ncontent-encoding: br\r\ncf-ray: 98dcea702b042efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"9c3d3ef008726ece5cda728260d82a66","sha1":"e1688d87a3c5269dd5b04e709d45c9ab67aed178","sha256":"97c0206ae94e810b18fd65c91c07a3a5cf8f04b142a60bf1ae380f13e90d61a4","sha512":"e237e66bbc6cd4820eb2496e83153eecfd79f57c338e5a471ca4800d19d575bd346d06f95765e1f4d3e7fa77cdd2427f866c5ab135232db5437d39325be53f22","ssdeep":"","tlshash":"9fd05e2d39a30280605a4c8c6bcb2b9a229451735504d8aabb829a0a5f9997963fa71d","first_seen":"2025-05-23T04:46:12.601112Z","last_seen":"2026-03-30T21:50:02.894641Z","times_seen":76,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://langit666bos.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Oct 2025 11:50:33 GMT\r\nexpires: Fri, 09 Oct 2026 11:50:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nage: 327730\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-08T08:37:33.798032Z","times_seen":298357,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":77,"dns":1,"connect":7,"send":0,"wait":12,"receive":1,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/circle-plus.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"172.67.71.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://langit666bos.online/","date":"2025-10-13T06:52:43.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/circle-plus.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://langit666bos.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Oct 2025 06:52:44 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaUl3b9wYBvXG3CvnB0d5aRvLZj%2Fsm74sBBvTBOENKbcswstzaDcxPCpfPeB2k7Gw%2FoG18hUXgcOlY%2BRA%2FKqj8p5Fgm8jdFkyliIRGlb\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-295\"\r\ncontent-encoding: br\r\ncf-ray: 98dcea7288fb2efa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":661,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d03b3de54ca0a1dd3450cbb4de4b43f9","sha1":"773ab693abba5dc017cbe2aa9e634df3cc1babaa","sha256":"7f826bd6e2f61dca0054184395e1a9ad68f810b4f7fb9cdd60e150e69981a3a8","sha512":"a03430e57ada6b6917ed72f1b200278a101d55cd43bb1a24baef0a3c210310f312c3fd2a8303ae4c0c49a45366944c97cda5b7a117ce46019cbc3db3dd10ea7a","ssdeep":"","tlshash":"bb01f7f129794344d67b0313f8a72554597eb5ae87c0c8e6b54428dccc92c819b7a994","first_seen":"2025-05-23T04:46:12.606413Z","last_seen":"2026-03-30T21:50:02.908797Z","times_seen":74,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}