{"report_id":"8fe82dfe-14e7-4d8a-80a8-053e122fe797","version":6,"status":"done","tags":[],"date":"2025-12-06T11:46:14Z","url":{"schema":"http","addr":"berhasil77.org/","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"berhasil77.org/","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"title":"Berhasil77 : Berhasil77 Penyedia Resmi Game Asli Fitur Hebat","dom":{"size":54443,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20649)","md5":"1ff38253a9d745dca4dfab2e0f8592e6","sha1":"c0af63c77b0bed2f42d99ffdf85277b7c60dea4b","sha256":"58c1a7ba41f03f477d4422459953b62fc7cf52c90550e6f1acbc9069b3ac3993","sha512":"a12cb05242f7bdcaf36b1287e798fa68b42975060ff80961408195e1d367d9392764864c3a087198b41cc8dae8d50435812977e3d258586308ea1c04bb103a61","ssdeep":"384:GsW0A3XsvFFHDSAQFZf/qNdRFo4k1B3Y5rAQUmPdKy6vfN6iKTIpV2KyQQMWcBTH:GsWgw1zB/WOZuvsE9hFURuHRKIRCG9g","tlshash":"80338473504c247f2262a3473094779ef95bc835ce274e6af7bb775c8292dc22a72219","dom_hash":"domhash5f496e3e827933ac23d4bdee5bb2a87e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"berhasil77.org/","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-10T11:46:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.ampproject.org","ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2015-08-31","domain_rank":3289,"first_seen":"2015-10-09T04:27:01Z","last_seen":"2025-12-01T03:25:51.278726Z","alert_count":0,"request_count":1,"received_data":229888,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"berhasil77.org","ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2025-11-08","domain_rank":0,"first_seen":"2025-12-06T11:46:15.352637Z","last_seen":"2025-12-06T11:46:17.041515Z","alert_count":59,"request_count":59,"received_data":1394922,"sent_data":28573,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"493e3814e3423d51835474b9dd8736e9","sha1":"0b8547c90e22b93c24cf6fda90359bebb17ee741","sha256":"614283c105067ad2cfc2d384beb4b42ac1f6dbd000d6ed9a8f94360cc519f56e","sha512":"0f025c6306a9d8031c63a1001e0e14cc5c62bd6e48f17e4c2df9e4e0e494dff23d85f35a3f816541e5eaf883f931835539223009b878b2f5719d5a5c75e7f9a5","ssdeep":"3072:YHF2lahpWCJEMtfIWdWwY6nehjr7TAwOHkJISg3:G2lahpWCJEMtfjdxnehjr7TAzHkJe","tlshash":"0f24c5a53296b03247e554f5d4770102e3296998340a806cf8bceecb7cb9d86b1b6f7d","size":228272,"data":"","first_seen":"2025-10-21T21:58:19.290827Z","last_seen":"2026-01-06T16:22:02.160599Z","times_seen":830,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/casino/mglive.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/casino/mglive.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"204e-68da20aa-385dfd;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8270\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8270,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"faa51fc41109b4397800df3da77fb7c4","sha1":"b2386558e04b1424be21d9d7c674a1f047d9167d","sha256":"9b84a603de783d2d11a4625c2fe6c9da7f96ba980dcbddc1a445d2ed470eed3a","sha512":"7fac3a096523f73ebb110e8c8f9bc1fd871f20291e0597c5508c79efc33f1279c09b1061fa93a8f39f7f41efffbd775c7e9a3902ee182fa76829bc410cf8b63f","ssdeep":"192:wwJcKqjaxEBZyxTNb3gTRTRFkfHqAOCMugyTjmuEVu:wJ+xEBZCNb3gTRdFkfHqEMugmTEVu","tlshash":"9602c0b48258314296c11e2d952f544385ef6a3be49d541be39f527bb73dd0a7b20d30","first_seen":"2024-05-01T03:50:05Z","last_seen":"2026-03-29T08:44:12.772725Z","times_seen":143,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/sports/opusplus.jpg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/sports/opusplus.jpg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2c29-68da20aa-385e0b;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11305\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 287x242, components 3","md5":"050bc84a0a597d6b5db077569c74fe5c","sha1":"2e82d86d1f7e90d88b3535d9fa8a431300341545","sha256":"bf1864d534dfcfa947a794d7ca63fe2425e7c2d8f42c15408e67a8e80f577cf5","sha512":"d2530df858003e7cccaf0d170fd68ea96070543c15a470e63d18eac465d35587c9d5b031e48749ef1639d03fb94989ce58c7e83c7357212697813a4a768646eb","ssdeep":"192:EEMTQLIX8KCdjpQx2g543jlSJSzMDHKb3yy5KHkA7JOVqLRZ:EEML8KCCH4TYJSzMLKb7AhcCZ","tlshash":"25329e97d9a9a962f68ca92295ce0b138f6f0240f5e2dc467cd854920ca14ed5e2c3fd","first_seen":"2024-09-20T20:07:41.307259Z","last_seen":"2026-03-29T08:44:12.771513Z","times_seen":113,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-fishing.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-fishing.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"4fab-68da20aa-385e15;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6146\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20395,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1819c49d6da1dcf13dc861e71944c5da","sha1":"92665c967c880845012703d29f7f2ae40142bef7","sha256":"633c84abdadbbe425c75326d7f008a4934225ec8b18b1913331fbc63617433d4","sha512":"80d5029a9305bd7d3f984dd7c41fc792a49f56c98b0f5ef775ec66160e013ceae0a95ee193487dcfe479fa511dcb1efadf74d1e483613a2d672507a65b435427","ssdeep":"192:NZe0uWLKbMkpbqwG8UYMao1X90CAoasSTHdpvLX4AxFl6fY9ZFudw6TJoGiy5d+o:be0/LKbNmApcTRaxfbdl1udtTJuy5d+o","tlshash":"bb9285320b104ae4a76d755c7ce65f9b7f6a8cb9a080418283f6bdc554b3ffb200895b","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-03T15:27:51.928279Z","times_seen":1287,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-togel.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-togel.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"6d2-68da20aa-385e26;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 670\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7dd23ca632225a90b6125dbcba400e0","sha1":"1938013a08d268e18e53fbe0529e0753445d1765","sha256":"452d0d167be6ebc49bbd48f064efd89fe8e47c5e153df1fb0689264f46ed90e7","sha512":"2ff7a8a2e3bd2de789f7b36e3700d533b5edd89b8fc1888391fafde5396536f429ca0b3a4df1a859ed0fef25a2893780c1c274a05159950a1e39247892cdf202","ssdeep":"","tlshash":"0331543aebaef5cd5b8fc7040a57524007cec1fa3276e5b28e4e9934c1539b2d2a7940","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-03T15:27:51.942031Z","times_seen":1230,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/casino/sexybaccarat.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/casino/sexybaccarat.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"197e-68da20aa-385e01;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6526\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ef43ffc3ef9941a4736cfccedc9b6e2","sha1":"4c6c053e90e7f4deee287c8bc719c323c7cfb8eb","sha256":"0e08bbd57af24350a2037af9e1d6f8b34d44963a19c66926ca03b72c40b33c4a","sha512":"342c84ef92ea4cc245efbd2fa49a6d380b2bcb24e41664de0b93c53d9c437f91673d8f816ebbbc1906acb66f410f6c0926b406bcd0c2f3483da5e2c1bcbe00ee","ssdeep":"96:f/299b0ueXKj1r2aDBkiScCbmU3vb6t0TNslOjE5hsPdGlUv5kvV5a1qcJZgrK:f/S9bp1KjTqUTTNs6E5hsyRbJtm","tlshash":"a6d18e0028b463a37cf8362ac53f5a247eb95ab90d734c85424d7a7f68d9d1bcc2c156","first_seen":"2024-09-20T20:07:41.296124Z","last_seen":"2026-03-29T08:44:12.727072Z","times_seen":138,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/casino/ioncasino.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/casino/ioncasino.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"1900-68da20aa-385dfc;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6400\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6400,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d034854514874063702472795d20766b","sha1":"ae27b0f883d69d058e8da62b54b45ea934fea663","sha256":"9e9d62c6f6fd729e0a9948c7dc44d0ca529dcdeb2a924968616092db0ed5e1af","sha512":"b75deb7f73146be333b62f677739450b607328e2ff1d249e30ec05e634365913b0d1856dc7b681a7a4c7d0fa9e2d2839035debe79ab76ade56c16886596d5858","ssdeep":"192:5s13YNiJ3hCZU0UizIFhAYgkEfAlAOdk4:5aoNir95h8di3dl","tlshash":"10d19d5d389e4b0a7cf137b7aafcba2835b2445479df764260e4a8c6f11ad0c68a1452","first_seen":"2025-05-05T17:37:47.329422Z","last_seen":"2026-03-22T17:23:06.038892Z","times_seen":25,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/mglive.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/mglive.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2a0-68da20aa-3c4e04;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 672\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":672,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8079cc5c0f62a8e33880b85427d747d2","sha1":"7145f46aa135bc5b5e989d6b98c12e81c8a6f5a3","sha256":"283dcf26fcd6abf84400132aa252eb77143a8c647e951ea8ed5b20c97c7ce75f","sha512":"3a13583fc739c9c16cafcc6d62cb7c5199c020e4b00e230d66aa3cdd6c06c9607d73f477a5f658245ac812efe0a8386b3c7b98116d99a308376ed90e6c4516f6","ssdeep":"","tlshash":"f80188543d155bd25d7260340c0f972c2074668e4253d29e7fda77163342da077452dc","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.084316Z","times_seen":41,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/casino/pgslive.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/casino/pgslive.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2b6e-68da20aa-385dfe;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11118\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"24144f6885b1966b88f619c6b80f515d","sha1":"ae8a951b83c41f7b203491879b81cb190c5877b9","sha256":"15812259943709c20994498376634c7e8be03a49f384a83a675f475f5aeedd4a","sha512":"6653df2fdebad966f26f433557f1ad0e90d23b986e8b0c405976bb768a743faf626f731343f9e7684c0abb106d2697996f0280c25e51490b5085ee864e5603bf","ssdeep":"192:QAitLGzAm+1qY4CLVDMso3Lru8I1FMpA5UOu3dbCZAsxhR:QHtLuAmSqvCL2SvrRGZxCZAsxb","tlshash":"7d32bfd696fa23b004ef363b4963cba9d4c751d9c47f5932e020e14a1d696a8273ab34","first_seen":"2025-10-18T06:51:43.327899Z","last_seen":"2026-03-22T17:23:06.020977Z","times_seen":24,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/sports/sbobet.jpg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/sports/sbobet.jpg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"252b-68da20aa-385e0e;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9515\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9515,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 287x242, components 3","md5":"efadc648c65976ef420c96e1142282b4","sha1":"7dd2c68c1515aa313015c530c3f6d45a1194d080","sha256":"bde2a3f22e9ed57e0ff85d3eb224a833539bc9d43b668fb0f0fda5a2476844b2","sha512":"ff5355e858b77808e1dda568d5b79fee4bc35d8fe5f0a50beaeef81763251e0e805e112cd8b5e8e8f3119556df8a0a13654b4800ec25b945d55f77fc06171f02","ssdeep":"192:E+qaywtT2mEW0jji2VPSCmcUtmA9bfSq9W1V5k6pE5FudPxuTmA:EyT2C0jECmcQMTpE5Fuh4H","tlshash":"d212b06aa7fa3803eedef8f05ce24ab70e2ad51552d1c50c7a54f8117d94831a03f351","first_seen":"2024-09-20T20:07:41.303945Z","last_seen":"2026-03-29T08:44:12.767787Z","times_seen":113,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-livecasino.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-livecasino.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"1843-68da20aa-385e1c;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2137\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6211,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e11d5f0c09f499ab72a211a82fb26a57","sha1":"40d343a18c82c21599672c30bd31783782a6d7e6","sha256":"40c39c649925eb129353589c3fa33d5c88c6fc07cdadb0ab98afb1d7cf0c0ce1","sha512":"23444188986177ab0d7c39cbb01febcab7cb747251ed60dff355fb02f46615b38285ac5fb18bbd4eb9bd169ef5eeb6a7bdbe9f32f5cfe212d33275496182c371","ssdeep":"192:aqymUwJr9LbA1uM3vMmDB4AB86jLEcEyAQ7vNCV:aSNi1uM3vMmD/jPy","tlshash":"f8d101aac3a107f8e9e50a45dee029093e750cbd6e3d4e48cb6e9d545cd1fcab009b1c","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-01T17:20:46.20385Z","times_seen":228,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-telegram.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-telegram.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"568-68da20aa-385e25;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 641\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b6c8fcc3adce46056a38c26b0684f6e8","sha1":"be841635e007c9909445d6f00ab6516821c5ffe7","sha256":"83c313260a970991cdc4ca354bb0365c4e66f37c1553ec17ee4e0f648c29697e","sha512":"f7c0296fba258ebe10b97cb2f6c93cd37199109fd5bff03b472d9256f989ae949ed6a88dd9c89e95107b9ac9cc3d77beb10a01faf9f03ea45a0353a7301df9c9","ssdeep":"","tlshash":"4b21027ac79db437e42dd3f89a9094a5236da0dfb2c080604078ea3955947ca1c0b954","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-01T17:20:46.208511Z","times_seen":271,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-gift.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-gift.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"549-68da20aa-385e17;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 604\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a3e83eeebedf59eccd44adfa9b4e1d13","sha1":"139bbf6a80a6187a0b0efc83be988349fec5e203","sha256":"8e6a629f5f5c7814ed1ad690446365bb5a2c338ff03eff8110bbd2af538d1c1b","sha512":"9963e1ee8eaf5ea7b9e58207f413b07f9e3468ce769da282e13fdcdf3dac121377b25ecaf8bd14125c18cd696cdc289e129d7a949e513553fc2a28d1de7e8cf6","ssdeep":"","tlshash":"8b212024a30d0e76c5bd0b6026ec1ded5c766f0c3e013992814a3bcedd86ed11ba89c7","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-01T17:20:46.171341Z","times_seen":241,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/slots/advantplay.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/slots/advantplay.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"22f8-68da20aa-385e03;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8952\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8952,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2e0b3b129a0864b41d85086d39a1852","sha1":"ee742896a307bb1d0b1a008ddcf26205c30b52a5","sha256":"c8ff132c4fb95b1e3e227698978694a5ebb066121551f42809caecde5d6e523b","sha512":"816fd1672eb7db3ebc98f491ca0e3fd8f71a10916d6f4f75c7a53afd42403f5267f424bea12d8bf2ed879dca8f1c3bbf19101136fc00662e06fe167252ab0ae3","ssdeep":"192:miPb7a8ZQRsz31Brm46yl80d+RFox9Ttm/z:mM7a8ZlFB64eG+Mu","tlshash":"5f02bf1899b10a3d7a3a4ef81fe811e69067d577f0b4e4006723a398af4223427a7513","first_seen":"2023-05-13T12:53:01Z","last_seen":"2026-03-22T17:23:06.030886Z","times_seen":97,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/slots/spinix.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/slots/spinix.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"21e6-68da20aa-385e07;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8678\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8678,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce0eec0362d661b592639265818d5e6f","sha1":"a86c27992c72e7fb95152a3c5c933b2ad255e74e","sha256":"bbcf4f1547d3463a39eb907395ff9aa3e1cf7469ccd25d2447773594fb50164e","sha512":"95c21883f9b0b147e5018f9e0918d455812200c6672d9fc4bca8f52096ee0561b7b56d2dc96024337f91ce44ff047c315952e7617f55cbc26120bc6e1621f30f","ssdeep":"192:RQcp4SK0kG+z/yOUaJWmUqZVkCPiYcGC1SNkYi:RQEEDG+NUaTUIPQGsYi","tlshash":"4b02bffb64c50f242c611e99c325809d32b55c7c64d81bfc4d9c87dea02a19aadee3c1","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-03-29T08:44:12.74232Z","times_seen":147,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/sports/ppvirtualgames.jpg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/sports/ppvirtualgames.jpg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"23a1-68da20aa-385e0d;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9121\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9121,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 287x242, components 3","md5":"a5e4c76bab8fff1c65f3c537f3c805f5","sha1":"cee0d4189fb3fe01f165beed68e50383e6fbefe6","sha256":"fc06131fef9cbd03faac653d06a8f8281901659abbee8a80b0b94e95bd16d434","sha512":"df05d29dca39f48cb7aa09b2aadcf1cfe73bf41f24698efdc320ea52c52834188e4e1c6c11b8690290adcd522604d0dffdf4f675837817387a4f826e0f88695d","ssdeep":"192:EikKSeFrgUzGlxJfolKwn3Z0lqU7qnpthBSlXGw+qi6ke:EieeFrJIxFsKwnpDUU3hclXlRj","tlshash":"e2129f786dd05e11d94ce6bb31ba25b35ee64553b0d8cbbb40ce003686a10e7cc66fe1","first_seen":"2024-09-20T20:07:41.314091Z","last_seen":"2026-03-29T08:44:12.741Z","times_seen":111,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/ioncasino.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/ioncasino.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"3ca-68da20aa-3c4e03;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 970\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d6240fa8aeda5226aa450d61a750895","sha1":"eb6dc7f9543d52a9ef5b8f103c58b65d27613aed","sha256":"f8c7f0c0fa03afca7ee8bdef42517061e440d96318db058fa31e690d89c1a150","sha512":"829e3df6dd05ae3662f4a997f66ac01c238bcb35b1f0845c08e1b69ed3370d8f661f2a4a478bd16a168d794f80a48249dcdf8b6c62000f763d72dc4d3d1dcbe3","ssdeep":"","tlshash":"f311c81bde68d70b65aded8c1165230b2c86200a6fd2b79b77d1c62dc22e4e704c6c2b","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.0883Z","times_seen":41,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/sagaming.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/sagaming.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"3ca-68da20aa-3c4e0a;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 970\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":970,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f94d4333e7ed4c5c0168982813071982","sha1":"ea122d5c64d739ddf5807394e5c38a8f844129c6","sha256":"e136759ca389a965c327fbed57298587aa5709961b3cd6ab8795e5b4283cb4d7","sha512":"8620acda87969f501f159e173312738fe90a440da8a606ce02aa8c11f1fc1845f04d9800ceb6b6555293cd522cd4978cc6be37032eaebc670b5182f1bf1b0f9b","ssdeep":"","tlshash":"2411cc68dc31d7098c817e12e775a7a59f807f674585cd90b2a31858eeb00e1125207b","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.045041Z","times_seen":46,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-casino.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-casino.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"2116-68da20aa-385e12;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2899\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8470,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3f6db64f19005491ec2f3ccec8a4957","sha1":"02cddda4df6cafa00b756eaa9094b808946a98f5","sha256":"1682180332236ff6d603316b2d09d1c467523dca0729d7653ef121518f3b2d29","sha512":"340a586c601ed1cba203e45ac120d1b21e0d29ab1358dcfb4a1fa5fdfaa682e582bfeac42056ef08df7ed07e2b7d5c70b568744348c849e7b0bffbcefe26315a","ssdeep":"192:dYpgRwmUX9gg1nlu7f7sQD2HPP9nSvBjJ9h0N9jeG:dAh7qWu7fjD2vP9EjQJD","tlshash":"1a0206170302dbdafb9d4628a929148db5d0dcdbd4b0e0d0ab6b3416e58d8e5be4c7bc","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-03T15:27:51.936533Z","times_seen":1229,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/sports/cmd368.jpg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/sports/cmd368.jpg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2c71-68da20aa-385e0a;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11377\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11377,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 287x242, components 3","md5":"dd698a25c9e074e2d733e9ef9df45231","sha1":"090ab5c833bc1c656957e7b4ba41e91879e87877","sha256":"1466fb835bec9452acbeb793719cdf4650ce8ddfb674bf1a75af94a3dcd46b29","sha512":"6775268b93da7ae9ed62d83457a1d58400830fdf0b81c816fa1ea47efcf8c964dd5c7c68c0a5970b9a5fa91555f59e2d005abb1c0b423829e4eb0de7d8940ba8","ssdeep":"192:EcpmPTRst9EDyItjn7te6NIWTIreaJdNsvjsgO6cpRjdvOoJDPYGRli:EfR1Dy4nz/4ecsjsgSnFJTdi","tlshash":"2a32bf2776e396b1eb1c8f71bff386034f274943c8889660e48fd41a48486e4a06975e","first_seen":"2024-09-20T20:07:41.311656Z","last_seen":"2026-03-29T08:44:12.746112Z","times_seen":113,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/slots/funkygames.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/slots/funkygames.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2332-68da20aa-385e05;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9010\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9010,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6bb6e80c650c47dd07f032da85dff011","sha1":"0dc6ff5f38e8212bc7eee391ce6604e771419dcb","sha256":"ecbbba42c42b37a16adf5c248d415c32aad7a92811ee1bf37a39a0b213f67bd3","sha512":"ae748856453ed52971c994d645dcfbede0e698a195b23621a7677f84aff2e08eb532e0b2e31837ee69c742249dcd254c02006ff6c05d64c43434cb9fc95678f8","ssdeep":"192:wMq3FAOgvrgIDIm7xaU4LJUmGoZwTD6Tjzbzd2r1mxqS3lx7L:wAObdm85N5Z2D6Tj5i1mxqS3HL","tlshash":"5d02af1d6a63e08123a556c5972423486e26fb08df386516330fff702917b6e316b9df","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-03-22T17:23:06.082303Z","times_seen":80,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-beranda.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-beranda.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"331-68da20aa-385e11;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 444\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":817,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ae4748bb18effb78dc6d98f8d909790d","sha1":"fafd86eed959576a9175425578568aaccc0b4a71","sha256":"e674d994d3f0106f9d9603e4649fcd1927778b37542752c43f087c01b21fb008","sha512":"dd72ef50dbf2156f2b976b4b478e018d92d88c0005b6fdc394ca443fa3feb8aec149d10c28808442673d58e2c9326fd8cf04eca38372da27180c305524f785a7","ssdeep":"","tlshash":"4c01ab3343c90e39c9681718d5f419513189ccfae2b0a5e8ea83681ad94dd6120626be","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-03T15:27:51.954143Z","times_seen":1229,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-poker.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-poker.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"d07-68da20aa-385e1f;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1320\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8cb5b8bd0db8b52d981ad352ee20a3ac","sha1":"522967c1b7749313146b736684ebd3d8bb93ef79","sha256":"53b6b3266be8d3af546bae96df6c049329e77ec0aea0051a98ebd5ba18176a6e","sha512":"917d6ad55b24ca4bb5211a20c41a92b6cc7a14994fa214b63ec8fa999ef6a83ae24312e209b20801ecd35e15537ffeeee4d9bc1df2067832a6321117d9b4d95d","ssdeep":"","tlshash":"f361d46b03169bdef79d4624a565108db6e0c8cbe4a4f0c0bb6b3415e4cd8ea7d4d3e8","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-01T17:20:46.202496Z","times_seen":434,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/sports/wbet.jpg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/sports/wbet.jpg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"331a-68da20aa-385e0f;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13082\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13082,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 287x242, components 3","md5":"50b8f27789fcef69c3129147bbceb5bc","sha1":"151476e121f88c7482076671bea588abccc3a90e","sha256":"008d43bda6ec9ae6a89bb3adf512b3dfb3a60625fb051659982325a932c2487a","sha512":"cb93037a98aca0a5070f70dbf48b7653dd8a8950db660857f0937956fe132c7601eb538a1ba9c7eb044fb7a89135617881c22c762cf38b12e7ed190a6a9f2082","ssdeep":"192:EN/906T1MUrzdTfeIpocBDwUkifpkiBz+MHaDm1R0FTbRKJg1eTg9Bb65:EN/906TiUNTxpocd0ifpkiBzaIC9ZjbK","tlshash":"4342c0befe20964adde2b4bee8b412c69d6b4202f443c5edb5d7e7098c305e1409e1c8","first_seen":"2024-09-20T20:07:41.305411Z","last_seen":"2026-03-29T08:44:12.743954Z","times_seen":113,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/sports/pinnaclesports.jpg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/sports/pinnaclesports.jpg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2921-68da20aa-385e0c;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10529\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10529,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 287x242, components 3","md5":"254e0eea19a7c045630455d78c7bfabc","sha1":"627f6fc7870a8e676896364252b089104d16a045","sha256":"984838f8e03beeb3249a42c5bfd8d806311a1962e1961b50228cff31f28837fa","sha512":"ffce8113016c5e25e1b0f51ec8095e218e453dc27ec1b5e1ee2e2ed9028d542551b16f57df39ea9e0bb0524a33db0d3df675bbf2dc5deaf168fb912fd521cbe4","ssdeep":"192:E1+AbAdM9I2PAsMU6EKxRFLyD0foGWi1FwAYx7u:EMAEoos2EQjS0foLi1xYs","tlshash":"81229d33e8a1b8c2e8ec88747efbd5530f265841afa4d507f2e96c51410d224aa8fac1","first_seen":"2024-09-20T20:07:41.308611Z","last_seen":"2026-03-29T08:44:12.706033Z","times_seen":112,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/win568.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/win568.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"7b8-68da20aa-3c4e0f;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1976\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1976,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2628ed99dc52791b79d5fecd83dde827","sha1":"3e0be95cf5d829b43af3bb2047710e37cd7dbdf3","sha256":"c254ef61419b0736d6d380d62d1c48f40514f6712b4e965cfab2e00c49fe30be","sha512":"eaedf8a139672263aaaa5431e63baf3e39177f46552ec5e47e6504889b996ac14aa4a221f3a061828f87b36349ac1d562e7fc84f217e027d4f32a678f6027339","ssdeep":"","tlshash":"b24108fd97cb1401c94eac0907b015efeb4da474f6b63106a28ee4e258ee8513d02fa2","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.044134Z","times_seen":155,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-livechat.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-livechat.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"2c8-68da20aa-385e1d;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 383\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":712,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92e40c91a8583dd5b450aa71f5b50922","sha1":"60816729e3ffd184329c06a1e84c0a30c4049bd0","sha256":"c9e22960b6540e3434e2af2279a2b00f59da0eddf1484119b3e10525e9642f57","sha512":"09ed0ba137119f50be15af84b52d83e66812c53eb3aa706129edd529701e4033b2ac63bae1fc5b987332ad1595c1c35108b4e087f78b6de7b6581bc29794e3e4","ssdeep":"","tlshash":"dd0194ee03ea81498b5d1b50897f28867bc671876678c1d87704fc02a8f2df15053689","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-01T17:20:46.208991Z","times_seen":234,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/webfonts/advanced_dot_digital7.eot","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/webfonts/advanced_dot_digital7.eot HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://berhasil77.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://berhasil77.org/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"17.0\",amp_style_sanitizer;dur=\"5.1\",amp_tag_and_attribute_sanitizer;dur=\"8.4\",amp_optimizer;dur=\"3.9\"\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":39999,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17215)","md5":"69fc3724d2b0f3c1c4a0246d009a549e","sha1":"00588faad9143281a253535077655e9015497f91","sha256":"c1b3fd51342b0c49854cebd09df0ab2dfdff6da14fd3ac79c1f8f972d0709a52","sha512":"3cc98efeed31c155b45a75142a87fa017e42e9694b38e50f99b25924ad36f2d11d88c9360a603183fbbb4794ea0773bfa32752f77e2e3a33017cc896bdac3b75","ssdeep":"384:msW0A3XgfAHDSAQFZB/qNdRFo4k1B3Y5rAQUmPdKy6vfN6iKTIpe2KyQQMWi2Hdr:msWm/5CK39hFUEUplRiK96","tlshash":"2f039773504c207e6226e30760d07b6ef96ac835cf270e6af779776c9792dc625b2209","first_seen":"2025-12-06T11:46:22.604795Z","last_seen":"2025-12-06T11:46:22.604795Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/pragmaticplay.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/pragmaticplay.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"542-68da20aa-3c4e09;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1346\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6767c112e7732d6b55918a408f6af16","sha1":"ab07f2795aff78686e8a0f6eec7cfc7e048f4459","sha256":"506f0a3bda037232a236e588dce8584d0586c93bd65b81547d74599f261b53a6","sha512":"9ee36f626420e92a64fc92fb9d056d38dad3f0a856e3486cfca6992d876b831c91a7fb82b9f88fe54a42b0abe61327cabd8ebd53ac4f9b1bf284447e44277b6e","ssdeep":"","tlshash":"d221d61a8e7ce07e40813c268a84cf4f931441fa2399afeaca1882a4a49c3700702d2f","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.103161Z","times_seen":276,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/hkbgaming.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/hkbgaming.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"3c6-68da20aa-3c4e02;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 966\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79582885068f126c9c502e231a46be26","sha1":"bb222abecdc571e05f9b4aa0d687e9125ba38b36","sha256":"e28c2830e0dcf3282e10117ccd5a6eed6d3348bfa3ace8c4fc750eaeba54789a","sha512":"310ff5382b7eeb6f67e2eccba065fee5aed42f161f3c6ffe822a7e0c91ffb0e56178f4f59c6393369bad873673c4534d0e614a7d406770c6a4295853020ef2b4","ssdeep":"","tlshash":"cb1194b2537ab18aa9ba6852d63c3e880b746443ad3597ff5ff38852f42182d940502b","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.099236Z","times_seen":41,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-whatsapp.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-whatsapp.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"67b-68da20aa-385e29;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 904\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10bd266fbf9634440ad347672b997db0","sha1":"5b2ff09b9482de8d5835ceb3f98c206bddc53046","sha256":"31db4c718ab6929dd5f98d5236cad8bef883fb840483863b1b95a15484b9f04e","sha512":"ab819c9bd7d9b95ed633f34b7775183acaca869c2f755ba9c5bf0556f701f59bc5f6ab38831d061c3d644d37785413aaabc05875285894b76f576c3c971753e5","ssdeep":"","tlshash":"c331b4c8a3b8cfb55dc91b28577070a23f7c002edeb1426cc2ca27677451ba0508dee0","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-01T17:20:46.16947Z","times_seen":235,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-jackpot.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-jackpot.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"7ca1-68da20aa-385e1a;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 23782\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31905,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"524d091d4759569c313dd81aab7d521d","sha1":"95b068a7e8847a60803b33fd7b051292be42303a","sha256":"4609cea657d57c84eb55546dd797d3098185421efb86ef0cf25e3e8d1447655a","sha512":"3172c7104d69254d1c7b6e7c5ba7c82c6ae2a18312bc9531b8b0ee8756e3a554c94184f7a44bbb8cffb76795c2447111ae27500d426f0758d9bbee8355bfeca9","ssdeep":"768:1SiFxD6THNhWHpmolBwPP0KB2j75lcTrwyl/K:siD6TtheBGPpw7QA","tlshash":"f6e2e01fce8ea7ac8516426c303bfdea0dcc6e4d80487aedb9c1b5ab15a655140b2715","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-03T15:37:18.832005Z","times_seen":1387,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-06T11:45:51.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlink: \u003chttps://berhasil77.org/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://berhasil77.org/wp-json/wp/v2/pages/194\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://berhasil77.org/\u003e; rel=shortlink\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: amp_sanitizer;dur=\"16.2\",amp_style_sanitizer;dur=\"4.5\",amp_tag_and_attribute_sanitizer;dur=\"8.1\",amp_optimizer;dur=\"3.9\"\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 9838\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"AMP for WordPress:2.5.5; mode=standard","description":"AMP for WordPress automatically adds Accelerated Mobile Pages (Google AMP Project) functionality to your WordPress site.","website":"https://amp-wp.org","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":54268,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20643)","md5":"f4a1add85d2300b8e154b09e14ae5a82","sha1":"db345386ba56b0a738f22b555e403c50349141d0","sha256":"e40611ae8be22ef7bd34daa5460ded6173c302b4fd6f1e61443907aa31243480","sha512":"74a491b8b2d688b6b0f6831543bf97bf9303edd9b5fac049dea77051328cc53204be5269aed7262c607225931f23a8334061f723049211b4850baf4b8012859e","ssdeep":"384:msW0A3XsvFFHDSAQFZB/qNdRFo4k1B3Y5rAQUmPdKy6vfN6iKTIpV2KyQQMWcBTD:msWgw/zB/WOZuvsE9hFURuBvEUR+K96","tlshash":"36339473504c247f2222a3477094779ef95bc839ce274e6af7bb775c8392d822972219","first_seen":"2025-12-06T11:46:22.617269Z","last_seen":"2025-12-06T11:46:22.617269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":184,"dns":111,"connect":29,"send":0,"wait":101,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/webfonts/fa-brands-400.eot#iefix","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/webfonts/fa-brands-400.eot HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://berhasil77.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"1fac6-68da20aa-3c4e18;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: application/vnd.ms-fontobject\r\ncontent-length: 86480\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":129734,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Font Awesome 5 Brands Regular family","md5":"12728563d2c5cc4b11d0fedb4251c128","sha1":"ca3e7236f551f08cd1c1b55f1fe39d4510097fb0","sha256":"215e24cbb139aa941622943edf144fb54fb119334ecab2efeb06b1d35feee681","sha512":"def1da7bb514b4836a5730b4098da93ffeeb0dece4587bacce168bd3a9c0bb51565856ae8603a2121d519b95c4e1823b019b9b17078d44aa82a7d5b8a43a1a04","ssdeep":"3072:bzWRC3JMtlRcn2tZ+8b6I9JevNViPVkWvLk:/3JMtjVtMGJeFQPVvzk","tlshash":"bcc3bf06b3dfcf9fc11369be48d0955ba6e5b508ab112692ff4b2e2dc0176c84c7931a","first_seen":"2023-11-07T05:16:27Z","last_seen":"2026-04-01T17:20:46.199966Z","times_seen":549,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/webfonts/fa-solid-900.eot#iefix","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/webfonts/fa-solid-900.eot HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://berhasil77.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"2ee7a-68da20aa-3c4e22;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: application/vnd.ms-fontobject\r\ncontent-length: 93695\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":192122,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Font Awesome 5 Free Solid family","md5":"ef24016ada64b58ced70f7f1ed92e399","sha1":"d7008a84048489319d505be7041e6260b31a4c7e","sha256":"315b10809238e782eaf45366cee8fff215feeafc872d704a455c982bbad247ae","sha512":"b26768f58d3f7dd9a262a1ccc0d2a50c9c14b8c6d367add6bddece3f972653b6b52429071becc41b93e0c7a92b7ca251e104c1b7cec2a884ae5da32e1796b34d","ssdeep":"3072:cvtG5iE+nhbTOqjZ5pLL1CdvPXiazQYYtByVNaKL/rjr0hFlxwP+yehAMe9k:0tG5iE+nhqip9CxXiMQPtBy3pjYhFHwo","tlshash":"9e144bed769fcf67c18687bcafd0bd3221e05f10325237e2be46991e20669c494f056a","first_seen":"2023-11-07T05:16:28Z","last_seen":"2026-04-01T17:20:46.204414Z","times_seen":350,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/slider/slider.jpg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/slider/slider.jpg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"39ab5-68da20aa-3c4e12;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 236213\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":236213,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x620, components 3","md5":"38b3a1a1be6215e568e00d8c2595d065","sha1":"bff3f01798ef2dc8fcf7491f8c5866f5e61b237f","sha256":"f872dd13595c872c25ddfc5cdf17cf7390cd2b22948d038e6ddadaf578c8d2ac","sha512":"a0044e9e9a2fa471bb29bdc361cfc480ce2b472db8257ada21da0d7e5f7863f92947a7939bfc23e75c5d414e4ea009b4e218c9a3106d768cf01d5df10f83fdbf","ssdeep":"3072:RhQ9h5xup0DT35n+ZKDxy3HUtYmx70zQgRy1/ev1jsPzBh7jNdPWXCPLAxLNRL21:I7Xuo3ir3HKag3jNdOXCPErR6Dcm7","tlshash":"8d3422705c82d70fc7a65b364affb8aa44535ad84d27d0e72e644237f37138bca0196a","first_seen":"2025-11-14T01:16:03.625912Z","last_seen":"2026-03-22T17:23:06.090668Z","times_seen":14,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/jackpot.gif","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/jackpot.gif HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"a575-68da20aa-346e2e;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42357\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42357,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1280 x 223","md5":"627c765a71cb879f4959c680f27c1da2","sha1":"1e94a07eee81bb85ffa8f9ce272ba9b42bbdfa9b","sha256":"bf143f38b2824e91b44eeda39665e7b4d103a0cc3f42ca7f05a40ead704c121f","sha512":"0ceb4decf55fb48c87f91904fa08fb1fd0d3b74addfd3d118e166a6655263bce81d81bbef8a16b044c1129a04cdfbd5606b72fcf9a2b04f667e47d5fd000fa57","ssdeep":"768:dMZE+ZPmutHA100JwUqWQg8GagdYX1EQdMpSzDiK3xITGlW9VhURWsMmdiVz+AnA:eE+Z9tHA10e0wage8a9iClUVyRWWdCzi","tlshash":"d613f1db573c4435286ce52089397ba719e22a2592f6fcba33d4d94a4e0c0e494f9fb1","first_seen":"2025-04-22T22:31:22.538901Z","last_seen":"2026-03-22T17:23:06.034059Z","times_seen":28,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/slot88.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/slot88.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"5c8-68da20aa-3c4e0c;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ac82451c6722b5aa092cf383cc27d56a","sha1":"1438320c3b93261993d361f1ad29b70b5f8bee27","sha256":"9e21666b1fd4a11f4549607872b4f8b41d952ee39ef2f1b2afd58e33ad899deb","sha512":"f03982b0d6c5a98c82acabd673c27e55a3a0d2f06528533e11c4e41add340dcd2777f9b6f5edf4902e27af78d603a646895cb219a52053504edacc5bde767e35","ssdeep":"","tlshash":"4031f913a94b36141ca868b6a8d1f503c76a76219012a120e957daa821570cddf4b378","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.104177Z","times_seen":276,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/asiagaming.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/asiagaming.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"5d6-68da20aa-3c4dff;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1494\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a259f510fb92617a1b8526399faf8547","sha1":"f2f2b32be1a8c316333c7de1a6b2a9a4abbcfa89","sha256":"8b25d519810b5aa5cdc4877fe444cf825583fa6c8d373ac781385b08f9570427","sha512":"f45f1f7d0f03aee54b1ae16e795dddf1b639a9a6b2e08085abba4cdb440aa4a82858963ded5d45110e1a2426b535317fe8fbe4a3908308085a54c80bcc637d5c","ssdeep":"","tlshash":"1031f90b3810596581bfa12d202ed6b85ed29f89765a6c0e8588f54877dbab3b115409","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.061226Z","times_seen":276,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/sexybaccarat.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/sexybaccarat.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"5c8-68da20aa-3c4e0b;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41cd9e71ce18ae2d0da8cd108c04f139","sha1":"b32147afeeac42dd5c23594edf8325fcf6c43348","sha256":"85f1d9b2e46d7ca51369063d20c07c157efb655ab856c794953373ce8686108f","sha512":"85ff9372e95b07945840c4b75bdc805aedeb4d38c861a910680f431334f467df7d5fd80491e6149df42024c64b0d5c33a32aa39f968f19744fe1b06748263ea8","ssdeep":"","tlshash":"7831c74af0fbff19192cf5a4d999cea0e14215b2c06ac395ede50fc40a6e904caa0204","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.062104Z","times_seen":164,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/casino/sbocasino.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/casino/sbocasino.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"1df0-68da20aa-385e00;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7664\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90a2b767a26797a143187881059dd013","sha1":"0020a08476d278e4445607e461029c7890d7a3d2","sha256":"91d9459a3065e0407e3fbe3813f8bed2a79e4c76fb3e66854f2f928e27ac0833","sha512":"5bb9a9c22b869b24217628c56615d89349d3fc86bedfa3b1690a02de996c69a86b85e6d715469f995d65862c881b33fc44bf8c29c67b1d8b02551d77b862c04b","ssdeep":"192:a72AYRqGugAhv9prupdQd+lNFNR/70eadlo4Q3PD2ls:o8RtkVpruCq70e8fQfx","tlshash":"b8f1bfaf0e14cb978fcadf46992ae50744736286d0182dd53aaebd73a65a5213c303e1","first_seen":"2024-09-20T20:07:41.294846Z","last_seen":"2026-03-29T08:44:12.77079Z","times_seen":136,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/nolimitcity.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/nolimitcity.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2e0-68da20aa-3c4e06;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 736\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":736,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec86a07965311bbc67b41363ee98ccdc","sha1":"d8ba5aace9d43a9d1a5a36acde2d045cc2251a85","sha256":"a8c3891ff545699d632878caeed847eaa963eb0c8fbb773eeccde452442e65da","sha512":"aa085af1fd8695bb03fb1bae32051460a6a3b5eda634fa6005c9709612baa6676bb5415a9fd129fd004b65e2bb873768ed9296c22d214af050b28b463801329e","ssdeep":"","tlshash":"eb01651e76d5f07aef4190d33a2549149993dca1547cb0f68dc545699b310d4326056c","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.06038Z","times_seen":41,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/yggdrasil.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/yggdrasil.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"49e-68da20aa-3c4e10;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1182\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82274d1435a570f492f088b6bd57220c","sha1":"3d8da88bc99193ebc6dc6d8babc4a5edaa9710f0","sha256":"f05d35ec38f3a7c51782d89d875cac0bdf7b8f7b8ad268a1eae1ec44c9ca998a","sha512":"7018b4efefb6164b7c728d5e67855dc65293514651560ccfddf18fc29cd16bb7e208b12dd021ad282dd0cc7176a4b9b5bf806d204efbed7ea5110825e323e137","ssdeep":"","tlshash":"cd21a7e411000be2c91c62bc57a07ec65d3c470255a95eee9b80bad962762f4de0b60a","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.08712Z","times_seen":41,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-sportsbook.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-sportsbook.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"d14-68da20aa-385e24;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1296\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3348,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0de92a71fbcd1cfe5594f9b569c655a1","sha1":"17f920aaff1dfd8bc5ed654dc95e881ec9885439","sha256":"bb0b9d56610645ce9c731054fbe64f5ef0d5a7925e5b7ba2ba954954ed61f5aa","sha512":"8e4d110ae80609974b584c7d2439a0a96ae2ca0710bcf0625a79fadd14a81e640a820e339ef583ad869b4e6d45017e7b8d00903d9ffffd6de01e8f95743e9441","ssdeep":"","tlshash":"1b61ccbb13fd511daf8f4304895a1683179d94ea3269e9f5be0df830e0239b0d16be94","first_seen":"2024-05-24T12:00:55Z","last_seen":"2026-04-03T15:27:51.948626Z","times_seen":1198,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/cmd368.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/cmd368.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"69a-68da20aa-3c4e00;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1690\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1690,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f04183f4b9b2bad1a0ff5d11220f70cc","sha1":"037384bb74f7ed59eaad1bdd3ea874fd56a2057e","sha256":"dd85056b045e436259db573259074706953215defe1255e42c8743a4ed169123","sha512":"0d46e245fdff587035293679fd6c5fe739526b7daa26948a4db6eff52db11b890e0fcbac41719abfdc36d726be72af13d20ffa218e62ddd58f23756451b9a340","ssdeep":"","tlshash":"6431d8caeaee60fde19a1af3ab491651da77d46d48049f48509c3561e34f07ab0a0d70","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.054681Z","times_seen":41,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-slots.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-slots.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"872-68da20aa-385e22;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 846\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2162,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef0e4e782cc54cb0d60cf0527e048f93","sha1":"c500e4073082982156fa0be7ad7bec3bfdad87ef","sha256":"8815a05be68a8b3badb9c9249133856d872cd28732fb31f413281d4fac259aa9","sha512":"49a3ef902d5bae46b6a7a99d60fad3a021ee03b3104e8463ccd8fd4509400a3a73f8427168a7d0fae46363285d71ea819898ea8e328ff072fbc0e426acd45d2e","ssdeep":"","tlshash":"fc414a3b03039ddaa99a8f605a39258875e0dccbf87595d4ef1b3826e18c8c27d6c394","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-03T15:27:51.93604Z","times_seen":1228,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/icon/icon-esports.svg","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/icon/icon-esports.svg HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"28b-68da20aa-385e14;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 327\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c20aea3a724b7fb0932e67cd71a29a58","sha1":"65a55a7e0071c58db7a1d85e23f2873bc9c8b38b","sha256":"f0aa93fa0b6834cbc64a1af1f9153148a4d7d9bc45806663e812ca53649df679","sha512":"86340515e13a3d7b38ffdefa2c726642d26bc11d42379a454a46b2f39c4e7df041572959da14ac46b8bd14b60e33e7fae29b25c070822850b1dd246e18d523b9","ssdeep":"","tlshash":"22f0761e834a9925b75f4528cd7c194c358cea48628e30883931803ca5c6a9b18b26ea","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-04-01T17:20:46.199121Z","times_seen":436,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/slots/fachai.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/slots/fachai.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2040-68da20aa-385e04;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8256\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8256,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8ef01cd6d1ba44ecbb06c032954209f","sha1":"a4d1721e96e718416eaa811ced9a28ee96540edb","sha256":"f86ddc1756a376493c543150191d596f80de173505a0e513b8b0f9e911d90840","sha512":"24a4c6ead271ea3636728a06bc25e16b511dc491b22d3bf19fba6edd91729077d77f1da0f4f04ee540597fed1dd05466ec38c1414a471a8ba005bc37a324eea9","ssdeep":"192:o8DChvUaas6RAIX8XZ9DCIbI6cq2ftf/CPP2Azc:o8DChvUal6RCXLDPI7Q2uc","tlshash":"f102ae88161a9301a89d3a31814150c27e6e413b37fdbcd9f267ae2376ac732d783f42","first_seen":"2025-05-05T10:42:26.996893Z","last_seen":"2026-03-22T17:23:06.05842Z","times_seen":75,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/logo.png","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/logo.png HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"25e54-6911775d-346e2f;;;\"\r\nlast-modified: Mon, 10 Nov 2025 05:25:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 155220\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":155220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 570, 8-bit/color RGBA, non-interlaced","md5":"f968ed73e8bf240157b3f8f70e63ea80","sha1":"d65515d97a4023ed919e83bd04f78179e7ba0f30","sha256":"9665384a5f87bc6458b071995e9abaca47841ce6e0c863859d6b1b04fbdd38ca","sha512":"44548b043da00786759e6dc513c4e716dfc64054e80aea32dfaeda5994e32b11278227c06b5e0a6bd29e736b3de2bb25fa014e3d566d654f8a38fb6a83048655","ssdeep":"3072:jvSgPIUHoVEodebcU1BWShxS37ZA0C7XYJPCUomot5Vc4:j6OhgUJxG7RC7XWP2Zt5V/","tlshash":"02e312969259f50cef2cd4331c0be7d43bd5e924207904aedaa0229258d683b1f7bed7","first_seen":"2025-12-06T11:46:22.63946Z","last_seen":"2025-12-06T11:46:22.63946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/pgsoft.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/pgsoft.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"35c-68da20aa-3c4e08;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 860\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d7702b92bca84e553f322aa81e467401","sha1":"3d59f9276f1e05e753e659cdd95b93ffb10c479a","sha256":"7e6b62bcd3ab872794a36321ad462294e7d6a6f279f7e55bfac08f0fd9abd110","sha512":"8d0a903b3c25f3aeb3c0ae16fe7ff0f2771e33c0eec54ffaeea9d7fdd971a91054ac9962d22940afc2b38ceb2e96da02b0340a97caa94153f65d770c6f49c23b","ssdeep":"","tlshash":"151152a1ae4a668c468ebdd03121a5c0d143226b79220465c5cfee8b32aee22e405140","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.039799Z","times_seen":276,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/favicon.png","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:52.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/favicon.png HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:52 GMT\r\netag: \"1c69-68da20aa-346e2d;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 7273\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f4a9b13b1bf155b267c88ab1197adc1f","sha1":"a986890500b61bc38cf7e2ba37db792eb4fa2ac9","sha256":"2a6b94f1d694d2f0c9dd7b4e72a21dbf5aea416c454977fe06fbec44e198d288","sha512":"f022e4d5687301b1160dbf523e224c0121b063b996a88a52e5c789aa49e6bb8611785683c583fcc23bf1a74ca0a483cad69a55539491dcef3cfdac8be113fcf9","ssdeep":"192:1xRo/DpiMC6nIQcTD48+oig4fyorpn55Q3AJG:HRgX5IQcIU/4Ndn55/JG","tlshash":"f6e1bff543c5deec25e8053ce17e821d0e77948678a34949a79f7a22cdb899841c3d15","first_seen":"2025-08-04T05:25:00.702521Z","last_seen":"2026-03-22T17:23:06.089686Z","times_seen":28,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/webfonts/digital_sans_ef_medium.woff2","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/webfonts/digital_sans_ef_medium.woff2 HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://berhasil77.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"4a34-68da20aa-3c4e17;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18996\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18996,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18996, version 1.0","md5":"dc2a66f13fdf60d43127df9801e9df85","sha1":"095f2d59c90b4a635288ba3079da4fc50fcb1e9f","sha256":"3815eba1b61f8c9bc806b74b1c58330e07fd1e5f4c31b13785348e0a6ce4c03d","sha512":"e816142e560817e32011e8d8e3474dc35e430f830214599f1cd07358d7d6ca7d07a55cf777970e2db9b5d4bec5790212caf824ec096e7a5a1beec8ea5e770cb0","ssdeep":"384:p9QVF9GZORJSxgl/w9lCfUEVuccPVDQtBANYGPXxtwS03diYXH5XIg:p9QVF9GAJSM/w98fUEVeV0tmxiH3d9Xz","tlshash":"f782d0945e483b0ebce5d941c65706f2a9bc5f480a0f56358ea9ee9c8deac6802f1854","first_seen":"2023-04-17T17:56:06Z","last_seen":"2026-04-04T01:47:37.513777Z","times_seen":789,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/webfonts/fa-regular-400.eot#iefix","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/webfonts/fa-regular-400.eot HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://berhasil77.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\netag: \"865a-68da20aa-3c4e1d;br\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: application/vnd.ms-fontobject\r\ncontent-length: 16765\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34394,"size_decoded":0,"mime_type":"application/vnd.ms-fontobject","magic":"Embedded OpenType (EOT), Font Awesome 5 Free Regular family","md5":"08021f07892f7751f2b8e7700043e8ea","sha1":"3bd6db7b3e30cc0061fc8ee5899d36c7e25bb9d6","sha256":"68fb3b23507a108a2509ddb7217716b83dfdcd02c8b002b497b084e715778b31","sha512":"bab56788f145d7591260698b9d243cdb647b030f5cd8101534d4d21ac053d3378b50f71f469de64f580f170a7fdac192d4948b9bf5fedce002ba1950c34df20e","ssdeep":"384:MIILltPRwpXUazLuDULbN1TH/uOlrk4jx3I+89AyI6WcRwkVcQUp:MbLDPXy6DO7/uOtx29uc5VcQUp","tlshash":"98f2196db3be8f5bc087d73e7a51e442b1726a15324366c1da8a7a4a3153bc98df020d","first_seen":"2023-11-07T05:16:27Z","last_seen":"2026-04-01T17:20:46.209966Z","times_seen":550,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/toptrendgaming.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/toptrendgaming.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"482-68da20aa-3c4e0d;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1154\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"42400c6e9c9b68cb1b91061d81ef663b","sha1":"9e453c020b17936f298c76d16d319694132867b0","sha256":"89f413a0c82e5b5f0a02d647652dafc039467dab73755a6970a76100207528d5","sha512":"c64f940931a733e313921dc6f5396cb497df0e76ce8f89182ff724d82acc5f7ce527f99b07398c67190e311a2402717c1e12334fd6bc0784645d5dc9dfd23ba8","ssdeep":"","tlshash":"7421ca2e9f5d15accad4b90c557bc748e2124a070b6adf317b7f2560b3d9f921714504","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.022044Z","times_seen":159,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/pgslive.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/pgslive.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"66c-68da20aa-3c4e07;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1644\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"17e3ed18395b3b63121f1a4ae99cfc78","sha1":"a29c45e19a157b4a85b22b80d911528b75c509b6","sha256":"bbaf3392a5f338814c8a65e5a2fcdfcfc334fb007be5daea6fa5a43102f6d7b3","sha512":"588214a617a5450142c73464b4c4847e13a57462ee0bf539e6ab3738beadf7992008ef9d143d7959b313278f60dad63e9f49cc3faa616cfa1fde9a4ad98d7d13","ssdeep":"","tlshash":"25310a4cf29693240914bf50a9dbc356c70b29e304396edbf2bbb856072009969de5f8","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.023151Z","times_seen":41,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.ampproject.org/v0.mjs","fqdn":"cdn.ampproject.org","domain":"ampproject.org","tld":"org"},"ip":{"addr":"216.58.207.193","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:07 GMT","end":"Mon, 19 Jan 2026 08:34:06 GMT"},"fingerprint":{"sha1":"32:DF:47:F3:2F:CE:5D:A4:72:56:ED:4A:54:CB:BA:6B:00:BF:B3:E7","sha256":"5F:6C:43:00:4C:98:4F:F8:E7:02:6E:50:3A:2C:61:82:5E:27:43:6A:FF:3D:DC:DB:72:AA:8A:A0:E6:C1:B6:4C"}}},"request":{"raw":"GET /v0.mjs HTTP/1.1\r\nHost: cdn.ampproject.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://berhasil77.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"amphtml-china-available\"\r\nreport-to: {\"group\":\"amphtml-china-available\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/amphtml-china-available\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 63577\r\ndate: Sat, 06 Dec 2025 11:45:52 GMT\r\nexpires: Sat, 06 Dec 2025 11:45:52 GMT\r\ncache-control: private, max-age=3000, stale-while-revalidate=1206600\r\netag: \"86ad2a67437295a6\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228272,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64621)","md5":"493e3814e3423d51835474b9dd8736e9","sha1":"0b8547c90e22b93c24cf6fda90359bebb17ee741","sha256":"614283c105067ad2cfc2d384beb4b42ac1f6dbd000d6ed9a8f94360cc519f56e","sha512":"0f025c6306a9d8031c63a1001e0e14cc5c62bd6e48f17e4c2df9e4e0e494dff23d85f35a3f816541e5eaf883f931835539223009b878b2f5719d5a5c75e7f9a5","ssdeep":"3072:YHF2lahpWCJEMtfIWdWwY6nehjr7TAwOHkJISg3:G2lahpWCJEMtfjdxnehjr7TAzHkJe","tlshash":"0f24c5a53296b03247e554f5d4770102e3296998340a806cf8bceecb7cb9d86b1b6f7d","first_seen":"2025-10-21T21:58:19.290827Z","last_seen":"2026-01-06T16:22:02.160599Z","times_seen":830,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":312,"dns":67,"connect":21,"send":0,"wait":33,"receive":33,"ssl":272},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/slots/pragmaticplay.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/slots/pragmaticplay.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2e1e-68da20aa-385e06;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11806\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e450b194e5f0c2b000a1c7a73fa8cde1","sha1":"cb651a1fcf3570d01255714dca75ecc77fd161a5","sha256":"dfa34d4871f4cf220bf210e05bcf7eba30b1aeeb4e05b28466405fc30e7a3f0d","sha512":"ef39128c6a4e9da1ef9a363ea93fb67cac6724dcab3907e958eda3ac42b9496a7ea5ee89d99fbbb01e508df54ab282491891ee47c1e9176b6a68a174df162537","ssdeep":"192:+XgF8jkek1S1tuovJfBHifon6VK1Bn5x04HB6Hp37wDP1ihNpXREqOgHkCnJf2:+X68hk1cvLZ1HxbcJrwDtgNpX6XYkCn","tlshash":"7132d019ecf95a63c0e22ef41933e96392f7e50e0b3d9532600f351704a05ae647a8b7","first_seen":"2024-05-01T03:50:06Z","last_seen":"2026-03-29T08:44:12.726233Z","times_seen":148,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/webfonts/Lato-Regular.woff2","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/webfonts/Lato-Regular.woff2 HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://berhasil77.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2c9b4-68da20aa-3c4e29;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 182708\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":182708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 182708, version 2.983","md5":"bd03a2cc277bbbc338d464e679fe9942","sha1":"cbff48bce12e71565156bb331b0c9979746a5680","sha256":"983b0caf336e8542214fc17019a4fc5e0360864b92806ca14d55c1fc1c2c5a0f","sha512":"a8fbc47aca9c6875fc54983439687323d8e8db4ca8f244ed3c77ca91893a23d3cfbd62857b1e6591f2bc570c47342eed1f4a6010e349ef1ac100045ef89cbfd0","ssdeep":"3072:a+zq/3zkl+ciohnxbjroiZ/XPHi8Mo/Oqh/J41RZ7E/Aur2mmxuN/y424XqtjiJy:aYq/IlDfcipXf9h/sTE9lwuN524Xq9i4","tlshash":"c0041258a194dee5fe761a3a03b7c540ea8e7ab041dbc6f6f0b994497e211210fcd5cc","first_seen":"2023-04-13T01:33:41Z","last_seen":"2026-04-03T13:06:15.622149Z","times_seen":4102,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/provider/webet.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/provider/webet.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"614-68da20aa-3c4e0e;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1556\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d051430d59f34b5fb4bbc1c2e9d0302","sha1":"ab8e123b32313402fe8000f69c5cfc739f709ce3","sha256":"b96b1c4a7c10c4a7be15873f76b13862de1bd56f4f9baf7c1c3497ac21538338","sha512":"6822e3a497a3ba07717d73953ca1aaa923d639c9075f03533d93e75154c4b5c590f89f07829ac737177f37cb0bf92429136479487cf3ebf7547ae655a862d91b","ssdeep":"","tlshash":"df310700a8fd1ca8d90e7775e8bd6d085c5a8a854605c8c9ec4f20e52b2cfe4a9c85e9","first_seen":"2024-06-14T17:31:00Z","last_seen":"2026-03-22T17:23:06.085733Z","times_seen":158,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/casino/ppcasino.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/casino/ppcasino.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"1eaa-68da20aa-385dff;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7850\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7850,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ccbc7740b820c4b607091a29f1008a11","sha1":"909e0a8aedb99c12c0b3261fb0e83fb5becb4a7f","sha256":"b29b2604cfd6f5795516ede0de4dacb8979ae69f17f27f978832e3eee697d6c9","sha512":"ccde58eb860df44e4af25865d2158d8f0ba43c6905ebe943540f8f44a363c9712ed6174573bf90f6feed21c7689d0fd57c2a6fd3bffd5ec2008c6b6d0ee36c67","ssdeep":"192:k8yKQJcXhxGkY0JycQYPqOaBtgctYTLWf+yKI57hu3m:0JPmpl0toTq57Em","tlshash":"2ff19ed8f38aec522c14cb624e60d53073cd98de4ffc77c3656463598a862d3b9a694c","first_seen":"2024-05-01T03:50:05Z","last_seen":"2026-03-29T08:44:12.772121Z","times_seen":142,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"berhasil77.org/wp-content/themes/litebold/images/games/slots/yggdrasil.webp","fqdn":"berhasil77.org","domain":"berhasil77.org","tld":"org"},"ip":{"addr":"151.241.30.166","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://berhasil77.org/","date":"2025-12-06T11:45:51.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"berhasil77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 10 Nov 2025 00:51:42 GMT","end":"Sun, 08 Feb 2026 00:51:41 GMT"},"fingerprint":{"sha1":"7B:E5:45:F9:5E:06:38:2C:52:FD:54:40:48:D0:45:E5:4F:00:65:30","sha256":"5C:98:49:7E:1C:DC:BF:BF:AD:F8:BE:52:F1:53:BF:CA:AF:A3:54:4E:63:BD:E2:B1:49:88:14:46:DD:4A:7E:B5"}}},"request":{"raw":"GET /wp-content/themes/litebold/images/games/slots/yggdrasil.webp HTTP/1.1\r\nHost: berhasil77.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://berhasil77.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 13 Dec 2025 11:45:51 GMT\r\netag: \"2168-68da20aa-385e08;;;\"\r\nlast-modified: Mon, 29 Sep 2025 06:01:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8552\r\naccept-ranges: bytes\r\ndate: Sat, 06 Dec 2025 11:45:51 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8552,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1954a622f54258aed72592fa7582f1ae","sha1":"8bbace282835c48a6eb6b968f55d15f768203f71","sha256":"3c86d0547540ffa9191f7c750b0ad516c53efe23457392ad6e68ae16aa9b1b8e","sha512":"dbff631fe669ddb96e9a052a6be343c4ca55636fb26f973a1a4e127b8b2f3600b92130f2afd8679547eafbaaf9e37c3168837a93d41d5b57347c7dfddc2d9e8e","ssdeep":"192:3y0xmHpkM1haQ947MGvh+B+N1csH3nnH/NYrCfRlDv2RiI+DLqN:/xmn1haO47fysX/NzRlz2c+N","tlshash":"8002aeb71857b34c3b6caaafc4f6315910e042ebc4555fe60da1bce86507900c687fc8","first_seen":"2023-05-13T12:53:01Z","last_seen":"2026-03-29T08:44:12.776709Z","times_seen":217,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-06","alert":"Sinkholed","trigger":"berhasil77.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}