{"report_id":"960d14df-1e65-486b-a2dc-97b9621b421a","version":6,"status":"done","tags":[],"date":"2025-10-16T18:25:14Z","url":{"schema":"http","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"title":"RAJAGACOR808 ⚡️Platform Taruhan Online Premium Yang Memaksimalkan Kemenangan"},"submit":{"url":{"schema":"http","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":0,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-20T18:25:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T18:24:52Z","timestamp":1760639092,"ip_dst":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":48962,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2025-10-16T18:24:52.726448+0000\",\"flow_id\":1475871969178208,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":48962,\"dest_ip\":\"104.20.37.138\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":5276,\"start\":\"2025-10-16T18:24:52.717408+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-12T22:12:25.402635Z","alert_count":0,"request_count":1,"received_data":8718,"sent_data":536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.k24klik.com","ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-04","domain_rank":117944,"first_seen":"2017-02-02T18:09:00Z","last_seen":"2025-10-14T05:39:59.658172Z","alert_count":0,"request_count":18,"received_data":228190,"sent_data":8031,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"rajagacor808.net","ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":7,"received_data":1468297,"sent_data":3123,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"lh3.googleusercontent.com","ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":303,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2025-10-12T22:44:24.522339Z","alert_count":0,"request_count":1,"received_data":47403,"sent_data":471,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-12T22:12:24.910527Z","alert_count":0,"request_count":1,"received_data":1809,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cutt.ly","ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-01-13","domain_rank":3479,"first_seen":"2018-01-23T23:29:00Z","last_seen":"2025-10-14T23:04:17.714798Z","alert_count":0,"request_count":1,"received_data":652,"sent_data":568,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.cloudflare.com","ip":{"addr":"104.17.72.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":17894,"first_seen":"2012-05-23T12:49:48Z","last_seen":"2025-10-14T05:39:56.164083Z","alert_count":0,"request_count":1,"received_data":39348,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-16T18:24:52Z","timestamp":1760639092,"ip_dst":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":48962,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)","source":"{\"timestamp\":\"2025-10-16T18:24:52.726448+0000\",\"flow_id\":1475871969178208,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":48962,\"dest_ip\":\"104.20.37.138\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2038569,\"rev\":1,\"signature\":\"ET INFO Observed URL Shortener Service Domain (cutt .ly in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_08_19\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_12_02\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_08_19\"]}},\"tls\":{\"sni\":\"cutt.ly\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":789,\"bytes_toclient\":5276,\"start\":\"2025-10-16T18:24:52.717408+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9ab5d895da44d5aed421bb2be883aed","sha1":"903a9e2130576ed8426fcd6e5a9d26ddfa2f3cba","sha256":"900801361b81508291409c87391dd92aae1041470909fb17f4b04f7a58940b85","sha512":"7dbecdace90d9e015a52d0a1ce0d96ad59fea8228bbc3770a00eafbfa94a1b304b12659738c4a0d910e78bd727d481004f50e3820d030d31f9af337fa0f2d489","ssdeep":"","tlshash":"3ee0d8dd76a39bc0c4307176bb9646f20a3354bcd22331b55a5d688a2375c240859a1b","size":357,"data":"","first_seen":"2025-07-23T14:25:30.589657Z","last_seen":"2026-03-30T21:50:02.920027Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/lazyload.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b113c7191eb2ab3c2768374d090ebfeb","sha1":"5f562722bc9c60ed4eb5a6d709b782e0e8e40435","sha256":"0ff9cb70f9c7f802c9965d3573acc8444099a6fcd53fb132fb08fe50a0912d50","sha512":"aa977fe95791059840c3cbc6dab65d21965e9909129de16c898372b0def0788a2a4e4f5438d77865c9497bf476655c026e692b30031aafd960340091e4cddca1","ssdeep":"96:d0Q1y+ZltH75Z58Hieuc4aQuC3K5Vi8uchE4nuO+xGmNAdaGYnNPP9H8aKNuJgFA:dtyOltHNZ5NeVCa5k8Vll+xGsAQRNP6K","tlshash":"2c9134097902b93cb0ae767fc21b130a253ac5679579ec7064344c94befca93e216dca","size":4573,"data":"","first_seen":"2025-05-23T04:46:12.586437Z","last_seen":"2026-03-30T21:50:02.916999Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"74424312f6d9df8e0e37646434c0267e","sha1":"300faeb546fa77e567ac207f766a71274bbb383a","sha256":"8123c19c4e083a18387b841d0baabe981778c99964950102d174a0ab1611855a","sha512":"e1d2727ae9df41c0095ed205302b1bbfe405dac7b706709f2fa472a89c64f5ce9d0d93809e08f7d9dbeb65fa466acb335462835e2d47c10da4572a710c407a0e","ssdeep":"","tlshash":"d5c08c08219b640466beb606f8ba432dfb1fd4ca126910deb94c09882d408790359e32","size":169,"data":"","first_seen":"2025-07-23T14:25:30.592451Z","last_seen":"2026-03-30T21:50:02.920584Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"65ace5fcaa520fa0ffc17466acca3208","sha1":"b7fd84f281d65922e3617516163642d03a9401a8","sha256":"95b99b2677c8b9663de881c61d27f7e4d363aec9ccdc32cf4ddd264a568b1b6c","sha512":"0e5701ac008337551286385ae24f18708a8a149d6b8e79382247f86a800dbeb4a71adef91d9f176c54729dc0d75a53795ad06c28448737632f047f6067dd8d42","ssdeep":"","tlshash":"11b01250465c49a5c9e211f152b8e9527a3290e4502d507d45f26a1e793205ef4f78bc","size":112,"data":"","first_seen":"2025-05-23T04:46:12.635885Z","last_seen":"2026-03-30T21:50:02.921506Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/jquery.raty.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86a847667db14615f2250f7e514c8c66","sha1":"7b308dedd78e158b1dc55f215909336b830c6749","sha256":"95e661e05ce7526f3a5527278e565ad71cda9dca5b80d72a0ce76bad97353a9f","sha512":"46cd8d256492da4123f776c2745cc8f4521ef4fc6c020d8b583e9052aa764c9c9fbcf75e1fdf89fc5cf7c0313fc2e9e2770d3bbc8dc84edc0633532259c0b906","ssdeep":"192:vdlRLpMwO35XNARENbYnPP3wGCGGtQ//iuX8:vdlXMt3HgENM3w7Q//iuX8","tlshash":"c1021fc8b38571069de33370249e674ee333ed8b9642402d783dc6d5ef6988995b2e78","size":8273,"data":"","first_seen":"2023-03-07T12:03:44Z","last_seen":"2026-03-30T22:00:56.37654Z","times_seen":336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3b587f4820c4520be2a77c57cc9c613","sha1":"3d0e16cdc2b9c4357f8b77350509dde303eb0106","sha256":"39faef293964a9f937cddf2c6c0e02237dbdebc6d0de997a4655f38d50330586","sha512":"a4058732017fb3b7f9fd19a954b569116d3ac5ff45ebc74f8a2e3e00d56f2f653842867e639847b091f27564ec27d75cf3261db4a60c666c71188189a5fa3b1e","ssdeep":"","tlshash":"54514fdab6b66e5f513a7070f457a87eebc9a50fc70049b6c41e1080d3898a6e37385a","size":2708,"data":"","first_seen":"2025-05-23T04:46:12.636695Z","last_seen":"2026-03-30T21:50:02.923888Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c1aad96e7de7dcf79b80b00ace8ba96","sha1":"2cf92154ccc67cb012596c101cb86dd01864e007","sha256":"b73620b184408b65b8c0d9936ebcb3bdbbd9c63c3a6b158b90e0890371ce85d6","sha512":"5a458a550cf27de5d6c796d253cc92e17ee6a2cdc4706358d95c893840b6203af80c349362b5d4e6b03f66a3a6b8576dd9727f09c8f823244f10300b5360c8a5","ssdeep":"96:QidJ49sX0PjAwDZYqP4sXR1SMn8Lw09qOTTrsvrrqP4ZpBOG5R2cZV:zJ46X0bBdYLsaM8LwmTTPqrrL8K","tlshash":"0291b7e9b8e50c11967c34b8982f5e0d3fae36355380d459e20cc860ab59cba7943d7f","size":4224,"data":"","first_seen":"2025-10-16T18:25:21.022746Z","last_seen":"2025-10-16T18:25:21.022746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"62d228820be6da7b9e7de81f89ec6d24","sha1":"cfd37d0e6b2b178cf52f98ced0102cd1de21d907","sha256":"06d7be5357e652f1422151fb46081460b55c18bea1313c0ba61162a48e8e46c2","sha512":"ba3544c096e300fcc6318461f35187d2a00c8cadb9385b59bf2a985916ec6269eb82663a0a9241a6a9fae75c5ce2266051a6f363d4af4878db5a109c07701ba8","ssdeep":"","tlshash":"77d0974d39852e6423eb2533003b82c806b92790c20c8010482f584a1eb08eb311371e","size":251,"data":"","first_seen":"2025-07-23T14:25:30.605278Z","last_seen":"2026-03-30T21:50:02.927608Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/sandbox%20eval%20code","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-05T00:47:01.867509Z","times_seen":772949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2e930538bb32f5f5e7f91050b476ccb","sha1":"03a91a257606bc0794b009283ee928445ed16d31","sha256":"a733011d8a6829b92b12a5849ffcb441ab6c2dc9ad07bd468d342116bd62b53e","sha512":"0da8362bff71ab6f78f7720f29cfc0dcb032714f90df2198583f3be0aa6bb88b383c65d41abaa88da7a7b4e1d4637bb06b3ed1ce389daa010e7d1a541982bac4","ssdeep":"","tlshash":"547195dafd601c6b06767063749f254c7fa56d0b8b818cb0d18c8498ff4846d72a2a6f","size":3657,"data":"","first_seen":"2025-10-16T18:25:21.03377Z","last_seen":"2025-10-16T18:25:21.03377Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"962fb42f4a08ddab01072a649b4a2488","sha1":"4076109c87b782bed036bbb230c84231d65424ef","sha256":"0323fe4bbb6ddf464d93650ac7db020ac2afb59755444d2a10907f7939bb47b1","sha512":"48eb97426c179e6e48f001f67a7f27793e0a48e8a33aa38e350cf569eadf7bba06450936aee2e286fb518fbbd332a421a75719cbe2544999e8aa240d7eb595c9","ssdeep":"","tlshash":"46e0c2953140a0aa5633ed32a3ec7360ddf10445759fd87981880c94c03013d03aea6b","size":309,"data":"","first_seen":"2025-07-23T14:25:30.608948Z","last_seen":"2026-03-30T21:50:02.935902Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-04-05T00:47:01.865195Z","times_seen":771399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.cloudflare.com/cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js","fqdn":"ajax.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.72.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2654742314fe002baeef8dcdfda44ef3","sha1":"831198fa96dc623365f9c2efa1d860fb04b3eb47","sha256":"6b2e044c462b8b00dfb05d77740f8b8f2a90ce00e2e5ccf621eac288608c0649","sha512":"8eff30bd090b584a5b011510b8c6d0fbbc9cf8f1fd1e4534e042c942f05c15f0f00cc829b8f6f863ac69891cf4c81658f7e387bf83c09f74c25ce6143c9b0bf5","ssdeep":"768:AfBdJw5hgRwB+AGy2dNVaNRq1s54eZVx16Ehw:AfBdEBHwgd54eZVx16Ehw","tlshash":"4303ba8ab272b43643b76475b12f110ab237646d290a417cf114e8d67c7894ea337fbe","size":38536,"data":"","first_seen":"2023-03-07T12:21:55Z","last_seen":"2026-04-01T07:51:33.198154Z","times_seen":834,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"f760d7d6301206f88179eceb54e3acda","sha1":"56b3a9cf4ffebc8329e766d9a2ebe0a5beabb875","sha256":"2ca45c5989554d88effafca82d1ce746284b6e5e0fd6935ad11968dbcc8a2d92","sha512":"ee996fb97b87432ec4e217e87cb77a429499a3b1f2fb20d57b3abb913c854f2cb57cab2dd8e7519850bf2b2678c2817373f15ec70bf35e6c1429456ce000a056","ssdeep":"","tlshash":"a2319674357c0f36cab79d92608f81897d758147f106d8c5884d6f8817c2cb5756f8d5","size":1762,"data":"","first_seen":"2025-10-16T18:25:21.042249Z","last_seen":"2025-10-16T18:25:21.042249Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"03041d8f329d29bc0772711df15bea3d","sha1":"91dff411830407d708036218580955fffb9890e0","sha256":"ddc7ef2ce41e8ae3e71735b965530836117ed5b4b39c9a8d20b4945dedcb63e9","sha512":"58ba028f269ffde4133d4c921f09216c3aa7a5960057bfcd5aa80f29b7b289b1505711e8a3073121f0e41a114ce609aa9e3f13f7df929c69eb9fdfa389783edd","ssdeep":"","tlshash":"2fd0125df594275da17a31f420379ee422590d0553d19701447f074d01a149f3c668ef","size":283,"data":"","first_seen":"2025-07-23T14:25:30.611862Z","last_seen":"2026-03-30T21:50:02.950328Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbb330cbef85488fc128f528a24dc86e","sha1":"270678c29363e952b511e4935c0a7576585e9c15","sha256":"ae8bb3bd9189529cd0f3f7ec5c90a9d7d943f5d568c0b0c7dbea7d0eb383f638","sha512":"d5502eef127ca9c9c37a76e28dbcd5f6bca01fb078598940306a73ef1c24cef973656f2cdfe42bf669fa945349bc2b12f3f858677b248015be459caa82804815","ssdeep":"","tlshash":"5ad0a7ab1cb98d306799054b61f7e3ad27a12aa07b11950482c9cc1b6b61fd304a1968","size":236,"data":"","first_seen":"2025-05-23T04:46:12.622958Z","last_seen":"2026-03-30T21:50:02.942438Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/7301462e/jquery.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8d64d0bc142b3f670cc0611b0aebcae","sha1":"abcd2ba13348f178b17141b445bc99f1917d47af","sha256":"47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4","sha512":"a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW","tlshash":"b393e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","size":94840,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-04T23:26:57.672367Z","times_seen":19350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d24355c65ad1e2d6277cf03646b93b4","sha1":"60dafa561aeba7581fdb84b0a25822e5160e3b49","sha256":"c8ab15904ff618beaab82ac077ddb747d6d2faecc864fab4bac288de6f157e3f","sha512":"b118294b9cdabd2df518414a85df0efe3cd0c6cb043a38f4f9e30ec3d6e5112c4c2a19f9b0225edad7ce03f92bdcc05a8d09b3b46b3dde0821bacd8f7ed2f27e","ssdeep":"","tlshash":"e3f0c07e7098723d5473f2e5533bd81caeb62725b19168b3806d47681b4056901895ce","size":532,"data":"","first_seen":"2025-07-23T14:25:30.613468Z","last_seen":"2026-03-30T21:50:02.951682Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.k24klik.com/css/pageOptimations/font-awesome.critical.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/pageOptimations/font-awesome.critical.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\nx-xss-protection: 1; mode=block\r\nexpires: Thu, 13 Nov 2025 13:15:30 GMT\r\ncache-control: public, max-age=604800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4pp7r8cXpP4bXgbr9MnZu1dwRJt9vj1ZszJAJn8u%2F%2F4G%2BBFCQBc%2BMvujIiaNqFyJxv1%2F794xm0LqOZho4C4%2FkdtJM%2FkeamrH4RRfg%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 191361\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff4-f7\"\r\ncontent-encoding: br\r\ncf-ray: 98f998740b2156b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"9c3d3ef008726ece5cda728260d82a66","sha1":"e1688d87a3c5269dd5b04e709d45c9ab67aed178","sha256":"97c0206ae94e810b18fd65c91c07a3a5cf8f04b142a60bf1ae380f13e90d61a4","sha512":"e237e66bbc6cd4820eb2496e83153eecfd79f57c338e5a471ca4800d19d575bd346d06f95765e1f4d3e7fa77cdd2427f866c5ab135232db5437d39325be53f22","ssdeep":"","tlshash":"9fd05e2d39a30280605a4c8c6bcb2b9a229451735504d8aabb829a0a5f9997963fa71d","first_seen":"2025-05-23T04:46:12.601112Z","last_seen":"2026-03-30T21:50:02.894641Z","times_seen":76,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":205,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/icon_share.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/icon_share.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qa1lAKSUKuyAJAWtjSg%2B3DTbWGuVxMdgf5IPnaz5IKYQpuC9ko5sL%2B4KLIkeNAMvrAhAnOA2vOWyWtaApJZg3rQHY5WRJ4WLbjhrvA%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 1925\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-2a2\"\r\ncontent-encoding: br\r\ncf-ray: 98f998740b2f56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5696b1d179fc91bf444bef8b2f3f6be","sha1":"e041ae2f92ff26b46e23f71f813fdd7a4848e40a","sha256":"9d88d1b6da895dbc349d011815c003f1e21bddc621dc6cd5350ad93e239fd4e5","sha512":"5603a64119102271adbfca6350216212253d2d23853cb860231984a20cbc57c414116ebb61b06f41d51e71458e92be1b8ebc08c9d6c59bb359ad55c07df7db9b","ssdeep":"","tlshash":"73017da626fa6698a73c435112e8343e3373335433088cb483911fc4da5ed1e5e81ceb","first_seen":"2025-05-23T04:46:12.594908Z","last_seen":"2026-03-30T21:50:02.908057Z","times_seen":77,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":208,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/icon/ic_live_chat_3_3.webp","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /icon/ic_live_chat_3_3.webp HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17018\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-427a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 1924\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfHPKzjKGHx%2B8SGWCVLnYQ5T5KGWcWqNegmw0Z2x75kjQzYVT0qKewu0WqaJnaDSqzDscM7Nq5t4hu3ksY%2FaFrMv6nCMil6dm6WdUw%3D%3D\"}]}\r\ncf-ray: 98f998740b3256b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f380115e93aa7ae9ba0fb19a9b4c9ca4","sha1":"a6468104f0f088803f528db8a63fcab036b2cabd","sha256":"cefb621c4fb284b7e2b829bc91f3a43c9b031e6fbef1a800793fa02bbeef3a76","sha512":"314f2538322fb8be7d8b6d3460d7d4f06af9ffa6dda249b5815d7b6e664d12848b79329f5cf11d0e156a59f4bbfdaf1ca0571d89c3b041acb3456bbf93dc0a7c","ssdeep":"384:bLFS7GcdTVIUEl74n+6moeTzzfKwym1RqoIN/1ax6Y22g8YIcI6Qr:/ARBVIUEl74goWfKdFYx727lIRr","tlshash":"ae72d1e1afe151ebc8413730236af677a63d1ffae2470b2265f0cb6168748023919596","first_seen":"2025-05-23T04:46:12.610572Z","last_seen":"2026-03-30T21:50:02.89562Z","times_seen":75,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/images/favicon.png","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rajagacor808.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:15:50 GMT","end":"Sat, 10 Jan 2026 08:15:49 GMT"},"fingerprint":{"sha1":"D0:4F:1A:3E:19:E1:17:B1:CA:50:28:E9:24:DE:AE:29:DB:2C:65:5C","sha256":"86:72:10:C5:59:D2:8C:04:FC:E5:41:34:08:84:C2:D8:A4:1F:70:80:A3:F6:C9:F8:5D:05:E4:C7:F4:0A:A6:A6"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: rajagacor808.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-04T23:35:00.461235Z","times_seen":143744,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/product-view.min.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/product-view.min.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-6673\"\r\nexpires: Wed, 12 Nov 2025 20:24:46 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 252005\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CxdJHabG3XAT5o5y22a9Gko%2FFA4vYlYzUOAb846M5sgx6XsET5IcvhOf0mAcwW4IzoO35KoLt92KNFMUb6Kwp9QD924aJBRLtSa0Zw%3D%3D\"}]}\r\ncf-ray: 98f998753cc856b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26227,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (26221), with no line terminators","md5":"515b35077bf4cc8e6d0531c6b27b8449","sha1":"fb45b03801b0ced7a5ec9d31fdf9f36eb4e6ebaf","sha256":"cf0365e3166ea7b698b1e91c3af0db8c59eb0b18a460c218c283a10f08a19051","sha512":"7870037aca238113980c8826b3874e36e39ced81fbc9873b6249c2632e4fcf9af0a06daac480fdf2ee5b90a59310271c1d8945f0d2c580dcb59a25527ce3b599","ssdeep":"384:4TxHuaq1dcXGeKDv8YCSCgQLP16/HVa23hL4bbPdna91Da91dxRDSR:1d7DtPHV8bha91Da91UR","tlshash":"cbc27333a840216db027c96bb691bbdd35248503f6135bbee5a736f4cf924cb1232b59","first_seen":"2025-05-23T04:46:12.600197Z","last_seen":"2026-03-30T21:50:02.911765Z","times_seen":77,"resource_available":false,"data":null}},"time_used":840,"timings":{"blocked":402,"dns":8,"connect":1,"send":0,"wait":13,"receive":0,"ssl":407},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/pageOptimations/bootstrap5.critical.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/pageOptimations/bootstrap5.critical.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-fe9\"\r\nexpires: Mon, 10 Nov 2025 05:21:48 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 478983\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1W7cIi6AXVWlVqituFhxZHaaYNXLb77YqPqQlMnbUJIQFHFrEPsEXFJcWyJaNzKbzTsCLRqmpLfiML1xck8hM14HyZiW1BcEjJE71A%3D%3D\"}]}\r\ncf-ray: 98f998742b5456b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4073,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"987bda5a665c762febdacef166c2346a","sha1":"08334b1540c49a021cb9c36ec175ce32abe7d9db","sha256":"fa1e64f45ae93a862fda973c11193ba11b556548852998669809cc9fc6fc944f","sha512":"d4388fddf30a480d911a0128fcf199b2b051ec16a282dd8c2f13557dc937bf1945a0fcad16c17bb723a2797c47b3db5f246a74e9be5e7b5106ea0e673c37d336","ssdeep":"","tlshash":"a9811e94e5733eec66a7889b37ca9e8727b459c7840af97479c372148f8802a35717cc","first_seen":"2025-05-23T04:46:12.585435Z","last_seen":"2026-03-30T21:50:02.9164Z","times_seen":77,"resource_available":false,"data":null}},"time_used":487,"timings":{"blocked":228,"dns":3,"connect":16,"send":0,"wait":12,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/k24-2022/k24.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/k24-2022/k24.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-4f25\"\r\nexpires: Wed, 12 Nov 2025 20:24:46 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 252005\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEKWaNSEIt%2Bz13eLocGyqi5%2FY9L8MBqxXoVLljUyoS3VqhcvIt60%2FkhMPXoOHFjQCKNDv2IdU%2BY2MBgoU6hvPNYajX7pm46KVMfKJw%3D%3D\"}]}\r\ncf-ray: 98f998742b5056b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20261,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8dd9db32d02ed2c4e27811f163426a3b","sha1":"d71b12724812dddebff26cf45b4ec5de7afe5b50","sha256":"013fec5583e79e6a65cef698a73b8584b324ba0eaa7e5d786f8dee0dd0233b8a","sha512":"8e869ce18402d0c020100579751b3ed2685ed2e7fe69f08d08a526ecbede3474d9dbdb51f25cad14b4cbc93a47eba0e54d71aad2edd6201e7e817060d029512a","ssdeep":"384:KHkaLef9vQ/A9m2ziwrX6oM1w8+eqFDlromvgFY:v1f9vQ/A9msiwrXE1w8+eqFDlromvgFY","tlshash":"6692b0ee66e00504f626d65c5c11fa56b36d8403860dfd7fe6f3212cbec96d5e0a22e8","first_seen":"2025-05-23T04:46:12.604571Z","last_seen":"2026-03-30T21:50:02.903129Z","times_seen":77,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":14,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/images/thumb-off.png","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /images/thumb-off.png HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 550\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Apr 2024 06:53:03 GMT\r\netag: \"660cfccf-226\"\r\nexpires: Sat, 15 Nov 2025 06:37:49 GMT\r\ncache-control: public, max-age=604800\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 42423\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQj8rHF43yZ0jKLswSNQAP8oXIu43SOGeXJGAXSFY%2FE%2BhePmM5pZ1kqlQjBPaeyzhd2m3N2AOfBm7OOjm3hlP%2FWUkSnRcYlS%2Fezi8Q%3D%3D\"}]}\r\ncf-ray: 98f9987a3a4056b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 20, 8-bit gray+alpha, non-interlaced","md5":"a67de3df5746d72238148c91acdf88b1","sha1":"f4484822d8df1e36ea327947094e1d37f51b786e","sha256":"89e81f3bf15878a24d69514b34e283fceb09da501dfb0b113f87491270881203","sha512":"e7a3be3011d0de2649a23ed46143bf806943c0745c86eba03a60eb980e01ce3794385ba806bf4089b0196f0392ca4e157adb7223a10bf56539f3102d503a9324","ssdeep":"","tlshash":"e2f020cef18cedac87ca370120fb038ec022b34b0102162e9142c1de640d7bce12ca96","first_seen":"2025-05-23T04:46:12.590456Z","last_seen":"2025-10-29T14:25:45.901554Z","times_seen":53,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/d/11zD0FoRMHbqlm-nyfUFVlNNnidpJiI5v","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:47 GMT","end":"Mon, 15 Dec 2025 08:41:46 GMT"},"fingerprint":{"sha1":"F8:5F:63:28:35:3F:3B:74:50:6E:B0:8A:1E:82:1E:81:0B:2C:5D:57","sha256":"E5:11:BE:F6:31:91:0A:88:46:0E:37:CF:15:59:95:26:EE:40:53:A0:69:3F:0A:3E:F6:B4:44:43:15:61:C4:6F"}}},"request":{"raw":"GET /d/11zD0FoRMHbqlm-nyfUFVlNNnidpJiI5v HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"sprite.png\"\r\nx-content-type-options: nosniff\r\ndate: Thu, 16 Oct 2025 18:24:53 GMT\r\nserver: fife\r\ncontent-length: 46883\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46883,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 494, 8-bit/color RGBA, non-interlaced","md5":"1a645aeeb5a228de82ed42583c1d4890","sha1":"d046b643a79c0a3a4d4e3db6bca29041a34fc95e","sha256":"5d4cb42389358523c07b9eaf4ced8fa9e7a6ee6789a1d6ea7c7f6abe10969737","sha512":"0c868b9f95854f5ba9b5cdd5ec25a009cc9d46e374e194efb19f7491ca751e36b48e52e1431255c60d215c602767dfbbd1d4709bdf105f30f07d3e19e273022a","ssdeep":"768:GcXruNYIALVz9XFaHANkdyM7i404bkDi2MC4vkPEilf2xY3WU+nmSfDQSTqJJqUd:G8VpVaAkAogovkcititmSfqJjuQ9rx","tlshash":"e42302734ffe9a2975694a3106f348c853d5ae6f8721afd3f40cc9e2623e3905632499","first_seen":"2025-05-23T04:46:12.593576Z","last_seen":"2026-03-30T21:50:02.918499Z","times_seen":77,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":54,"dns":17,"connect":7,"send":0,"wait":205,"receive":10,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/f5681ca0/swipper.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /assets/f5681ca0/swipper.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store\r\npragma: no-cache\r\nexpires: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whD1aITJbFBg%2BXPMzlEWtyIKqnY31O2nREhlCoVrV6h%2FB9YC3MrkfkQNJbjtbxrk9XQ%2FS%2FCoFRvIWrhFX1OG%2BAOYi%2Fp8uLcXQEJLNg%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=h9q24rggapmvf4r71slts7n4ct; Path=/; Max-Age=3600; Expires=Thu, 16 Oct 2025 19:24:52 GMT\nYII_CSRF_TOKEN=b7913e83271e455da1a359106abc29bffc784be5s%3A40%3A%22a219593b34773cdd7b5e2327cfe169efe02e8caf%22%3B; HttpOnly; Secure; Path=/\r\ncf-ray: 98f998740b2256b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":1000,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":800,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/fast_del.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/fast_del.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhZoOSM7nbQUH6NDEyeU7LNZqc%2BubpPk7pFnu2D5UBNd6f8s6huT9hQS21KjHD%2BOujJayc%2F9LWZBNC8ZTidc02KkXS3hCPrSaLoaJg%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 1926\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-58f\"\r\ncontent-encoding: br\r\ncf-ray: 98f99876ae6656b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"29f354b8ec27c82188dfab2b38c93dc8","sha1":"049a3b8186902a6e958ca7a642d7b34c17ea7881","sha256":"d4efe7c12e125b7ef8837a3868e94e31543fb385e45af5c39188414baa2b30cf","sha512":"723d62e068c7192a6775e992c1dd88b21d6980fd9eb511938728f56bf4bc3e96dc678a258aaa4751895512503200092b15d977b20a6c2a00837ad6d96ce70128","ssdeep":"","tlshash":"5f2189f867f11ac0cb8fa363e1e0321d599f28b97751cde0a21453d1ea6a1889718ca6","first_seen":"2025-06-27T22:59:24.537858Z","last_seen":"2026-03-30T21:50:02.917619Z","times_seen":61,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/cdn-cgi/mirage_speedtest/1760639092712","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rajagacor808.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:15:50 GMT","end":"Sat, 10 Jan 2026 08:15:49 GMT"},"fingerprint":{"sha1":"D0:4F:1A:3E:19:E1:17:B1:CA:50:28:E9:24:DE:AE:29:DB:2C:65:5C","sha256":"86:72:10:C5:59:D2:8C:04:FC:E5:41:34:08:84:C2:D8:A4:1F:70:80:A3:F6:C9:F8:5D:05:E4:C7:F4:0A:A6:A6"}}},"request":{"raw":"GET /cdn-cgi/mirage_speedtest/1760639092712 HTTP/1.1\r\nHost: rajagacor808.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-04T23:35:00.461235Z","times_seen":143744,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rajagacor808.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:15:50 GMT","end":"Sat, 10 Jan 2026 08:15:49 GMT"},"fingerprint":{"sha1":"D0:4F:1A:3E:19:E1:17:B1:CA:50:28:E9:24:DE:AE:29:DB:2C:65:5C","sha256":"86:72:10:C5:59:D2:8C:04:FC:E5:41:34:08:84:C2:D8:A4:1F:70:80:A3:F6:C9:F8:5D:05:E4:C7:F4:0A:A6:A6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: rajagacor808.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-length: 315\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-04T23:35:00.461235Z","times_seen":143744,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/assets/7301462e/jquery.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /assets/7301462e/jquery.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 04:02:37 GMT\r\netag: \"68d36d5d-17278\"\r\nexpires: Mon, 10 Nov 2025 03:10:39 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 486852\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8f1BLN1HSjX58HAQ9P4A7yY%2B9e9bgPAcnTO55EjqZTDrNbTv%2FAIZrCDqNoxB%2B8STqeHjxygsx7CSvTDPlEhqyp3UKVnjwkNmZyEqw%3D%3D\"}]}\r\ncf-ray: 98f998741b3956b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94840,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32769)","md5":"b8d64d0bc142b3f670cc0611b0aebcae","sha1":"abcd2ba13348f178b17141b445bc99f1917d47af","sha256":"47b68dce8cb6805ad5b3ea4d27af92a241f4e29a5c12a274c852e4346a0500b4","sha512":"a684abbe37e8047c55c394366b012cc9ae5d682d29d340bc48a37be1a549aeced72de6408bedfed776a14611e6f3374015b236fbf49422b2982ef18125ff47dc","ssdeep":"1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW","tlshash":"b393e7d9b2d67123c7b731b850af510bb17698aa784c8c50f068d8e4be74a48907bf7d","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-04T23:26:57.672367Z","times_seen":19350,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":227,"dns":4,"connect":1,"send":0,"wait":19,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Poppins HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 16 Oct 2025 18:24:52 GMT\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1123,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"48ff118e891bb4948701b2d75b360339","sha1":"f5c506042ed4472896a7084751b9be33e5eb1b69","sha256":"55ad63faf3956fc9fb6210fc7037e9aec3ad54586b2ea6fe6465d9c051d340a3","sha512":"5928eefa9e37943a01ffe206c48bce3811871c96f90a0dfe15c97e96a981dbed2a2e698561387fa4dbb12c4a64a3c096b2c4bad9f2b26b211b82f9936a2b4da8","ssdeep":"","tlshash":"ef219891087ae41467831cc5238e3c37ef0e9254b440a564abfe0c98ad67c654372b2d","first_seen":"2025-09-17T15:13:56.931672Z","last_seen":"2026-04-04T23:27:40.570767Z","times_seen":2414,"resource_available":false,"data":null}},"time_used":995,"timings":{"blocked":474,"dns":0,"connect":23,"send":0,"wait":33,"receive":0,"ssl":451},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/jquery.raty.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /js/jquery.raty.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\netag: \"68d35ff5-2051\"\r\nexpires: Sat, 15 Nov 2025 10:41:31 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 27800\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6MvUXFJdg%2FIZypm45kvFXAU0kiDOE9lIkclbB3D1zkSx8LR%2F12fczikpK0pxO1m5JsOaGkU8CLdXW39uKyv5n69UjGkwhTLIV5CzA%3D%3D\"}]}\r\ncf-ray: 98f998740b1c56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8273,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8081)","md5":"86a847667db14615f2250f7e514c8c66","sha1":"7b308dedd78e158b1dc55f215909336b830c6749","sha256":"95e661e05ce7526f3a5527278e565ad71cda9dca5b80d72a0ce76bad97353a9f","sha512":"46cd8d256492da4123f776c2745cc8f4521ef4fc6c020d8b583e9052aa764c9c9fbcf75e1fdf89fc5cf7c0313fc2e9e2770d3bbc8dc84edc0633532259c0b906","ssdeep":"192:vdlRLpMwO35XNARENbYnPP3wGCGGtQ//iuX8:vdlXMt3HgENM3w7Q//iuX8","tlshash":"c1021fc8b38571069de33370249e674ee333ed8b9642402d783dc6d5ef6988995b2e78","first_seen":"2023-03-07T12:03:44Z","last_seen":"2026-03-30T22:00:56.37654Z","times_seen":336,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":215,"dns":6,"connect":1,"send":0,"wait":15,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/images/logo.png","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rajagacor808.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:15:50 GMT","end":"Sat, 10 Jan 2026 08:15:49 GMT"},"fingerprint":{"sha1":"D0:4F:1A:3E:19:E1:17:B1:CA:50:28:E9:24:DE:AE:29:DB:2C:65:5C","sha256":"86:72:10:C5:59:D2:8C:04:FC:E5:41:34:08:84:C2:D8:A4:1F:70:80:A3:F6:C9:F8:5D:05:E4:C7:F4:0A:A6:A6"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: rajagacor808.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 12 Oct 2025 15:42:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28830\r\ncontent-type: image/png\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":28830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 68, 8-bit/color RGBA, non-interlaced","md5":"dbebd68dbebb60014fb61127a8ec4692","sha1":"68d433135d7642cd2845566ae15108b642b0fff3","sha256":"69699f5056d8aad2d115f0b5057879b057f662d891a04e57da95d8b162f9ad88","sha512":"083615aa955c9e0ac762b83c41598ca12ec8c07e55bd51630d3c2b032a3eb5f18cc3570728156b54933e8aa764c4f369c09cc698d91353cc307f9ffc3bc25121","ssdeep":"768:aZnZWNvCWWHEcynyT2DDZBCBxia/nep3Gq61:iZWNvRWHD2D+mGD","tlshash":"a5d2e145cc0aabb347d5f511d48a2f62119bbe932c717990101edcbe9ef61219d2fc1b","first_seen":"2025-10-16T18:25:20.974356Z","last_seen":"2025-10-16T18:25:20.974356Z","times_seen":1,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/js/lazyload.min.js","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /js/lazyload.min.js HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-11dd\"\r\nexpires: Sat, 15 Nov 2025 10:41:31 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 27799\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jf2ZJziSU1sUndcRhxDOgUtaxw%2Fws7sWxMbkXs72lLoBzYp3lLanti7cWA8tmam2rkjgpvEM6ar2brgVoBGaCDfCwrqqoFTwvnt6UA%3D%3D\"}]}\r\ncf-ray: 98f998740b2456b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4573,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (861)","md5":"b113c7191eb2ab3c2768374d090ebfeb","sha1":"5f562722bc9c60ed4eb5a6d709b782e0e8e40435","sha256":"0ff9cb70f9c7f802c9965d3573acc8444099a6fcd53fb132fb08fe50a0912d50","sha512":"aa977fe95791059840c3cbc6dab65d21965e9909129de16c898372b0def0788a2a4e4f5438d77865c9497bf476655c026e692b30031aafd960340091e4cddca1","ssdeep":"96:d0Q1y+ZltH75Z58Hieuc4aQuC3K5Vi8uchE4nuO+xGmNAdaGYnNPP9H8aKNuJgFA:dtyOltHNZ5NeVCa5k8Vll+xGsAQRNP6K","tlshash":"2c9134097902b93cb0ae767fc21b130a253ac5679579ec7064344c94befca93e216dca","first_seen":"2025-05-23T04:46:12.586437Z","last_seen":"2026-03-30T21:50:02.916999Z","times_seen":86,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/obat_asli.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/obat_asli.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxihTG1nSpf0augJ%2FhjjaseRg%2B%2BZTKXG2ZIWNQuQ1voEjd0RMEmrb5%2FzAfG5oQCS3VCXiu%2FHZ6nxZ1AWPvTArY6jIw0qQhNAoCY%2FLw%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 1926\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-372\"\r\ncontent-encoding: br\r\ncf-ray: 98f99876ae5a56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":882,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74a3d5474458e62fbad8fa9f253f989a","sha1":"17536d3a92161cf5d5cae4d05b180bb8fc6c0ca3","sha256":"95ad77395c0cc676ea7af0190ba2a919bb0a564f1ef61fe68ff76b777765c2b9","sha512":"89e3c602c7e2f1b0c5a7746c9527ecb39693a5463eb6e930f8423cbe4f074a91432900b48e7441750d1504a7fa99901490e00de106666001d249c4d5acc782ca","ssdeep":"","tlshash":"6a1199e3d2f121c0d3255317f0e4213d6e83ad2833218eea9020aac1e5aaa68166cd90","first_seen":"2025-06-27T22:59:24.592671Z","last_seen":"2026-03-30T21:50:02.905262Z","times_seen":61,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cutt.ly/rajagacor-808","fqdn":"cutt.ly","domain":"cutt.ly","tld":"ly"},"ip":{"addr":"104.20.37.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cutt.ly","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 03 Apr 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"9C:5E:59:1A:B3:2F:4F:F9:1B:FE:CF:69:A7:57:68:32:07:28:46:A9","sha256":"79:F6:EE:13:C2:8C:BE:2C:C7:92:95:72:07:1E:BC:39:4E:B8:97:27:B4:88:4F:5C:D8:FF:17:1F:75:7D:CD:23"}}},"request":{"raw":"POST /rajagacor-808 HTTP/1.1\r\nHost: cutt.ly\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 50\r\nOrigin: https://rajagacor808.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlocation: /csrf.php\r\nreferrer-policy: same-origin\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=cescf59nrdcjpmr06tl59itk7b; Secure; Path=/\r\ncf-ray: 98f998799a0db505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T00:47:03.388486Z","times_seen":13352920,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":18,"dns":4,"connect":1,"send":0,"wait":133,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/images/ajax-loader.gif","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /images/ajax-loader.gif HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1737\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Apr 2024 06:50:54 GMT\r\netag: \"660cfc4e-6c9\"\r\nexpires: Mon, 10 Nov 2025 09:37:26 GMT\r\ncache-control: public, max-age=604800\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 463645\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeN0lucEZ6Ux%2FIVWboRnWRZK6Nf8M5dqPPODCN2AW85S7GBdkMlXFW3yGXuOINaUDcKX8cF2MtMNhoe68zFwAYIOpp9282ZF%2BIxNYw%3D%3D\"}]}\r\ncf-ray: 98f9987a3a4156b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1737,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16","md5":"dd6b7b0bf5c3af22499abc0a9ee1e1b2","sha1":"e8c0018145d616fac4deb460d9c1d9c9dd4d3302","sha256":"0eddaab3b8cb0b15d81d62e5ae5960329c3e576ea78dc321b20734ab20271847","sha512":"8a4c36e3fdb61782f6fc9bf78140c96aa729b4e1120bda34995a90c9d827395e1460f744df17779091d206629664467b997e19a7a6e54e07135ab89e454df601","ssdeep":"","tlshash":"34316805dbf50636fbee21f850ae979c0d2f8af626d5072aac5331588c3446c467d8de","first_seen":"2023-04-06T12:06:14Z","last_seen":"2026-04-04T19:34:56.822643Z","times_seen":2172,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/images/banner.png","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rajagacor808.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:15:50 GMT","end":"Sat, 10 Jan 2026 08:15:49 GMT"},"fingerprint":{"sha1":"D0:4F:1A:3E:19:E1:17:B1:CA:50:28:E9:24:DE:AE:29:DB:2C:65:5C","sha256":"86:72:10:C5:59:D2:8C:04:FC:E5:41:34:08:84:C2:D8:A4:1F:70:80:A3:F6:C9:F8:5D:05:E4:C7:F4:0A:A6:A6"}}},"request":{"raw":"GET /images/banner.png HTTP/1.1\r\nHost: rajagacor808.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 12 Oct 2025 15:40:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 510652\r\ncontent-type: image/png\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":510652,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"8051a9acdf728a0eeae5968fea31c484","sha1":"516affb617b6ad3366bc8d2e67c683ded72dcc25","sha256":"4549d38657c70fba68160b6b59f83429ae4a9be6683c1c93a71228a3b4e2c9c0","sha512":"f092c8c67d503b2f84c50bb2970b67665715b8e1073661c239427411a6dfac14763e689fdca6ea3aa5b15916b39fcb2bd4392f3d1b5e9383a28a88b755633bb6","ssdeep":"12288:7HKKbi7HlN4NoEC1W+CdehqlDBWMALoEZccZr2nMz:7HPbKlNeoEyWdCu+kMpz","tlshash":"9eb423be1d6eb88fe786c167bbd409739c9d0118a20850701d7a046fba53e773b12add","first_seen":"2025-10-16T18:25:20.987101Z","last_seen":"2025-10-16T18:25:20.987101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/stock.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/stock.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0MH0owEQWiTZM8H1hiDjkPUvMoTntZ7urncGDRFwKQ1w3q%2F%2FRITLGmraDGNEngDRSYG4Z%2Bvjaj%2FCBLwyhJgeMmfVJ6ieVkMmVithQ%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 1925\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-38c\"\r\ncontent-encoding: br\r\ncf-ray: 98f99876ae6956b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":908,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0063636e8e811fc24829f57f272aa86f","sha1":"5367d0b3eede0ed9893425db3a0826aa36f445a4","sha256":"8ef3c1989041007cfb2a857c3b6bc5b08510081074eb47e77880b847dfa10576","sha512":"5de6a94b1cf9166e456a3f1f0b86681189c56bc165ee9898808957cb7b24b9c7fa60e7af0886cbf277c3f251b8d3f803bc218eeb0b6e0137d8e9adc9194b713f","ssdeep":"","tlshash":"7d11d0aae27995d08103876690e475ed9adf68b423505ff0d6405be7a4e45ed17c4cc0","first_seen":"2025-06-27T22:59:24.594068Z","last_seen":"2026-03-30T21:50:02.913792Z","times_seen":60,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/images/paficon.png","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rajagacor808.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:15:50 GMT","end":"Sat, 10 Jan 2026 08:15:49 GMT"},"fingerprint":{"sha1":"D0:4F:1A:3E:19:E1:17:B1:CA:50:28:E9:24:DE:AE:29:DB:2C:65:5C","sha256":"86:72:10:C5:59:D2:8C:04:FC:E5:41:34:08:84:C2:D8:A4:1F:70:80:A3:F6:C9:F8:5D:05:E4:C7:F4:0A:A6:A6"}}},"request":{"raw":"GET /images/paficon.png HTTP/1.1\r\nHost: rajagacor808.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 30 Sep 2025 16:05:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 832425\r\ncontent-type: image/png\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":832425,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 736 x 736, 8-bit/color RGBA, non-interlaced","md5":"209c479312e069eb3fb21fd6f1f558c2","sha1":"f59ef8eac5deb8c28d6fbc3df938a325f4035b9c","sha256":"8ee7c8e1e19ac5fc847fecb674dff362267e22c59474a51a6f3d0fd59c3106f3","sha512":"c15d1f4195e293a11e871fd8ad344586638218757b7f3ab359882dfd2df25e92bd07f7f991dc8a9ae15f728a94398cf71ddcbbac3da203fa07c46c073480d1d4","ssdeep":"24576:fP2HI4G6ULlAqNieEV26iBunxUJBjjCLc/A:iZCieEjiBuW7j//A","tlshash":"520533744bd6aa4114f263bc66faf8b667a2bb811dcc93946773c3ab42d0630475d01f","first_seen":"2025-10-15T06:27:32.27703Z","last_seen":"2025-12-26T04:34:11.72418Z","times_seen":12,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rajagacor808.net/","fqdn":"rajagacor808.net","domain":"rajagacor808.net","tld":"net"},"ip":{"addr":"192.99.106.129","port":443,"asn":16276,"as":"OVH SAS","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T18:24:50.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rajagacor808.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 08:15:50 GMT","end":"Sat, 10 Jan 2026 08:15:49 GMT"},"fingerprint":{"sha1":"D0:4F:1A:3E:19:E1:17:B1:CA:50:28:E9:24:DE:AE:29:DB:2C:65:5C","sha256":"86:72:10:C5:59:D2:8C:04:FC:E5:41:34:08:84:C2:D8:A4:1F:70:80:A3:F6:C9:F8:5D:05:E4:C7:F4:0A:A6:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rajagacor808.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Sun, 12 Oct 2025 15:46:26 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncontent-length: 20676\r\ncontent-type: text/html\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":94085,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (885), with CRLF line terminators","md5":"c7b7cfa87b1e71dcfab8c41ada88dccd","sha1":"f0123102d7f12d7b9a06c2a004e50cc3d21fe10e","sha256":"c02744cbbc2964a4b655d01ad60c74e5944509cf021e1f4ef42be44675bd239c","sha512":"faaac306b50050de1c426ab5d08ca39631c5dfc636b5fcb61a5a9d50565ab2def695421a046581803ed76becf273f450993ae4f17d164825336de42ee5a2c861","ssdeep":"1536:9FvRcTsiggjnXme51rYWCLJ/QBQCNVMc4p54W/5exp9iz5igEA:99RcTsigAnXf1rYH1f","tlshash":"00931996b6111c2b0333abf1a1b22f1ce7558113cf0388a5b2e94a5bf7d5db862675cc","first_seen":"2025-10-16T18:25:20.996411Z","last_seen":"2025-10-16T18:25:20.996411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":328,"dns":125,"connect":98,"send":0,"wait":195,"receive":11,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/cart-shopping.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/cart-shopping.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BHP4F72v%2Fk9aOSgaqPED5T79Qx6WoS0ENlw1tYDJcK0kI3qDXge%2F%2BJhICtC4jCkR0Z0zoYeq5LkXIU91wO1p7YsktdyX8l62e2%2FBA%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 1926\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-3c2\"\r\ncontent-encoding: br\r\ncf-ray: 98f998740b2556b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":962,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b4f7e378d8bbd1ccc63aca6a923f98f","sha1":"4ecd450e96115010259bcb6497944ccd78856175","sha256":"2d5f59dc4879582a4f799b87d9fe8b0b985ea3f800c556177634c33a43d2face","sha512":"49b78abf45c75b465339e86b460c381980ab6d910a88c392a53eba8bf2f751df8f1262f7682a28abd26584efe9056ccfcd5f2e72e25924b919f4ea18929ebfd0","ssdeep":"","tlshash":"2111bda0b3e9e2541a23e3d0d13de866f71b14ff7841de8486a0eb99f47f05954c9850","first_seen":"2025-05-23T04:46:12.608659Z","last_seen":"2026-03-30T21:50:02.905969Z","times_seen":75,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":212,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.cloudflare.com/cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js","fqdn":"ajax.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.72.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ajax.cloudflare.com","organization":""},"issuer":{"commonName":"SSL.com SSL Intermediate CA ECC R2","organization":"SSL Corp"},"validity":{"start":"Tue, 22 Jul 2025 21:17:06 GMT","end":"Wed, 22 Jul 2026 21:17:06 GMT"},"fingerprint":{"sha1":"0A:E4:BD:3C:8F:24:18:32:9A:06:80:47:CF:F3:8F:FD:9D:E2:24:19","sha256":"55:8D:D6:1D:0F:3C:F2:2D:23:FD:B5:16:FF:20:66:E1:51:97:A3:4C:82:4F:9F:9D:B4:EA:D1:08:86:16:F1:CB"}}},"request":{"raw":"GET /cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js HTTP/1.1\r\nHost: ajax.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Oct 2025 17:54:32 GMT\r\netag: W/\"68e94858-9688\"\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wwsEKFpaOtQLNfbD3KRJZs8%2B%2FRRko432qPRUyIkuIEcn3ZyYhh7RADctJlg2iU4AcK%2Bx5y1Ivb9LNNKCKikgMKYOA2BADhTE0DWtnGhAyMQjOjyOCMg1k%2F80D8OGuE%2F8Z2fVj3I%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15780000; includeSubDomains\r\nserver: cloudflare\r\ncf-ray: 98f998742b6e7131-OSL\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nexpires: Sat, 18 Oct 2025 18:24:51 GMT\r\ncache-control: max-age=172800, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38536,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (38535)","md5":"2654742314fe002baeef8dcdfda44ef3","sha1":"831198fa96dc623365f9c2efa1d860fb04b3eb47","sha256":"6b2e044c462b8b00dfb05d77740f8b8f2a90ce00e2e5ccf621eac288608c0649","sha512":"8eff30bd090b584a5b011510b8c6d0fbbc9cf8f1fd1e4534e042c942f05c15f0f00cc829b8f6f863ac69891cf4c81658f7e387bf83c09f74c25ce6143c9b0bf5","ssdeep":"768:AfBdJw5hgRwB+AGy2dNVaNRq1s54eZVx16Ehw:AfBdEBHwgd54eZVx16Ehw","tlshash":"4303ba8ab272b43643b76475b12f110ab237646d290a417cf114e8d67c7894ea337fbe","first_seen":"2023-03-07T12:21:55Z","last_seen":"2026-04-01T07:51:33.198154Z","times_seen":834,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":9,"connect":7,"send":0,"wait":7,"receive":0,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/redesign/icon/circle-plus.svg","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /redesign/icon/circle-plus.svg HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Sep 2025 03:05:25 GMT\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9p%2B8xq%2F0PuGzyS1PUU6XHY6zBCR5xSTT%2F1bRsLeLIfomXerHtSlR2l7oNZr95BqZm2fYfPCmx6LJcOCF3yl%2B8xvmEMJIYheCF2MHTQ%3D%3D\"}]}\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\nage: 1925\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\netag: W/\"68d35ff5-295\"\r\ncontent-encoding: br\r\ncf-ray: 98f99876ae6d56b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":661,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d03b3de54ca0a1dd3450cbb4de4b43f9","sha1":"773ab693abba5dc017cbe2aa9e634df3cc1babaa","sha256":"7f826bd6e2f61dca0054184395e1a9ad68f810b4f7fb9cdd60e150e69981a3a8","sha512":"a03430e57ada6b6917ed72f1b200278a101d55cd43bb1a24baef0a3c210310f312c3fd2a8303ae4c0c49a45366944c97cda5b7a117ce46019cbc3db3dd10ea7a","ssdeep":"","tlshash":"bb01f7f129794344d67b0313f8a72554597eb5ae87c0c8e6b54428dccc92c819b7a994","first_seen":"2025-05-23T04:46:12.606413Z","last_seen":"2026-03-30T21:50:02.908797Z","times_seen":74,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.k24klik.com/css/new_face.min.css","fqdn":"www.k24klik.com","domain":"k24klik.com","tld":"com"},"ip":{"addr":"104.26.2.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:51.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.k24klik.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Oct 2025 07:38:48 GMT","end":"Wed, 07 Jan 2026 08:38:47 GMT"},"fingerprint":{"sha1":"93:8D:4E:06:93:C7:A6:08:40:2A:14:E2:72:A7:D1:92:BC:07:08:8B","sha256":"5C:86:52:DF:0E:AA:3C:AF:C3:F7:56:13:BC:7A:5B:7B:83:AE:10:8E:7A:34:B6:78:F0:69:D9:B5:6C:B1:E9:FF"}}},"request":{"raw":"GET /css/new_face.min.css HTTP/1.1\r\nHost: www.k24klik.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rajagacor808.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 16 Oct 2025 18:24:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 24 Sep 2025 03:05:24 GMT\r\netag: \"68d35ff4-52fd\"\r\nexpires: Wed, 12 Nov 2025 10:43:32 GMT\r\ncache-control: public, max-age=604800\r\ncontent-security-policy: upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://konsultasidokter.k24.co.id;\r\ncontent-encoding: gzip\r\nage: 286879\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npermissions-policy: accelerometer=(), gyroscope=(), magnetometer=(), microphone=()\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.cloudflareinsights.com;\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VF7J8oM2avg2lDvDO8kDn2czPVTIShuS4bOF43uxMm%2BKDZ%2F984wGJnEIOFFqKph4sMnVkwP6kX0BJ3xu0MULsraKrdn0SbN2fell%2FQ%3D%3D\"}]}\r\ncf-ray: 98f998741b4156b7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21245,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (21239), with no line terminators","md5":"74ee19aa3fbebfcb266c0987418c593d","sha1":"ca1aae23e21e67bd7aff112ce07d5cdab99e2f42","sha256":"049e28bf5bb09e5e8a333aa7188e0b86c60247ab5a8f7d149790e411493ee260","sha512":"3b9edd7856e0480b2ee5da5b9f6d7ecaf59759d933429f047a6c9d7180e69841069b57791858c8f7780a3e41457a2f6adab949715e128da636c626bd7dfa4838","ssdeep":"384:16JkVlGDv+K00AVxDOlBXUxLlHnvrg7i2szOIQm:kKWizVxS7UBOTm","tlshash":"5092b6b3e924607ab47b956ab480b6dd32298517f7130bb6fd52b174c68bcd74332a08","first_seen":"2025-05-23T04:46:12.613703Z","last_seen":"2026-03-30T21:50:02.893811Z","times_seen":77,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":224,"dns":4,"connect":1,"send":0,"wait":12,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rajagacor808.net/","date":"2025-10-16T18:24:52.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rajagacor808.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 15 Oct 2025 00:01:44 GMT\r\nexpires: Thu, 15 Oct 2026 00:01:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 152588\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-04T23:47:15.813494Z","times_seen":295819,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":136,"dns":0,"connect":29,"send":0,"wait":30,"receive":2,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}