{"report_id":"caaed14a-ae6a-4424-9f73-4745c2b4870d","version":6,"status":"done","tags":[],"date":"2026-05-10T07:25:14Z","url":{"schema":"http","addr":"webctkkpn-3gla.vercel.app/","fqdn":"webctkkpn-3gla.vercel.app","domain":"webctkkpn-3gla.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"webctkkpn-3gla.vercel.app/","fqdn":"webctkkpn-3gla.vercel.app","domain":"webctkkpn-3gla.vercel.app","tld":"vercel.app"},"title":"","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T12:51:48.895884Z","times_seen":17871536,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"webctkkpn-3gla.vercel.app/","fqdn":"webctkkpn-3gla.vercel.app","domain":"webctkkpn-3gla.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-14T07:25:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"ibanking-bankjateng.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"webctkkpn-3gla.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"webctkkpn-3gla.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"webctkkpn-3gla.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"webctkkpn-3gla.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-01T19:58:07.759566Z","last_seen":"2026-04-23T23:24:15.767166Z","alert_count":6,"request_count":2,"received_data":10678,"sent_data":927,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}]},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2026-05-04T22:52:43.444145Z","alert_count":0,"request_count":5,"received_data":1886613,"sent_data":3527,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"216.58.201.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-05-03T23:28:14.435871Z","alert_count":0,"request_count":1,"received_data":96977,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ibanking-bankjateng.whf.bz","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-12-20","domain_rank":0,"first_seen":"2025-04-08T10:51:16.825392Z","last_seen":"2026-03-21T23:59:19.930206Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":940,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"webctkkpn-3gla.vercel.app/","fqdn":"webctkkpn-3gla.vercel.app","domain":"webctkkpn-3gla.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa8185dbbc9e3885b5abdc48dee60c74","sha1":"c36134d67fd0022b3d3d583dd66d626575fc893a","sha256":"27ce47fd9744b205315a92266e627c89bcca5e7d1ee9abe30148110a5c8aa37a","sha512":"175331e3c4b788f5a3fa7ae6908079400176817e2d6e6bbceba7f62ae7c0a003f3ef5a0129a4874d811a6f52e2d865b1a8e80958dcd280d8d58a73a8f0603f1f","ssdeep":"","tlshash":"dec04c1c30b6501616332559097f850d2e3d201f328edf417d5d28944fd6225b7a5155","size":191,"data":"","first_seen":"2025-04-08T10:51:21.776485Z","last_seen":"2026-05-10T07:25:16.947447Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webctkkpn-3gla.vercel.app/","fqdn":"webctkkpn-3gla.vercel.app","domain":"webctkkpn-3gla.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa8185dbbc9e3885b5abdc48dee60c74","sha1":"c36134d67fd0022b3d3d583dd66d626575fc893a","sha256":"27ce47fd9744b205315a92266e627c89bcca5e7d1ee9abe30148110a5c8aa37a","sha512":"175331e3c4b788f5a3fa7ae6908079400176817e2d6e6bbceba7f62ae7c0a003f3ef5a0129a4874d811a6f52e2d865b1a8e80958dcd280d8d58a73a8f0603f1f","ssdeep":"","tlshash":"dec04c1c30b6501616332559097f850d2e3d201f328edf417d5d28944fd6225b7a5155","size":191,"data":"","first_seen":"2025-04-08T10:51:21.776485Z","last_seen":"2026-05-10T07:25:16.947447Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95992,"data":"","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-08-13T13:02:32.173574Z","times_seen":27409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjshDdRe8a1xJLRSEmHfJxT_RkPMfmpgZgfx4Q3zaW76DSTLozbeqQkdIlddB0HQta5DO001H9OZbltY7ak2yYsmplrHaSdELIMg2KX286sRXpvWlsBtuGj7bVwFx9O4u1spHOX8u9V0ikav-Q7WJTS90_6kT95GKZSbQD2iIkWaw7pNOlzQPgOdP_9yG4/s500/small_FA_L_Ogo_BR_Imo_FSTVL_2_963a44fea2.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:50.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:38 GMT","end":"Mon, 13 Jul 2026 08:36:37 GMT"},"fingerprint":{"sha1":"7F:0C:8C:52:E3:38:07:53:6F:B3:BB:DF:DF:9B:26:1C:A9:41:1A:EB","sha256":"1E:51:DC:8F:54:E9:7D:F4:4F:74:13:75:62:DB:3A:4A:4A:5D:7C:D7:B1:40:88:E3:D0:33:28:F8:B2:AC:64:28"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjshDdRe8a1xJLRSEmHfJxT_RkPMfmpgZgfx4Q3zaW76DSTLozbeqQkdIlddB0HQta5DO001H9OZbltY7ak2yYsmplrHaSdELIMg2KX286sRXpvWlsBtuGj7bVwFx9O4u1spHOX8u9V0ikav-Q7WJTS90_6kT95GKZSbQD2iIkWaw7pNOlzQPgOdP_9yG4/s500/small_FA_L_Ogo_BR_Imo_FSTVL_2_963a44fea2.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vda7\"\r\nexpires: Mon, 11 May 2026 07:24:51 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"small_FA_L_Ogo_BR_Imo_FSTVL_2_963a44fea2.png\"\r\nx-content-type-options: nosniff\r\ndate: Sun, 10 May 2026 07:24:51 GMT\r\nserver: fife\r\ncontent-length: 131064\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 433, 8-bit/color RGBA, non-interlaced","md5":"bb492a8231891a8b9c87cae94e30cd63","sha1":"83814fcac1091c18c05ebca692a544d19c42d91b","sha256":"6d1dfd1c50957f17f85f10adacaf39d05e55c29e550dbf08ae731bfc78c9cc0d","sha512":"935cdad8a242dac9df4a3422ef0bfe993a525b9deb7a53c0422b2301a65abab8e165ed1023e4cb5ae8ca3945676d0135c2a711a9529603f37ec4d80294923d6e","ssdeep":"3072:uiHxW5VPNyA4eodYmIa5m7entX/CjzS0mCHycUVh:uiHxcPNy3efmIaI7entX/I8Pceh","tlshash":"39d312f77bd1e830248f34d9a72252ec97fe864f7c6026e859b49bec64b10c4f591162","first_seen":"2025-04-08T10:51:21.772668Z","last_seen":"2026-05-10T07:25:16.926311Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1022,"timings":{"blocked":-1,"dns":1,"connect":28,"send":0,"wait":884,"receive":55,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.201.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:49.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33507\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 09 May 2026 21:00:00 GMT\r\nexpires: Sun, 09 May 2027 21:00:00 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 37489\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":95992,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"f03e5a3bf534f4a738bc350631fd05bd","sha1":"37b1db88b57438f1072a8ebc7559c909c9d3a682","sha256":"aec3d419d50f05781a96f223e18289aeb52598b5db39be82a7b71dc67d6a7947","sha512":"8eeeaefb86cf5f9d09426814f7b60e1805e644cac3f5ab382c4d393dd0b7ab272c1909a31a57e6d38d5acf207555f097a64a6dd62f60a97093e97bb184126d2a","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3","tlshash":"1793d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:11Z","last_seen":"2026-08-13T13:02:32.173574Z","times_seen":27409,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":79,"dns":1,"connect":9,"send":0,"wait":8,"receive":8,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ibanking-bankjateng.whf.bz/BRI/ast/img/load_spin.png","fqdn":"ibanking-bankjateng.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:49.835Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /BRI/ast/img/load_spin.png HTTP/1.1\r\nHost: ibanking-bankjateng.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T12:51:48.895884Z","times_seen":17871536,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"ibanking-bankjateng.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwzhsQd1K7iF1d2s06-jdlmwaZV6_bR1eZiRCjx7LnbIHag5c5iAEOVfgP9UE-lQqv0M2-C7gQ3u6y6C-0E1iLZASRfrNtk7YOeBa_5obrbvmB4yi2MOjPPseRovva7VTIMmt3dXKcdlSDiqBt5-D_T5W1RiloJ5AOct6wnyv4SZI6Cj6Ahfc2j_x3NZA/s1080/1703668668502.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:50.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:38 GMT","end":"Mon, 13 Jul 2026 08:36:37 GMT"},"fingerprint":{"sha1":"7F:0C:8C:52:E3:38:07:53:6F:B3:BB:DF:DF:9B:26:1C:A9:41:1A:EB","sha256":"1E:51:DC:8F:54:E9:7D:F4:4F:74:13:75:62:DB:3A:4A:4A:5D:7C:D7:B1:40:88:E3:D0:33:28:F8:B2:AC:64:28"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgwzhsQd1K7iF1d2s06-jdlmwaZV6_bR1eZiRCjx7LnbIHag5c5iAEOVfgP9UE-lQqv0M2-C7gQ3u6y6C-0E1iLZASRfrNtk7YOeBa_5obrbvmB4yi2MOjPPseRovva7VTIMmt3dXKcdlSDiqBt5-D_T5W1RiloJ5AOct6wnyv4SZI6Cj6Ahfc2j_x3NZA/s1080/1703668668502.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vda2\"\r\nexpires: Mon, 11 May 2026 07:24:50 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"1703668668502.png\"\r\nx-content-type-options: nosniff\r\ndate: Sun, 10 May 2026 07:24:50 GMT\r\nserver: fife\r\ncontent-length: 47806\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 257, 8-bit/color RGBA, non-interlaced","md5":"30907c77255924f7354fba98d05fbba4","sha1":"a56388e68b10c00516808fd20e80f0fcfdc67469","sha256":"c49694b7d5935e0a2c77fb577b45ec99850ecd35b8acf80a40be09e497ab3e61","sha512":"06c210e547d4d7f118bb8f66855a0119efecca6e50c380bc891fae65991d13453f3d39c93a0c754d9d30ad8d889f57869b4b6ea52f40ea2e8013d3598e2544d3","ssdeep":"768:IjGo/NXXHNw8a9nq3lLpnGbfiYs3RG9uLfYc3rOktiOJ3bAdPup2czGAlfiPl+j7:ILe8a9q3Rpnkf8ROYYczBJ3bAdo2e2QN","tlshash":"ca23f1b55ea1cfafc9f4965213e14040ab8d835d1769c3b5da14b69cce9327c16c22fc","first_seen":"2024-10-04T10:36:09.314398Z","last_seen":"2026-05-10T07:25:16.93204Z","times_seen":97,"resource_available":false,"data":null}},"time_used":894,"timings":{"blocked":116,"dns":52,"connect":17,"send":0,"wait":589,"receive":19,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"webctkkpn-3gla.vercel.app/","fqdn":"webctkkpn-3gla.vercel.app","domain":"webctkkpn-3gla.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-10T07:24:49.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: webctkkpn-3gla.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1289871\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 10 May 2026 07:24:49 GMT\r\netag: W/\"1370e844b5454277845bed2b289f1476\"\r\nlast-modified: Sat, 25 Apr 2026 09:06:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::spzxb-1778397889503-a11369babd65\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]}],"data":{"size":9722,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (625)","md5":"1370e844b5454277845bed2b289f1476","sha1":"fef5e3747ba0ccba067f1fd1d56e6752214ff0f8","sha256":"e5883989d3bb5315b9a64e74b473a247ac9363f7de8208518b1a6e77cec98df6","sha512":"27e01cfd08ad4d4fb21e7f606cd2427a07be0d87258649cb1b2f84c11d7abd858aafefff373b1830c95ee71059589c1c91109af08e4f7cd4173c15142bd7e9fa","ssdeep":"192:dwChj5jeh2F202F2sGAOtprkIeVhq/YiQ89QE:dwChj5jeh2F202F2vp4I4hq/YiH9QE","tlshash":"3912c7e3a15604060225c5207b517d88973a8843c76e8c67719d37cfafe9be4da733e6","first_seen":"2025-10-01T19:58:13.20547Z","last_seen":"2026-05-10T07:25:16.933131Z","times_seen":18,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"webctkkpn-3gla.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"webctkkpn-3gla.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"webctkkpn-3gla.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webctkkpn-3gla.vercel.app/index.js","fqdn":"webctkkpn-3gla.vercel.app","domain":"webctkkpn-3gla.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:49.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /index.js HTTP/1.1\r\nHost: webctkkpn-3gla.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sun, 10 May 2026 07:24:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::fzg5z-1778397889829-2163bad53dd6\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"884ab3c0a8aa14cf43707b2dcb90fcf8","sha1":"c8ef02ecdf83ac10e7865617cf31ad3b4a25e604","sha256":"13d2c8f584999f654847c960d239c67a0cab88648f25b634c097317eb1f8b442","sha512":"6ef9b700fd05d965f4eb51258a14d3e89254fb3dca52feadc4019f34fc8eef2f7afa718d6b563ef0ab8af7870785023147e72ef47e59eac8cb4cbf03210c9c5f","ssdeep":"","tlshash":"8ba0222f0cc20e8e3bc008a0a20303ba08000023afe0f22230ceb30bb00a0eee380080","first_seen":"2026-05-10T07:25:16.937083Z","last_seen":"2026-05-10T07:25:16.937083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-10","alert":"Phishing Block","trigger":"webctkkpn-3gla.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"webctkkpn-3gla.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"webctkkpn-3gla.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ibanking-bankjateng.whf.bz/BRI/ast/img/load_bg.png","fqdn":"ibanking-bankjateng.whf.bz","domain":"whf.bz","tld":"bz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:49.833Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /BRI/ast/img/load_bg.png HTTP/1.1\r\nHost: ibanking-bankjateng.whf.bz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T12:51:48.895884Z","times_seen":17871536,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-10","alert":"Sinkholed","trigger":"ibanking-bankjateng.whf.bz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFhZOWnVSsVI3SbtXvHFez97TkJyQlGdbWgczCfKVP7_1UNkulM7wTmMa0ULR5Oz6F7D1rmH7Zn0s05WDxR9SX3CH4Lwd9dgBn6bie-ThltmZt0uj_piuZJTGLrTx0uw4RluDkPGYvStuXL8kmbRwRjpSMni8Y9XcNlpoiR-rD1qA9ZfRym3D6NmMXwQc/s1117/XRecorder_Edited_05122024_210143-ezgif.com-video-to-gif-converter.gif","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:50.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:38 GMT","end":"Mon, 13 Jul 2026 08:36:37 GMT"},"fingerprint":{"sha1":"7F:0C:8C:52:E3:38:07:53:6F:B3:BB:DF:DF:9B:26:1C:A9:41:1A:EB","sha256":"1E:51:DC:8F:54:E9:7D:F4:4F:74:13:75:62:DB:3A:4A:4A:5D:7C:D7:B1:40:88:E3:D0:33:28:F8:B2:AC:64:28"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjFhZOWnVSsVI3SbtXvHFez97TkJyQlGdbWgczCfKVP7_1UNkulM7wTmMa0ULR5Oz6F7D1rmH7Zn0s05WDxR9SX3CH4Lwd9dgBn6bie-ThltmZt0uj_piuZJTGLrTx0uw4RluDkPGYvStuXL8kmbRwRjpSMni8Y9XcNlpoiR-rD1qA9ZfRym3D6NmMXwQc/s1117/XRecorder_Edited_05122024_210143-ezgif.com-video-to-gif-converter.gif HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/gif\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vd71\"\r\nexpires: Mon, 11 May 2026 07:24:50 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"XRecorder_Edited_05122024_210143-ezgif.com-video-to-gif-converter.gif\"\r\nx-content-type-options: nosniff\r\ndate: Sun, 10 May 2026 07:24:50 GMT\r\nserver: fife\r\ncontent-length: 1302138\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1302138,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 600 x 1117","md5":"ff303a1d283ba846d9bca951e66ec90b","sha1":"d4aa82984169ae857c153be67b073bb0ad7011b2","sha256":"38ab0b448d46d526c58b41712da95db69cf3d8627213f05b639569e407d9f2d7","sha512":"f50f222c2315d92c957e2827209bd82b39981787bad67eeefa371c1cacba66413f269366834de0c57845931154ecbcab26edf57b9b9f41474ad6a0812f6058c3","ssdeep":"24576:MRYuB6A40gUEmYJAgb+n/LXcOYrQ/ALkBNY9qXIwF8qkfdSBqNf:MR/B6UgUEVJPU/L7eCQoFI1aqNf","tlshash":"6d25332fb1d6529373ef18c846b86e67a61f159cec4222b40e58c5a09cff1b1807b5f6","first_seen":"2025-07-29T22:40:21.499494Z","last_seen":"2026-05-10T07:25:16.941542Z","times_seen":63,"resource_available":false,"data":null}},"time_used":1138,"timings":{"blocked":116,"dns":0,"connect":29,"send":0,"wait":621,"receive":284,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiPMG51wBFdQ7Z4vAwkWv6iU9ngLcr2leCxU2gu3Ecr_crCP7YYHH9rVErcOlbG1_WNWHC6G27SrosA7O6WohIQhVvJ4-TiPusQ3ZXsol9v82xkTFVQvJBvkFUxfdSrJiYBMr_rpK06licvnRf4KBt5EW9-f28wZIMir_4pdrhsYvfuHHQZ8-NbYaCUA1w/s805/AddText_09-15-12.32.19.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:50.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:38 GMT","end":"Mon, 13 Jul 2026 08:36:37 GMT"},"fingerprint":{"sha1":"7F:0C:8C:52:E3:38:07:53:6F:B3:BB:DF:DF:9B:26:1C:A9:41:1A:EB","sha256":"1E:51:DC:8F:54:E9:7D:F4:4F:74:13:75:62:DB:3A:4A:4A:5D:7C:D7:B1:40:88:E3:D0:33:28:F8:B2:AC:64:28"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiPMG51wBFdQ7Z4vAwkWv6iU9ngLcr2leCxU2gu3Ecr_crCP7YYHH9rVErcOlbG1_WNWHC6G27SrosA7O6WohIQhVvJ4-TiPusQ3ZXsol9v82xkTFVQvJBvkFUxfdSrJiYBMr_rpK06licvnRf4KBt5EW9-f28wZIMir_4pdrhsYvfuHHQZ8-NbYaCUA1w/s805/AddText_09-15-12.32.19.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v8a1\"\r\nexpires: Mon, 11 May 2026 07:24:50 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"AddText_09-15-12.32.19.png\"\r\nx-content-type-options: nosniff\r\ndate: Sun, 10 May 2026 07:24:50 GMT\r\nserver: fife\r\ncontent-length: 272061\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 805 x 311, 8-bit/color RGBA, non-interlaced","md5":"18eb28332d20ec28a44d6a3ef9078c34","sha1":"62a7e87ad63c1bd5d6d0b5a18ee82027b8f2d685","sha256":"75cc8f6dd34faf44f0b74a5b4bcd5a523066b8398244dd8dfc3095c7b3dd2792","sha512":"1bf8bd681cfc0676129306e58cafae0324490f4e2560cbd82db0ac05428acc464d9f2520d16903e0cc5b899a75db129f5b7eed78ebf8d9329e60c061eee86ed9","ssdeep":"6144:cT/WzB9pxoGrSKeagohAn0Ko5YznTcP7FGZV3elgJHmq:i/oXxPG/QAnuigP5adxhmq","tlshash":"a04423f1e21eec2e5bdcb835a206d5b53da284e4553422ba7cb6c406b23c81457836fb","first_seen":"2025-04-08T10:51:21.775493Z","last_seen":"2026-05-10T07:25:16.943484Z","times_seen":77,"resource_available":false,"data":null}},"time_used":1072,"timings":{"blocked":80,"dns":19,"connect":14,"send":0,"wait":651,"receive":238,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjshDdRe8a1xJLRSEmHfJxT_RkPMfmpgZgfx4Q3zaW76DSTLozbeqQkdIlddB0HQta5DO001H9OZbltY7ak2yYsmplrHaSdELIMg2KX286sRXpvWlsBtuGj7bVwFx9O4u1spHOX8u9V0ikav-Q7WJTS90_6kT95GKZSbQD2iIkWaw7pNOlzQPgOdP_9yG4/s500/small_FA_L_Ogo_BR_Imo_FSTVL_2_963a44fea2.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://webctkkpn-3gla.vercel.app/","date":"2026-05-10T07:24:50.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:38 GMT","end":"Mon, 13 Jul 2026 08:36:37 GMT"},"fingerprint":{"sha1":"7F:0C:8C:52:E3:38:07:53:6F:B3:BB:DF:DF:9B:26:1C:A9:41:1A:EB","sha256":"1E:51:DC:8F:54:E9:7D:F4:4F:74:13:75:62:DB:3A:4A:4A:5D:7C:D7:B1:40:88:E3:D0:33:28:F8:B2:AC:64:28"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjshDdRe8a1xJLRSEmHfJxT_RkPMfmpgZgfx4Q3zaW76DSTLozbeqQkdIlddB0HQta5DO001H9OZbltY7ak2yYsmplrHaSdELIMg2KX286sRXpvWlsBtuGj7bVwFx9O4u1spHOX8u9V0ikav-Q7WJTS90_6kT95GKZSbQD2iIkWaw7pNOlzQPgOdP_9yG4/s500/small_FA_L_Ogo_BR_Imo_FSTVL_2_963a44fea2.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://webctkkpn-3gla.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vda7\"\r\nexpires: Mon, 11 May 2026 07:24:51 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"small_FA_L_Ogo_BR_Imo_FSTVL_2_963a44fea2.png\"\r\nx-content-type-options: nosniff\r\ndate: Sun, 10 May 2026 07:24:51 GMT\r\nserver: fife\r\ncontent-length: 131064\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 433, 8-bit/color RGBA, non-interlaced","md5":"bb492a8231891a8b9c87cae94e30cd63","sha1":"83814fcac1091c18c05ebca692a544d19c42d91b","sha256":"6d1dfd1c50957f17f85f10adacaf39d05e55c29e550dbf08ae731bfc78c9cc0d","sha512":"935cdad8a242dac9df4a3422ef0bfe993a525b9deb7a53c0422b2301a65abab8e165ed1023e4cb5ae8ca3945676d0135c2a711a9529603f37ec4d80294923d6e","ssdeep":"3072:uiHxW5VPNyA4eodYmIa5m7entX/CjzS0mCHycUVh:uiHxcPNy3efmIaI7entX/I8Pceh","tlshash":"39d312f77bd1e830248f34d9a72252ec97fe864f7c6026e859b49bec64b10c4f591162","first_seen":"2025-04-08T10:51:21.772668Z","last_seen":"2026-05-10T07:25:16.926311Z","times_seen":78,"resource_available":false,"data":null}},"time_used":1019,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":835,"receive":59,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}