{"report_id":"cb3ed0cd-ae6a-439b-a11e-35ab123734f2","version":6,"status":"done","tags":[],"date":"2025-10-08T05:13:55Z","url":{"schema":"http","addr":"91dewaid.com/","fqdn":"91dewaid.com","domain":"91dewaid.com","tld":"com"},"ip":{"addr":"172.67.204.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"title":"91DEWA - The Biggest and Safety Online Game 2025"},"submit":{"url":{"schema":"http","addr":"91dewaid.com/","fqdn":"91dewaid.com","domain":"91dewaid.com","tld":"com"},"ip":{"addr":"172.67.204.187","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-12T05:13:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":5,"received_data":121284,"sent_data":2677,"comment":"","tags":null,"fingerprints":null},{"fqdn":"secure.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":8212,"first_seen":"2012-08-20T19:27:12Z","last_seen":"2025-10-05T22:41:04.333873Z","alert_count":0,"request_count":1,"received_data":2002,"sent_data":713,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":44666,"first_seen":"2017-07-31T05:50:56Z","last_seen":"2025-10-05T22:41:04.478057Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.livechatinc.com","ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"domain_registered":"2005-10-31","domain_rank":29526,"first_seen":"2013-12-20T14:27:35Z","last_seen":"2025-10-05T22:41:04.221308Z","alert_count":0,"request_count":5,"received_data":20338,"sent_data":2977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"91dewaid.com","ip":{"addr":"104.21.42.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-09","domain_rank":0,"first_seen":"2025-10-08T05:13:57.844872Z","last_seen":"2025-10-08T05:13:57.844872Z","alert_count":0,"request_count":1,"received_data":163385,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.livechatinc.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2005-10-31","domain_rank":36142,"first_seen":"2012-06-22T08:37:34Z","last_seen":"2025-10-05T22:41:04.28581Z","alert_count":0,"request_count":16,"received_data":961062,"sent_data":7686,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"img.viva88athenae.com","ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-25","domain_rank":168367,"first_seen":"2023-12-25T05:56:51Z","last_seen":"2025-10-06T04:54:01.8216Z","alert_count":0,"request_count":74,"received_data":1391466,"sent_data":32900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-05T22:15:40.094389Z","alert_count":0,"request_count":4,"received_data":533280,"sent_data":2039,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"seomania.sirv.com","ip":{"addr":"88.198.9.15","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2001-11-18","domain_rank":0,"first_seen":"2025-10-08T05:13:57.851731Z","last_seen":"2025-10-08T05:13:57.851731Z","alert_count":0,"request_count":1,"received_data":2663012,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.livechat-files.com","ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-02-13","domain_rank":159656,"first_seen":"2020-04-22T09:40:29Z","last_seen":"2025-10-06T03:58:36.371813Z","alert_count":0,"request_count":1,"received_data":9115,"sent_data":498,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dewahoki91.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-03","domain_rank":0,"first_seen":"2025-10-08T05:13:57.847048Z","last_seen":"2025-10-08T05:13:57.847048Z","alert_count":62,"request_count":21,"received_data":2275485,"sent_data":10409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":8984,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c5dd8e07ab2aa7b83e02dc4bf193440","sha1":"fd20251c226f88ee9aea54d933f529087580b608","sha256":"a1f978d318bcde06be72d489bf706927cf87fb04fa8bdc10570ff42e086fc0b8","sha512":"e458418e143c493a9bb6580540fb48a864d907f7831070e217929c907c7b59c324b5fc4e160c70c5d73b6911bcc94ae71962db510e450c1f31f85fb976f24fcc","ssdeep":"","tlshash":"ae112b2417b10220011af6469bc95750623c415fa444dc1e7d6d569a5fa2f1a12fceb9","size":944,"data":"","first_seen":"2025-02-14T06:27:47.014565Z","last_seen":"2026-04-04T05:56:02.799283Z","times_seen":1593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fefe140d89f7d85290bd2f6fc38af9d","sha1":"038536d1da1df377a1a1624eaad8a27a3d87bfd7","sha256":"63e6107b8c49660df689f9ba73d597e980b6c191111bf7ee5cd25179943cea72","sha512":"525f76570fd2c91b3d24636731904a01207ac0c5693e3c2bd3353017ac26ba087a1fae5b6b9f138c5b825baeef0507d505b192c54f51d24673bff07293253637","ssdeep":"192:+LXEAB7K0tHKgzD7Kykc+g0fzmJZ6lOtlsPmJWheOxYxPNPjC:kbtbTVa6JE8rI6/w","tlshash":"91129f9a75b3707b4623a0bd4edf8406a32588076408cd44ff2ca706bfa5b64cfb4d59","size":9204,"data":"","first_seen":"2025-08-22T05:54:36.217189Z","last_seen":"2025-12-08T02:47:34.604903Z","times_seen":671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ad726e5c5bf12ef2ffb502c5942e6e4","sha1":"59f734ece00b6e703d5d541cccb3c219b486e040","sha256":"cfada8f7f80becc0282f4f6e7f02bc44ce6c15b09d8767728167d1920eabae5f","sha512":"e657546eb264879f1d9d4dc9f78436187115ff79fbd3aaec99586a158b5371cf44ffa2f60a6e6b8dd93fc3afa50d8713c930aeb1843898a9389de9b92553dad1","ssdeep":"1536:eooHdrfIyjci3aeyujD3j2oXBc+gM7gzhDagKZiBHBE:eXHd8cByujzyo0hDagKIh6","tlshash":"54a339d5b381b03142f786a791bfa316b7392418340e8414f13cdda93a5a987d1b7f6e","size":103788,"data":"","first_seen":"2025-10-03T09:12:25.729849Z","last_seen":"2025-10-08T12:52:19.272277Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","size":193,"data":"","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-03-18T08:07:40.315578Z","times_seen":23367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.CKlS54Ol.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f8a48a27250bfa311cbb26e9a24ad901","sha1":"5a84ea7a9b85e3b0f8e7987a8fc7181ffa0eb47b","sha256":"1dc43b0cba7aaaffb1c6e8f1176c829be282651fb3035a5f2e0ec466b4325dac","sha512":"4f949266aa75fb63b9a40b75022d90eb4ac115051d2121c4a94fb93f5bf31d52ee071300a0d485a4e726d5f64e56b9713da6cf2a98e8743037cbd70871cd3405","ssdeep":"","tlshash":"411100d93cc3d8b0d73bd8cc52a899e5d43c0e88a8fd4180e4e86e853b155718236ea8","size":883,"data":"","first_seen":"2025-08-21T10:29:01.941959Z","last_seen":"2025-11-05T08:19:33.416839Z","times_seen":5362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","size":40,"data":"","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-04-04T06:42:31.141064Z","times_seen":24259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.6yPviw2R.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e0dbc76dda200f48c31958d0860e9ac6","sha1":"5bce182c9826e3b0638bd89a3bb9072a10dd8d40","sha256":"e36e8284f4225b28ca1d4b89601950a87e4cc00d5e9bf02823ddcf016af598b1","sha512":"7bdb7a6c671e1ac9280638ee86344b7395abfbc1fec56c16dc1c6ee9d1872d000fa7159b886aad68be11e4d8ec042a712227a585ba42007cf2b198cc4b76a155","ssdeep":"1536:SIch6zA51RJ/B/7v3ROokRBmRmPPKH5hSVDgcq3aQDOa:SIcAzY1RBfOjRBmRiKZkDgcqKQDOa","tlshash":"ac6319d2f696f4399fd798e515248003be267658b82d8170f36cce11318e6c6607bfab","size":71557,"data":"","first_seen":"2025-10-03T09:12:25.682476Z","last_seen":"2025-10-08T12:50:10.622598Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4434b133d07794f1ccc6a43e1974db04","sha1":"f70242b35b72cf83277447f6fb561b415da4cbab","sha256":"60153c5b27067a5fde46b6b605f3bf23a8b16e2a835c8bd12f7f4bbbbaaeaa43","sha512":"9b3fce4cd97fde5577760425c5b85975927121bdabe973b4ff20c856064b653c1231dcf7f722107ac01cffce6d732be821342e6a1c9d3c97be1b5ce06caae689","ssdeep":"","tlshash":"6ec09b5b637535314567657505eb41643420d18b15055c1d3d6cc7724f33a550f96a8c","size":181,"data":"","first_seen":"2023-06-26T19:27:32Z","last_seen":"2026-04-04T05:56:02.806118Z","times_seen":2549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f68b7fbc9a61b20534cf86b90b18eace","sha1":"f6ddf9bf47848cd81db7ea3eae18c1a8c379d9b7","sha256":"bb2cc68f2fe26f800e9a9c6bfe21285c8b6c95fe3c261f6351e079d5a3df80f9","sha512":"86136ab6dcf108b024891a3627262cde47d2802c27981e8fa66597beaf7c2437439481fa6fcc87273d2bcef687924cb556bdacc19374b44b6e55f782cab9559a","ssdeep":"","tlshash":"e8d023559070195e01b5d0e0cd47af3a3002440b075766a7d77126d5c74ef2c92573c1","size":221,"data":"","first_seen":"2025-10-08T05:14:04.177812Z","last_seen":"2025-10-08T13:19:58.980901Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=15058581\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fdewahoki91.com%2F\u0026group_id=2\u0026channel_type=code\u0026jsonp=__pf5fok392g","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"01d9f8e8530e44dcd2a2871ec740ac51","sha1":"b4dda426daa8a7ae7a28f468ba98f2d31ec97de7","sha256":"3ae3aaece5250bef55a465037347e0a98f987c1d56487bc2bbcd040a11d0522d","sha512":"69085c00d3aa74c23fdc6ce0e21e4b8383f3f702c606204adfd5d4d5bc0cb9e565c56a3974e67330f24e54fad5322fbcb270fd4e92af30dd0e656236d0982e84","ssdeep":"","tlshash":"eee0f1327209c0b3e6c1d3b444403e01aa301722960d69fcb4ff0358111b3cd6330917","size":408,"data":"","first_seen":"2025-10-08T05:14:04.172449Z","last_seen":"2025-10-08T05:14:04.172449Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.Gv78iMd6.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8ec94005c25c7e0874b7b048ea97dc00","sha1":"2649e6120dff6489d15cf68a590e6e73e153aae3","sha256":"d3b76fb03a7607b5da00fc0252be26fef8c76a0b68feb2ff19b439eeeab3f705","sha512":"9a70f8f3a88f62567acc8ca189563118b54f15202cb1c9a5cb055f4d6d3fd1dc2e8b6f8f76768f42b57563546f10a12b51e460183e2c224226cfd25c624ddd76","ssdeep":"","tlshash":"82d0a78cb743b0b12666b138843f801fa171e984a44504e0c13addc03e7c2a97567d5d","size":240,"data":"","first_seen":"2024-06-24T12:34:00Z","last_seen":"2025-11-04T08:36:53.532069Z","times_seen":13838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.BLnOvpDN.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d47bf0bf87be8ca2d9213b364903529e","sha1":"59cf032df1186a868935885ca206406913b23b31","sha256":"ba29c1aac1d0647c2449a5c6c8e7fe866177b11c428eba8c9dc2a56b42b65aa2","sha512":"af830764d7133b6c3e1b5f520f01242da9a4f12c733abbd09a5f69629bdb6400426d30ef9afd2c2cbb296d42ec83a633da66c63aec6bc4ddf4baf0fb180b4d11","ssdeep":"1536:KNJ7de1n8vVhnm6qm6YwGnUwNs81YNu3E1aJ:EDe8Nh2NYwuNsLNu9J","tlshash":"40333bdef281713557e314f3a06fa006b636692c385cc0b0fa28dd9925de44b626bf6d","size":52584,"data":"","first_seen":"2025-10-03T09:12:25.815123Z","last_seen":"2025-10-08T12:50:10.629897Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.8dnJ5-bs.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"5c01d1bb0cf5052622688f781875622b","sha1":"aa2c4ee16eb6ecbdbd3af9968f5899bdc15150fe","sha256":"3a1c3ea94172fe471e1363b145daac726ae8b47eb37ceafbf2bfd229be31d3f6","sha512":"185548a287f064389be8a4dbb273b18f62463dc852db852e45b41fdb8cd50aeabb79c57551acdceefbb8da3f9db6c0c7a4f1cad95a3573d81c19824c89fc0746","ssdeep":"3072:yFElwwQWShYCBD/hVfWq5XYpmIFN8FHgb:lnCBDrf5pIFH","tlshash":"93d3f8e83995f9626bf312a700af2417733c291b280c4960a211fdddb5b845eb17bf9d","size":137885,"data":"","first_seen":"2025-08-04T13:28:18.131383Z","last_seen":"2025-11-03T08:11:45.787886Z","times_seen":5629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fef5451a38dad2039e14f1adf0b8933","sha1":"22ea2265de9542c9bd9b4c20f222b75a5380ab6a","sha256":"0e726731a0e4d794b623a398cfc2b5427c1b46da40231cdc1a598e930eb633b8","sha512":"c2e08edc0914c6a74e897b5435ce0cbe6aaaca697ff73c48ee0da6152606f4ad904b3c1a15f077ede7298037bf6e6d2189212d12a8a50b17d792ff51e6895d88","ssdeep":"","tlshash":"a0c08ca6b2a0180d076981e5852abb3676038c8b7fa64e81d9a34fe07129758120a289","size":168,"data":"","first_seen":"2025-10-08T05:14:04.179036Z","last_seen":"2025-11-15T12:35:03.929409Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","size":300,"data":"","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-04-04T06:42:31.11092Z","times_seen":23387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.Vg6-FLpP.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"78a9996e7875fe1ebea2a6275a173c59","sha1":"c0815f536629111dfc36d59c6ae0c55b413b572b","sha256":"75a31e846d9186e703fc3bd9bf92be98c9f97eac7a77acf6004228c388b34266","sha512":"6a32e9059f01a9b9f4cf52fb83c0f6317d2d5d1d34988369705ec1811afee5bb79179d5ead8fef9216a2a7f75d197b8ce1a3ff92095ec4758753462d7ea6316a","ssdeep":"","tlshash":"7ce07dde74c2f0f24286fccc43105051e33cdf8027b985b0c02c5f9097510418836d88","size":307,"data":"","first_seen":"2025-10-03T09:12:25.81705Z","last_seen":"2025-10-08T12:50:10.509373Z","times_seen":492,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/13.Du4z9uvj.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c77c70c8570694d5e20553711a6d1b28","sha1":"72e8a99d408cca32977b7c54d2210d53188e94e7","sha256":"bc125921b5e4dde1c19d4fbc0a6ef3ea616eee9577822c96b29789b7f69ba5fd","sha512":"7e955d05ed7c1d8637b00590fbd00e61b5458aa185a87ad983780333bfc93322f40359d0fcd27b73df82e70e765fbe15c10d6707eab659b84cec6af5c57078e9","ssdeep":"","tlshash":"37d0a7c6328136fb0aa120d80c3bd203a5146f556cece2418104e7a104e7667870fd26","size":231,"data":"","first_seen":"2024-08-27T15:26:58Z","last_seen":"2025-11-04T08:36:53.731316Z","times_seen":12739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.C3OLXqrt.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4973a9778c622cd3e677d214e49363f2","sha1":"5a76dc6264f4bf5cf530064ae39eaf092331e145","sha256":"d21c9e3dc427766c85df5374fabf9cecf1d9dbc43961d177b91c78729bd66b13","sha512":"2f33773145786275e063ac486c06efa793600e65c836291100b18488d53435240d7ae526d9764cce6ea5c62c33de5853c964c92b857a135e29a7702729a0b108","ssdeep":"6144:sF3FClm7Up2gDAFGA05GBT9EjJUpc8fsNkC8WMQhiHr3ecsK1r4oQfKUUs+knXO8:QMUp6NkC8WMQhiHFsK1rg+AObtBEjoSP","tlshash":"3a745be07341b538d7d7c1aa90bb6609f33d3d59b82a8150f2adecad33954889327f64","size":367588,"data":"","first_seen":"2025-10-03T09:12:25.740106Z","last_seen":"2025-10-08T12:50:10.507303Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"47deeac93cab5dc1fbcd12bbdc35a158","sha1":"18414fb4eac5a2838243545f39a75dc42d96078b","sha256":"0489de8d922c1413e5ac5eaae94861be33aa7b5d12a331279e3029da33b9d23d","sha512":"d306660ecbecdb2cdc30e2e44ebebf403a5a953945a8743fdee18cc5ed291620519369c65a029581b3d9c713676c128473617e01339b2e85821b96a3adf6e94e","ssdeep":"","tlshash":"d7d0979a30a02485030280b8d03bfa33f30b8cd3aecab905c88008e12929260514778f","size":232,"data":"","first_seen":"2025-10-08T05:14:04.180715Z","last_seen":"2025-11-15T12:35:03.931012Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.C3kUFtOw.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"afd4b572313743dcad7a8953e781e8fc","sha1":"f64ce89121e92037a27e2f8a62eb95d748728913","sha256":"2d913fe3ad6574822f49ee6762156e7ca3e00ae67cd2302d643ff8bfe7039518","sha512":"b02f2b6f7379df3de017fbea25b3dea96e773b0cea6db8823194ecaa85f217ef20c3f171363d4feac09c1e1dd0e9cbc1b06b9901ef35c2144343f4b023a76b9a","ssdeep":"96:/rIUv27/40cQ74WlszFeMTVziFISHCnWdJNxQryWFBXBFBXZQFMgksV:/r5O7/4I/oeOValNxQeCBXzBXZQBV","tlshash":"13a1b7fef765f8749bfd8ce9e1142543ec3b1158b8bd51b0fb5c4e69219a1848032ba2","size":4883,"data":"","first_seen":"2025-10-03T09:12:25.724752Z","last_seen":"2025-10-08T12:50:10.6195Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0419d6e1fc153e2cdd7dba76b4505a70","sha1":"6dcc64b5bfd8e2b9322e25d737bee2b124ff6e13","sha256":"965263870e98f6b3dea9d69989344d06b8349517da7125a3f14da939d2a310e2","sha512":"74574be2f8e07eef2352a49b0cb7ab70f0e6337c808d10d2a4d4eda67f42ac20a0177862e379d39e2589459e67248c42f4f0aa4023f83fcea7ae773f11517f3d","ssdeep":"","tlshash":"d701f189bc46707696963268723bfa0751631225684464335dfec36fef32d87410368c","size":774,"data":"","first_seen":"2025-10-08T05:14:04.182343Z","last_seen":"2026-01-27T19:43:55.080165Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/js/old/new-webduo35.js?v=1759900168","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0349a6c5e308d1fdf60f69d25e17b6a8","sha1":"49e6ce6dc405b1015ec5042eb5097872d82664dd","sha256":"c54dbe73f86fc6342668aaf75d2acc9f4383a3c4780dcb9d4f2dcbb15f3de4df","sha512":"20d4717c15d35318a88bad25203dac015b04c9b2cd319f21c5d80e22106c0a72a1193c8733bbe441927d9b7b1baef058e52bca805bcb7ce773520383bd6e26b1","ssdeep":"768:92LaB4ntNnaBMdXh18Q8Y8o8sAMgmMuYUQ6cX:AntNxdXh18Q8Y8o8sAMgmMuYUQ6cX","tlshash":"91e2424aff4c4acf57b626ac483b91c55f5d4d28e10b0e02fe6c54c86b4b615b272a2f","size":32780,"data":"","first_seen":"2025-09-27T11:18:39.559692Z","last_seen":"2026-02-01T12:36:05.254311Z","times_seen":452,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80578,"data":"","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-04T05:56:02.713596Z","times_seen":4211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f665512ab9491386f4795efec43ca2c9","sha1":"b0bcf3f7731aca049a31858873d620a6d9dcd14f","sha256":"41dbfeb240aa7e473dc216493d475dd5f0521c064ea9217aff78f6eed0b01173","sha512":"c13d871c5305ff14bb598b4ae829ffbaac72ee46d39fc4fce30d0fec5778c83e7e96ba7073ca0d12cf2ee9a74c30edb99bb5139f60c542322c596713c3df2d67","ssdeep":"","tlshash":"c9c08c196864692e036152f8ca22fb266546ad0f1aa2a983f2ac1ad91310b29470b581","size":176,"data":"","first_seen":"2025-10-08T05:14:04.18395Z","last_seen":"2025-10-08T13:19:58.992324Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"20575641f622ccf3821d05cc5cf63d6f","sha1":"64698f213d5ae4357dc2921eaa143d28e1b527fa","sha256":"35deed5763bbd1e582e2034fa3b7aa584aad6f113c07d5a439293465e1d89e91","sha512":"03ecf66185174dd2a49c6dcfff42d5d3902d598f617f293cce928ae59fcaf67a3261469d8307133583badfb61c1e3c4688369049fcd11981f0b6181bb9307e8d","ssdeep":"96:YM9wDy8CGyd/Chycw02IEVL+Mui58SNi0SFHCFaiM/7ixK:z9w28Od6wtvIEMViKSNilCMio7iE","tlshash":"2db18f2d01a70a71496365fd6e8b285470b69003700ddeda3e2d1b017f96a299be37ff","size":5439,"data":"","first_seen":"2025-08-19T06:06:52.988416Z","last_seen":"2026-03-22T23:46:56.34538Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.5/customer/action/get_configuration?organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026version=1098.0.3.131.398.1375.4.5.3.1.3.7.5\u0026x-region=us-south1\u0026group_id=2\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dc47deaa4ddd74c8b2042df0ea83bc0","sha1":"cdae779d75721f94d985f4395e5dd7b7abef037e","sha256":"24784de52e5075326b0bc508c5e8c52f7977e2129c5eed161e2ba623ac3eb7c8","sha512":"46b70984cfbe70c29021058958fab209419b41860925cbc53c162fa61e8a4b56ef6c4a022b2c9400ae4506ffecf3089442eb76d593f0627561429f9c4160a4b8","ssdeep":"96:p/dQXSlK/IMsPJwX/InbeN7kz0c6ceI8zFPJvCLq:p/mFmgwSk4c6cexzLK2","tlshash":"7591122a834fc47ba177d19e53d7b70b745c913ca1ec583fe8608a3461861d3e202dea","size":4417,"data":"","first_seen":"2025-10-08T05:14:04.160935Z","last_seen":"2025-10-08T13:19:58.849202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.5/customer/action/get_localization?organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026version=050058475503728ee9698199ba8e5308_8aa06b112ddcb9425ae1f146f67b3637\u0026language=id\u0026x-region=us-south1\u0026group_id=2\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d29f5f285a5f164b8fc23934b58c8d6","sha1":"f1dda344c4141d8e09f084937f59124e5882465a","sha256":"43a6e358c7c098fa8520a29564e177a6ca5087f3fb526de8dbfca6882fb27b8a","sha512":"6a44b3bf3f443d6ddc5d24a1fbeb29047d3c55fb628322e6890a744e6fc06e738f07d32c6af0669fc77980b071a0a5ec227a547a56c34af540e9d31795157c43","ssdeep":"384:k8hODwsg3FZmEpbo5LQCBuLdAeAk+E0UJ0L:5XfFA9vuJAY+BL","tlshash":"e352e9540daa79aa0b2753daf5db5d1e38ec3364ab401a2fdd984f304284bc1735be39","size":14039,"data":"","first_seen":"2025-10-08T05:14:04.157629Z","last_seen":"2025-10-08T13:19:58.862411Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30bfddcdb3764a782b7c8584021d1d6","sha1":"64ed02149d0db57e6c1d68992361d7c1330a663a","sha256":"5a8894efd9ef253bc344f5587ea4fb4f4b8da39d4dbd49a390c2302898411623","sha512":"7f7061097e172e659abcf34d29c148da0bc746fde1307cefa2bcc88ee94db292ba498b3f287a8436b39f9e6d44d5e145350896e447ac7c3cfb281a91a5bc6c97","ssdeep":"","tlshash":"79b09222c200942a24ba8118239fa6073110537a80660c1b143c64a436e610f80a239f","size":105,"data":"","first_seen":"2025-03-02T06:33:06.481005Z","last_seen":"2026-04-04T06:42:31.152069Z","times_seen":20938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.CP5rwC9d.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"37cb98ab4147474fd7fe66e6c63e6b7c","sha1":"7d7ed0dec963f47a849509867d6dab3b9cf50357","sha256":"0677224e2b08dff90d4073ea198294dc9dcb494ed7db28f4b48dee8a8399fd2a","sha512":"f7bcabb3580600fd2d1b4cefbd96c471d4dfec94aa777e24ff48ee6ff3faaab7064f24a26db5ace5ad7db0efded9939bff3d2f50fc41cd25909d13fbae35ee3d","ssdeep":"384:Zn1ws4+F8roO3eHAnBH+dQ5fa9s7EnBU/H47MbRvFKRrqW7xevOaLHQ:xjF8roO3eHq+dQ5fa9sonBU/Y7MtvQtz","tlshash":"c372c681fa9f983d57e758d238581003fe789a40f42891a4fba89d23a5ddc48c277b5b","size":16546,"data":"","first_seen":"2025-10-03T09:12:25.769064Z","last_seen":"2025-10-08T12:50:10.528689Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b7df671f34ce65315a4a8d8aad87d07","sha1":"777f27dc013d228fc7f4ac0a20ea764f4918e853","sha256":"298362dcaebd1571b138340c19e8f4ff42f58383d77d4a90e9609bf19d0a984c","sha512":"e87756b71ebcdfd9e8d706b1af7ebdab67b8a214f2197e8aed3d232c2f315e53796523a60e07028cd550b38f5504f7b031ea865414fafe39de4dd37ae0f2d21a","ssdeep":"","tlshash":"4d51aa1ab393183109df35bb17e7839835b4d407a905ca053d2c97a28f61f526a7afec","size":2610,"data":"","first_seen":"2023-04-20T11:28:05Z","last_seen":"2025-11-19T09:15:50.33182Z","times_seen":1477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc3c144b883a3abdbbe71701ebb0e66b","sha1":"9a6863582eebab6a5c00391ef8a37b3afa855945","sha256":"26ded8f2b1b53d104c738332e3ede0dc27518fe9aba6ecb67be692592f02e88a","sha512":"e0f0f98278b181b703d238011b3e8828c6fe283659371d445ebcac8ab548032e7c32011575d5584e9e1f1b28faaf457febc3105f135548494d44953d07a4587a","ssdeep":"","tlshash":"84b012dc70b9e10402342b80495b415c341e500e310e3cb3104c0f48471045400c5118","size":90,"data":"","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-04-04T05:56:02.810067Z","times_seen":1574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.BN_ys3lI.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b847f415f0c128f4cbbdb697bcb43944","sha1":"f011d0db786296c0c27f4f7dcfd53dcbefa71f99","sha256":"d5cea1aeebf4ea84a1e6dde020607c79983bdf236a0fb78bdd6b6def1ec12e54","sha512":"d00ec9510cf821e622a03882d71ea0a8dce2be89c7bf293ef03b03ee93e002b9379937df1d48e125039a3845a3fb2b8e4f1b2c9dba9d49ad8448d3bed469febd","ssdeep":"","tlshash":"3df066caa7417de3f6c99ce5c105a0b156b6179247f487b094ee52768310060ce01916","size":463,"data":"","first_seen":"2025-10-03T09:12:25.68101Z","last_seen":"2025-10-08T12:50:10.512199Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/15058581/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","size":35,"data":"","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-04-04T06:42:31.151515Z","times_seen":21848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.CuSPtZ8p.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f6d49018453623e6339ce1f2b346eebb","sha1":"1ab0f60b37a20349d2a3af5ac59116e569f01c91","sha256":"825701b1f3254d4fc0c875576f832caf63d6fa7046edb2e28305ea673b3eaf3c","sha512":"c8106012e7656ca49a2181d8254ab8886611aa5a7fe029929c1e6912b9121a8a4ba4192ab5f9e6995443524b44542cc2a474dad86a3d43a734d98b8673019c4d","ssdeep":"3072:MEOjzZaKsmReGafWV+dFwgdzQ57kPne9fpWVs2QEvnKr:JAzhsmRenWAbkfpW62Q8Kr","tlshash":"5d047cc4b186b53487eb34f6587f1002f63d6c29784cc464fa99edb63da428a5273f29","size":190241,"data":"","first_seen":"2025-10-03T09:12:25.676306Z","last_seen":"2025-10-08T12:50:10.606591Z","times_seen":493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/js/old/jquery-3.6.4.min.js","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-04-04T05:56:02.65037Z","times_seen":2567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"c2dbf57cfe8dbba88ee488f391b9afb3","sha1":"fc56dd9fb26b1fbdd178275d14beaab1bcb1c3ca","sha256":"78184da2e6a0b0952afb678d203abf821a69a0af997a7a57bf3de21e10e96bb5","sha512":"020850fd63f4e4c6012ddeec5d7447a69129b1413509a0bf1435a9bba92b8e608f03dc911cfc8b890268fe0cbf3f663bb4842184da05cf9179871a7869cff84a","ssdeep":"192:TqGZ8wQvQSm7jL2ON0H/79VNOHUpghkIfpVj:f8wdjL2Oe7/NfpghkIfpVj","tlshash":"9fe1613f513123398027dd594bb477074329d427bd6d23e929222a18d7cbf9256e338b","size":6785,"data":"","first_seen":"2025-10-08T05:14:04.18828Z","last_seen":"2025-10-08T05:14:04.18828Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/3.CuSPtZ8p.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/3.CuSPtZ8p.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3JOsF-3t3JoG2HGM9SHShdfJALA8ap7Q2K8QFgViw_hPI93UloggkrZ7qaIAIdqf0sq\r\nx-goog-generation: 1759482538895332\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 190241\r\nx-goog-hash: crc32c=egVviQ==, md5=9tSQGEU2I+YznOHys0buuw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\ncontent-length: 59926\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":190241,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65500), with no line terminators","md5":"f6d49018453623e6339ce1f2b346eebb","sha1":"1ab0f60b37a20349d2a3af5ac59116e569f01c91","sha256":"825701b1f3254d4fc0c875576f832caf63d6fa7046edb2e28305ea673b3eaf3c","sha512":"c8106012e7656ca49a2181d8254ab8886611aa5a7fe029929c1e6912b9121a8a4ba4192ab5f9e6995443524b44542cc2a474dad86a3d43a734d98b8673019c4d","ssdeep":"3072:MEOjzZaKsmReGafWV+dFwgdzQ57kPne9fpWVs2QEvnKr:JAzhsmRenWAbkfpW62Q8Kr","tlshash":"5d047cc4b186b53487eb34f6587f1002f63d6c29784cc464fa99edb63da428a5273f29","first_seen":"2025-10-03T09:12:25.676306Z","last_seen":"2025-10-08T12:50:10.606591Z","times_seen":493,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/7.CP5rwC9d.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/7.CP5rwC9d.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3KOrBRGOhT6_KbHEctdDJWphqzppPmIOD_9YqboSqhJHM6BlmYh0gIQQKVIxi2CLc14\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\nx-goog-generation: 1759482538871384\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 16546\r\nx-goog-hash: crc32c=qM9EbA==, md5=N8uYq0FHR0/X/mbmxj5rfA==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 5075\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":16546,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16545)","md5":"37cb98ab4147474fd7fe66e6c63e6b7c","sha1":"7d7ed0dec963f47a849509867d6dab3b9cf50357","sha256":"0677224e2b08dff90d4073ea198294dc9dcb494ed7db28f4b48dee8a8399fd2a","sha512":"f7bcabb3580600fd2d1b4cefbd96c471d4dfec94aa777e24ff48ee6ff3faaab7064f24a26db5ace5ad7db0efded9939bff3d2f50fc41cd25909d13fbae35ee3d","ssdeep":"384:Zn1ws4+F8roO3eHAnBH+dQ5fa9s7EnBU/H47MbRvFKRrqW7xevOaLHQ:xjF8roO3eHq+dQ5fa9sonBU/Y7MtvQtz","tlshash":"c372c681fa9f983d57e758d238581003fe789a40f42891a4fba89d23a5ddc48c277b5b","first_seen":"2025-10-03T09:12:25.769064Z","last_seen":"2025-10-08T12:50:10.528689Z","times_seen":491,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-all.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-all.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2548\r\ncf-ray: 98b3264e5882a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=9511\r\ncontent-disposition: inline; filename=\"live-all.webp\"\r\nlast-modified: Mon, 07 Sep 2020 10:34:19 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=v1co1QABMZ56.ECEa28GZMpdnTL2n2.AqHsNjLRtID8-1759900413-1.0.1.1-1vde53hyn7MqoCfVfZ5Arn7QasG_OsPjVbR5tSFC9OKjYUlKHVtWTODunJG3Tta_rjShnuFjE1J97JeYGXHgiecX02tX1_CzAjkS0xIfiLI; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80ab66e968b68828f745dbd67b94dfc8","sha1":"18d70a225ba9f5c51d79d286178312966d339f76","sha256":"bf207416b528a9c36145e5943266d17c909af991f3512d62636b85eb8232ab5f","sha512":"6fa79f44200fdb6f99507cdc247bef76c2148d722ca90fa1b2f91baf303897536fd4e73219f2e27364f2366c7e4f4b87032afa0aac9ccc4e782f432789793a5f","ssdeep":"","tlshash":"2a511a6e75e3673f492ba83709e7aa4509a02a3a0800d02f53fe8041f39c61a6116a67","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.704199Z","times_seen":2372,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-interactive.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //icon-interactive.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 364\r\ncf-ray: 98b3264e68bba0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=681\r\ncontent-disposition: inline; filename=\"icon-interactive.webp\"\r\nlast-modified: Thu, 29 Feb 2024 05:30:52 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 973\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=xOd8Px0FojCZ5hwDqgJCEREiF8zCB9cmuoHrFgfRv5Q-1759900413-1.0.1.1-WElq_Mxl6Sww3BbO_ZWFEhbEKJT71TycJr08ysp_0mVvFv_Ox05ZbRyHcDHEiY3wFTzmirrD7R1xRlJu8tvfzRZMwyCUDoMPCeK7HpI.Y6Q; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":364,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3084cc109ec22a99d7643b7064cb4c25","sha1":"17a3289ecf2b84046433b7af2e9b08777997c529","sha256":"ab426db97aa0aff214ff95147c7b2266324439da636662d133af8c190d470568","sha512":"6ead981b2f19521acb30cca47edafdfd63454103835e16589cc4d99b3a732c05ab5977b9e11fc1974716170ca430e7184f17ad8077e5add19b16523fd6b62ac4","ssdeep":"","tlshash":"69e0c0a1c221b9ddb9803f89140439e1ae427da94331556483837a77d1e70532b798ed","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-02-19T12:42:40.133375Z","times_seen":1512,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/categories_w.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /assets/categories_w.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12754\r\ncf-ray: 98b3264e68d8a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=16800\r\ncontent-disposition: inline; filename=\"categories_w.webp\"\r\nlast-modified: Thu, 29 Feb 2024 04:35:33 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 7019\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=V2pzsU2998CF1cQZ3YavAh7.K.owX9ExM.C75N4Jv3Q-1759900413-1.0.1.1-br1H3L1XiJzCGLoeYaawGY7vlQBvjc.5XqIVxKF4wznr4voawHdhA2giSunhhjZzgKIN_wZufthC4GLrTbrtQsmWOXETW8nOp.C4n6304e0; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":12754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9927bc56d2fa44f07f872b7b6ffe1e2d","sha1":"885e98c2844e30861fe2c02095a88c719989621a","sha256":"9c27336ef78e0464472ecee95044885faa2f6851f990831386d43615fa54cffc","sha512":"51750112d867a88be0cf3fd84d7d90d295e5890ed6544f5248ca46bc5b12f83668250b8f6c497056a42ecbb1b637a9c267be9c6aac02de7d8c91e0fc88d1b3d1","ssdeep":"384:Je8vIgKAnO3OHffQHLO8F9YmcoEhl20e+nFeR:J5vIV9OHXELOtmcVA3+FeR","tlshash":"3742c10ee27b101f4d1e60a286baf7409dc0f74a1fc7e26237195ef0d1094ab1e9e4a7","first_seen":"2025-02-01T22:41:26.052043Z","last_seen":"2025-12-30T19:00:32.808018Z","times_seen":1004,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/0.6yPviw2R.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/0.6yPviw2R.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3LtAQ7odBz-3zgPq42gtqovgux0Ob93r7lIu2l761ACq5m0Rp3yyJ50j9Uk_CY5_hAdbSCrcg\r\nx-goog-generation: 1759482538809017\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 71557\r\nx-goog-hash: crc32c=ysdBDg==, md5=4NvHbdogD0jDGVjQhg6axg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\ncontent-length: 22670\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":71557,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e0dbc76dda200f48c31958d0860e9ac6","sha1":"5bce182c9826e3b0638bd89a3bb9072a10dd8d40","sha256":"e36e8284f4225b28ca1d4b89601950a87e4cc00d5e9bf02823ddcf016af598b1","sha512":"7bdb7a6c671e1ac9280638ee86344b7395abfbc1fec56c16dc1c6ee9d1872d000fa7159b886aad68be11e4d8ec042a712227a585ba42007cf2b198cc4b76a155","ssdeep":"1536:SIch6zA51RJ/B/7v3ROokRBmRmPPKH5hSVDgcq3aQDOa:SIcAzY1RBfOjRBmRiKZkDgcqKQDOa","tlshash":"ac6319d2f696f4399fd798e515248003be267658b82d8170f36cce11318e6c6607bfab","first_seen":"2025-10-03T09:12:25.682476Z","last_seen":"2025-10-08T12:50:10.622598Z","times_seen":491,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\ncf-ray: 98b3264e68caa0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=7983\r\ncontent-disposition: inline; filename=\"slot-jok.webp\"\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=pyLjkbw71GsSi4.u.ymtydHuYKuv6sIxJUnaY0GEdxc-1759900413-1.0.1.1-ttS7q3oyzBw9rmdNcqR.D9.6v1dGJd_VaJekTUPDYT.h52EeuWyKzO1SnuKU5lS1pWRFPLQIDx00t6x8vuG20X7tuW8TrIKhB.vSSUjkj9k; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.780392Z","times_seen":2372,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //fish-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\ncf-ray: 98b3264e688fa0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3284\r\ncontent-disposition: inline; filename=\"fish-jl.webp\"\r\nlast-modified: Thu, 27 Apr 2023 04:58:17 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=nR6R28E_rAuwWE_3ZUtCz1HE0IOL7PauN0.FbRRaGa0-1759900413-1.0.1.1-w007nebOtXl5XR_6H9XDh8hN9tO7hnzhHroS.9rMkEt56s_ZMQz6LYO_00n4SI3uXCWeXWi3Fly8usuySqac.tTmLjKjR9cs8V3jRp0hFug; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.645245Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//btnevent.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //btnevent.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2068\r\ncf-ray: 98b3264e68c6a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4391\r\ncontent-disposition: inline; filename=\"btnevent.webp\"\r\nlast-modified: Wed, 21 Jun 2023 06:15:02 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=z6UxVa98qrNmvlYG4cjAXSMR.3lxbX.wBhfRXcjwv_U-1759900413-1.0.1.1-drdkautihMTHEW5jfqEo7JJjBq0QWka.W0L2Y1zwcK3wgdZwSDLTFNUkRjRVivyeY2ZD.vO8ecyhiTIcmRg4MZIkW8GExycMdDnc_yDWz78; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2068,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b3806ad5a17008ef18c02cc42f9fbf3","sha1":"4b8f650f24e96366086ff58eab735192c3740d48","sha256":"a31c936f5c68ff24f849dcc3fa10de6d0d6f2a7e7fa6b80e8647d890073c9801","sha512":"ef79f33c586bf90660a93df6a88f5004ef2702b564f7490c49defba103cb386fabf14667bcb8963628180672226db18f03abcf88085106f6b253522c9bbbf20c","ssdeep":"","tlshash":"bf416ea1bc480469151fe0546de1f3decec6406e0f4c5993580d075d154f3c4f735135","first_seen":"2023-06-26T19:27:32Z","last_seen":"2025-11-19T09:42:50.607035Z","times_seen":1539,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\ncf-ray: 98b3264e68c7a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1584\r\ncontent-disposition: inline; filename=\"slot-fs.webp\"\r\nlast-modified: Mon, 22 May 2023 04:44:20 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=o7W9ZLAu.KI3paqtiRiuoOTLLXzbR7HUAZEfTQemuQ0-1759900413-1.0.1.1-Rfn9Efedola2bhQGXpPuFWxCOd_pMbdsYNkO_ZOF0dENzEHs_dPq9iEbqJ_uFi8nMPKErXwWyiZYICLSrteD.LUnlgaQmNzguJGxD.SI_8s; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-04-04T05:56:02.681185Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\ncf-ray: 98b3264e68dca0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2786\r\ncontent-disposition: inline; filename=\"slot-pt.webp\"\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=z0N.zzAViHEJNQxlo8FZOZbSMFHmxD0_ZqlO7MYXhqw-1759900413-1.0.1.1-Z.L15F6pRExC3GVHXiXEl1ZHjqHf4nsbbEhfh4aEr7dw7scOuKUW5C0vkFb3FkLaDYAoJjFuAsaRE7pVnEBuS981kwtieu_4Aq8UTdURVs4; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-04T05:56:02.644255Z","times_seen":1648,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/images/upload-Slides-20230123201028.jpg","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /images/upload-Slides-20230123201028.jpg HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 490196\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Jan 2023 13:10:28 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g68iJulJKPWrE%2BPyNtP8Gh845EBWp8jUBCPLTJzlgMRDtnwxCANmVm9USZsb8KdbWLHi1lHvc9IHMcWrMHj4Gfm1%2BU%2FBRjHEw6QhuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264e29400b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":490196,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1900x380, components 3","md5":"69efa78a342e5a14c960c1b24092a21b","sha1":"b083ff6c560ab65b17443674d3e58d2bc2ecf5b7","sha256":"4e175c87dfcce810a3efa7842f3e8c25dd8e379b7e85610ab2a9bcf4647d65f5","sha512":"422f96ef5f35f2303f3ebaed9f31b60bac563add0f1a9c02db42bba4f24cd62cf09d471d2f46da6254a2937536db0cc64122834b063765590e2cd1d8a951ffd3","ssdeep":"12288:c2rFrQAr3MR0zRZNMupoIIrGA9zpwFS3vhPxn71:c0rBr3MR0zhOGBeN","tlshash":"19a4230c5662e89be0d1d43188e25ef71a705bfd2875c219becc9912a31c7dbc5ac36b","first_seen":"2025-10-08T05:14:04.070238Z","last_seen":"2025-11-15T12:35:03.889679Z","times_seen":3,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/10.C3kUFtOw.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/10.C3kUFtOw.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3LbAX5SmG4wCvgDGwimzSylt260cOd2EPa3TsR72IAiOb4UKaKPmHT_o9KJ3XVPbviv1DXhUg\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\nx-goog-generation: 1759482538809942\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 4883\r\nx-goog-hash: crc32c=75Y5zA==, md5=r9S1cjE3Q9yteolT54Ho/A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 2012\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":4883,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4882)","md5":"afd4b572313743dcad7a8953e781e8fc","sha1":"f64ce89121e92037a27e2f8a62eb95d748728913","sha256":"2d913fe3ad6574822f49ee6762156e7ca3e00ae67cd2302d643ff8bfe7039518","sha512":"b02f2b6f7379df3de017fbea25b3dea96e773b0cea6db8823194ecaa85f217ef20c3f171363d4feac09c1e1dd0e9cbc1b06b9901ef35c2144343f4b023a76b9a","ssdeep":"96:/rIUv27/40cQ74WlszFeMTVziFISHCnWdJNxQryWFBXBFBXZQFMgksV:/r5O7/4I/oeOValNxQeCBXzBXZQBV","tlshash":"13a1b7fef765f8749bfd8ce9e1142543ec3b1158b8bd51b0fb5c4e69219a1848032ba2","first_seen":"2025-10-03T09:12:25.724752Z","last_seen":"2025-10-08T12:50:10.6195Z","times_seen":491,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-ps.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-ps.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1530\r\ncf-ray: 98b3264e68d0a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2835\r\ncontent-disposition: inline; filename=\"slot-ps.webp\"\r\nlast-modified: Sat, 01 Jul 2023 10:40:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=OPapNqpiEq7d0EvG4WIpwS4LvVlOrzqKcQ4jPbZlp9E-1759900413-1.0.1.1-GCXFsBm4pG09IFHJLTn2j3ZYLUiaNtpgG2lc7fr0noxdP0Ou_fMK__dKF0h8gnH_b6_wSjHgj65Ie4LTmK1ZCIupmn3EVuChpN7uALV6KTQ; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df12aa9d7e1aeea72834c560830ceb62","sha1":"de28dd2fbd5adab2e42c9ece29a5c259b4c52603","sha256":"0b474e2e391432c75c0f69f94d6a8107472863c03b441cdbab7cdffe483f6b79","sha512":"2d0dd11d755346446888a97065972b9dab95c89e033152cc11fca53eba1895e3be39c01c4b8ab49b418ddaf3aefc0fb279b06a213b355d9d22088d675fcb1097","ssdeep":"","tlshash":"6131291819cfbd715903742c3e59b404133a2f8ebd31e7b0eade277991ec88001e6d85","first_seen":"2023-07-01T17:54:16Z","last_seen":"2026-04-04T05:56:02.728572Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:34.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Oct 2025 05:13:34 GMT\r\ndate: Wed, 08 Oct 2025 05:13:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8298,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"876cd04a131bcebb23e3ca9e135f5b2d","sha1":"ab9f5483809466de2f8db6a0026a1091508d63ac","sha256":"7a02050c74ed3a36454d0ece26dccc8fcf154188b3f212398e891cc5b25dde68","sha512":"168c97f7ab8d35b7f3bf125a6041046de689403bc5602bab3bd7f75cfac1706ba4209dbadd66ee811d3668b25808a42132e9cdf7c173a5898727b508eeace838","ssdeep":"192:eqZvio4MVfg8i5xq7eMVDUn5ZKdgWlR66HZ7H:r69aJl","tlshash":"5002e092045b9400eb474cc223cfbf369e8f61566445c5b66ffd18d8acead3a431ab4d","first_seen":"2025-09-12T01:51:25.641676Z","last_seen":"2026-04-04T05:56:02.715576Z","times_seen":1347,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":95,"dns":6,"connect":23,"send":0,"wait":20,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-prag.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-prag.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\ncf-ray: 98b3264e68bea0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2903\r\ncontent-disposition: inline; filename=\"slot-prag.webp\"\r\nlast-modified: Tue, 16 Apr 2024 09:40:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=Mjk7Oo4ijOH2Ep4SEg95K2_sqhAOHV9sx4_mQ.1M4Mk-1759900413-1.0.1.1-FyWQLmtnXx1wZw1CWISUG0vt2pXHUbA0z41vpE92WtRi_x8pidrbddkBrsNtLCJ2qF8Ov8PYAKBsucoHS46kzJJP4uCQGQBEHiAEfS4FtvY; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-04-04T05:56:02.664161Z","times_seen":2310,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cq9.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-cq9.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1182\r\ncf-ray: 98b3264e68eaa0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4157\r\ncontent-disposition: inline; filename=\"slot-cq9.webp\"\r\nlast-modified: Wed, 10 Nov 2021 17:01:06 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=r2juRTwnoInERhuWUpg9BuztRBT40v43_h1_CQRoytc-1759900413-1.0.1.1-8YcSM389eV2ednS_n9hNkFj0PP1kAX7bHff3T7qcZOGnRWRwhMUT5acX5dlIHZxuD9f6bscF4WqU_FS80HDGHjzLImWhOmEjdHxk8MPC1vY; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1a383f5c29c2a1abb0146f00f976edd","sha1":"d044fc1b18c28a0129ef1ffbeba52166614d057e","sha256":"cef9e6fabf6bc11ddbe76f0abec0e0f7106ba78a0b5499c3c640d82c8a7d6701","sha512":"279fb2c42ae9c6bd32b4c2828805923e1fe9a0f77f5502a62eba8636dc03367fa57174962395550b3acd4bdfcd8c8d17d722b38b69784cef18987476d75be2a5","ssdeep":"","tlshash":"a6218452943890c9da8498dc76c2aee5dcd5e99a4203e9964109d8e5a7b46b03820f15","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.770253Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":41,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sagaming.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-sagaming.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 810\r\ncf-ray: 98b3264e5880a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1589\r\ncontent-disposition: inline; filename=\"live-sagaming.webp\"\r\nlast-modified: Wed, 29 Mar 2023 10:52:26 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=O4Qz6s5Jl2MVtw6n7QtzlUK771wLD0l3_5YC1VRnl40-1759900413-1.0.1.1-GB3K7Q.S.M92ep3Rx5y4QfQ_gvtF_dXqNJvlxh0uBnlrnJiKlCOdlBvgr8v5D.e_exwc2q0LZUq0nBQghAzUyi0Jo4KtPednnZfqSOpOVXI; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edf6fb693748c3b5b424fd6475014c9b","sha1":"c364c1f56ce3cd0cebb4ef30789dce88a4bc6b74","sha256":"0042c9b4af9d92d4f8823b8627445ec3a4c6282f31f048caac2d2f788815ba7d","sha512":"554854ed0a1ff2e89072eb8de3cf9d53eab3f8afd60de3ab6177b8338689ba82cf2c537c521d137caa7769914ac762c693ff9817886787f0027134069ca3300a","ssdeep":"","tlshash":"b301c5a970c8d59fe63fe0b9b10f3b039c8e47a516306f228eb0389443245530bc3803","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.691669Z","times_seen":2372,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewahoki91.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 15:24:58 GMT\r\nexpires: Wed, 07 Oct 2026 15:24:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nage: 49717\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-04-04T06:10:26.729048Z","times_seen":8110,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-spad.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-spad.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\ncf-ray: 98b3264e68c0a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4945\r\ncontent-disposition: inline; filename=\"slot-spad.webp\"\r\nlast-modified: Wed, 18 Dec 2019 05:38:16 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=b72.3GiqadBKxVq.MAWVCdsoJH3ZP5Z7y1JJuQsHo1I-1759900413-1.0.1.1-0xmTwr5aClNodMQcEoa5bDHVv88_QMHMIFJC4r0a89SSHkm1Qbt1KcYupNErQfnV7SCb.FSOXECt._QWZINd5pNvPWeO_hw0tj4EmERC6oo; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6290e499ede13e741045d26dfbd95bf","sha1":"73a41f0d753bb0843be9bfb147e1999ced0e30d5","sha256":"ccdb75fdea9558a8454442831c45017f205cd8729bc2f0399b91e1fb2473cd89","sha512":"d298b607ea2d753ca7be21e5262482347db33424add9a27ac259675bcb197814fe2709b293e334c4a41cae6b178b8d010921f02444a1044788faa887368d290c","ssdeep":"","tlshash":"7421eabb74314115f4f37e1c9f757e0324c4c648f660d18876d259c2dad64402d4c36e","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.741337Z","times_seen":2374,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nlc.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-nlc.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 774\r\ncf-ray: 98b3264e68c8a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2880\r\ncontent-disposition: inline; filename=\"slot-nlc.webp\"\r\nlast-modified: Tue, 12 Sep 2023 11:37:15 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=3RTMVtKNoxT.Q_3c3.im2hPLypmzXh_zGlQXw7vi9wQ-1759900413-1.0.1.1-pNfuTgzPRTaDdoM.Wv4A1oiAUgs43l4xOuwA6DzNVAofYf9RbTQQ9i66HzNgGDPDwpdmRsytLfYpPHmVxJdGILhGir.L8.2i7EY.q9Cq68E; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4ae16030e39c50fe715acb250bc81e6","sha1":"df762228c672c2482bce767e507dc74a4689d238","sha256":"e9952f9e2cb2e5fee2a0d0f264d20279d98f115a0decf21dcd7cf1e9d674cc25","sha512":"deec0e6b366b45039d1413f81d5de62895b314de390178b82ea4416845176bd45b5c51e42d57ddb5e90b6ebd496589903bbfa4e210f06d7ec56a57576a74f216","ssdeep":"","tlshash":"6e01752112d154de08ad6dd7eb5adb2013c38b448433e9adfa73788a966c5b08265285","first_seen":"2023-09-16T14:18:22Z","last_seen":"2026-04-04T05:56:02.758233Z","times_seen":2301,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/guidelines_w.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /guidelines_w.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9256\r\ncf-ray: 98b3264e68e2a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=17432\r\ncontent-disposition: inline; filename=\"guidelines_w.webp\"\r\nlast-modified: Mon, 18 Dec 2023 06:32:46 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=SKkiLcDlHI7BkPLNLAdErgJ1_82pWLyQUWbsYqF_C_U-1759900413-1.0.1.1-gydfTm9xRG1h1sgfS2BFuIL4Hn.sHQvTnRAXraK8KCuxZ82mRnaHTebOXx_GVAxsrL4edgtupv62EqcHtxsbge1FtD8_u8bWDO7rLlQuJk8; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9256,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa8db57570a26d41255379ab58af20cb","sha1":"44f8de3a2fb43b4cc7746c4e82983a55f05a5c4b","sha256":"26716e4051976481411da3aebc4c792f60916b6f47c3dd4e453abf15ae9f51c8","sha512":"3179291583168ae7c8f726468694f6686c7d088597d1d08486017b73eb7c0f6fc109a41ea9c14f54ebc808af04e03e04c2d7de1cf2f04c3ad54d13238f8d02ac","ssdeep":"192:FtFrjla3JK6Zk5vJ90V5LG+WgRJa9RMVGbvJB4ElQWFzliJq:FtFnlaZKwkBvW8/gRJuXPQWhaq","tlshash":"0612ae10992f333ebd95455b16d0091fa2213026f63a72fc43ca383f1eb9971668567b","first_seen":"2024-04-18T12:05:46Z","last_seen":"2025-12-21T17:00:30.839334Z","times_seen":364,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/favicon.png","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 08 Oct 2025 05:13:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q2K8csPB8tLO%2BPWrQ3zuNBotb8jVdVemy7qpExhcrlOChmXE7xC8cepPvXWHrEXORgwX2RWUA7x%2B8jprsCgkvuk6gDsmmUxSlpRnqw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98b3265bcfdc0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1617,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d55cbce7d3b62b7124cafe1a2415808a","sha1":"9417bcf28b1a01a2183fc8c57f135de6c1195c31","sha256":"cbebf7d600c9876b6902b076a6b805ad0f518b069ba6d631fb482a545feba102","sha512":"b370ee122584b79b4370f75970319ec3a6d3981ee2cab9b559eec7e276f9509196271dcb23e33ddce8f7f4a4cc06a2f77d2c9424be4d841895ee781b8976a670","ssdeep":"","tlshash":"f9311552c8f83836577254d6f5e9ba33fad1aa0bda0e1c60b6ec47da1fd4d41880345d","first_seen":"2024-08-24T13:04:39Z","last_seen":"2026-04-04T00:20:09.441369Z","times_seen":527,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","fqdn":"secure.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1 HTTP/1.1\r\nHost: secure.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 759\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1776), with no line terminators","md5":"0d826cd04c0b9af295283b255b3f75f2","sha1":"b2aed6ccefcb73b19c39d12096fc3fd09ed6c785","sha256":"132cfb95c9cacbda0ac0348bf2f0320723653455360bd574c7d7f1b124bdb731","sha512":"aefcc622640c2a9006b1265aded05e11ba690ddd482aa2172cf8f5ed4ae101bdd487e89f4261feae2b08e83ed8e2dfe3594db7cafa5e7dea91a9a93eb8cde37a","ssdeep":"","tlshash":"9e314173aa00d91d7274c221bd8bb08e895d534e8644acf2b29412fe1ae1ed58273e29","first_seen":"2025-10-03T09:12:25.705898Z","last_seen":"2025-10-08T12:50:10.622056Z","times_seen":490,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":392,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/8.Vg6-FLpP.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/8.Vg6-FLpP.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3Jpmq2scnzHOmCqCao4q-M9-PfvKM72UZd1rdSuI7ySzcIoUsxkBwfEq2PFQGKeSp1xFjRjIHRW3prSeA\r\nx-goog-generation: 1759482538871408\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 307\r\nx-goog-hash: crc32c=O0O/iw==, md5=eKmZbnh1/h6+oqYnWhc8WQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\netag: \"78a9996e7875fe1ebea2a6275a173c59\"\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 307\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":307,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (306)","md5":"78a9996e7875fe1ebea2a6275a173c59","sha1":"c0815f536629111dfc36d59c6ae0c55b413b572b","sha256":"75a31e846d9186e703fc3bd9bf92be98c9f97eac7a77acf6004228c388b34266","sha512":"6a32e9059f01a9b9f4cf52fb83c0f6317d2d5d1d34988369705ec1811afee5bb79179d5ead8fef9216a2a7f75d197b8ce1a3ff92095ec4758753462d7ea6316a","ssdeep":"","tlshash":"7ce07dde74c2f0f24286fccc43105051e33cdf8027b985b0c02c5f9097510418836d88","first_seen":"2025-10-03T09:12:25.81705Z","last_seen":"2025-10-08T12:50:10.509373Z","times_seen":492,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //fish-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\ncf-ray: 98b3264e6891a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1584\r\ncontent-disposition: inline; filename=\"fish-fs.webp\"\r\nlast-modified: Mon, 22 May 2023 04:43:31 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=X3kH3UgyEePwP4z78x_KcQ.xqhnKaCnAQjJX4fil4eg-1759900413-1.0.1.1-LKKFCiNV064ifm0YXUnZGVSSIR8GnGNOo8E37xPkOEdlccfrjaxa1nv4QXwGlpt3tYmlpjYQ3sOW2qo0j7_9XeUDhyF6QCqqgrHeanAJ4iE; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-04-04T05:56:02.681185Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewahoki91.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 09:59:08 GMT\r\nexpires: Fri, 02 Oct 2026 09:59:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 501267\r\nlast-modified: Tue, 19 Apr 2022 18:29:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9588, version 1.0","md5":"55d912c794126956bb1e8f41597c131f","sha1":"f7ade582dbe9d0efe97ae105cab313c6e45904d4","sha256":"8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699","sha512":"e83f80f681e02894d4ea32f0829b6cf5d04ac2d8b66b4f9363d082e727d201d09f134a84efa27391c78cd61cc2b0b3b1650ace011e4e96b4a504a18df5b7485c","ssdeep":"192:QVZUvG+5fOvM9EHseAuFxuPoii+pw4Srov5nBbs2TpP+W31WAgu+VNne33/:QVEZgM6ICYS4JBbJlp1WY+VNen/","tlshash":"7812cfc4c0887700da1fba3a393c0f6b62ad6555e4e146664c004eaa66fe5f0e00d73e","first_seen":"2023-04-07T13:32:31Z","last_seen":"2026-04-04T05:56:02.658954Z","times_seen":5927,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/11.Gv78iMd6.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/11.Gv78iMd6.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3L3I1mvvTG2Ud7AITDYpQ2VtCKUxn4y-nqyNRGAgeHlCG2fMwNTRgmccJpgsKDfMU4baOTe-0Q\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\netag: \"8ec94005c25c7e0874b7b048ea97dc00\"\r\nx-goog-generation: 1759482538798444\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 240\r\nx-goog-hash: crc32c=1j+HPw==, md5=jslABcJcfgh0t7BI6pfcAA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 240\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":240,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"8ec94005c25c7e0874b7b048ea97dc00","sha1":"2649e6120dff6489d15cf68a590e6e73e153aae3","sha256":"d3b76fb03a7607b5da00fc0252be26fef8c76a0b68feb2ff19b439eeeab3f705","sha512":"9a70f8f3a88f62567acc8ca189563118b54f15202cb1c9a5cb055f4d6d3fd1dc2e8b6f8f76768f42b57563546f10a12b51e460183e2c224226cfd25c624ddd76","ssdeep":"","tlshash":"82d0a78cb743b0b12666b138843f801fa171e984a44504e0c13addc03e7c2a97567d5d","first_seen":"2024-06-24T12:34:00Z","last_seen":"2025-11-04T08:36:53.532069Z","times_seen":13838,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/12.DJPUQwQu.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/12.DJPUQwQu.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3L-F6KQAeg3V0Kb5wuzdX0BUmKsZE3bLxFa7JlsLa7GlZCxWdvTh9Gw2t0pzcXdwKwA\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\netag: \"640caab52100a1e9dfe618aaeb79838f\"\r\nx-goog-generation: 1759482538813490\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 300\r\nx-goog-hash: crc32c=IuJCUg==, md5=ZAyqtSEAoenf5hiq63mDjw==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 300\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":300,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"640caab52100a1e9dfe618aaeb79838f","sha1":"4654776a82e5405614a595d40cb33ca2b5bae0b5","sha256":"fb8eb817d7251014c136b441bd4004fa6567908059013edbb938925f23b67ceb","sha512":"17d605182be517c5e797b2fd823b9ab7b6bd73d97bd2c3d11c5eb29d108cd350d789116528e351abaebdf3654cc65100b9e3353064ba38c9ab9008126c6a3061","ssdeep":"","tlshash":"00e08cbdfca8d92152f5e9f8c0b60822cb593b0e502382b0f60e6f4a9519199a552826","first_seen":"2024-08-27T15:26:59Z","last_seen":"2026-04-04T06:42:31.11092Z","times_seen":23387,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //fish-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1874\r\ncf-ray: 98b3264e6890a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5584\r\ncontent-disposition: inline; filename=\"fish-sg.webp\"\r\nlast-modified: Thu, 13 Apr 2023 12:41:47 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=EHHVueFbs6ZKHfhfO70rOt.pCZyxEcNLnkiRiSmiWcc-1759900413-1.0.1.1-5Puv34cKa8zsgBzSx4DJYvOJOIUf6HQm.QA_TshY0G41hl12dlamNEVZQ5eaYZpgJwK1cMMSZ6YGd4fmdp3iO7EGp7NyI5JeMVD53uysbz4; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aee6fc0c74426166a631dc703dd18435","sha1":"b835716a43afeadc19565056eb7c3de94358e656","sha256":"3c0b4942ad2984422affeac2a3dd2bba982cf91623f2706e607dde9e935b5bdd","sha512":"6b723c0bd20156a0955b204ba50db0b7ea2f8f842fefcb20e7c182600f3960888310caa2c63550fb972c8a08944c95b5094d2c506e1e939a269bd4dbc9cf0f86","ssdeep":"","tlshash":"4331190d74e743ed67dfaed1389828548d20b00bda97b6c9a3587c0e41ae0a4c3e6040","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.771723Z","times_seen":2372,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/livechat.BN_ys3lI.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/livechat.BN_ys3lI.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3KxC55ghYWLVJR-KHb-aBVP8IGq7Njq8JpUzrGTcbtbXW-9RG-0IuKDr7LGxoqq2UgE\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\netag: \"b847f415f0c128f4cbbdb697bcb43944\"\r\nx-goog-generation: 1759482538900988\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 463\r\nx-goog-hash: crc32c=LSCeSQ==, md5=uEf0FfDBKPTLvbaXvLQ5RA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 463\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":463,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (462)","md5":"b847f415f0c128f4cbbdb697bcb43944","sha1":"f011d0db786296c0c27f4f7dcfd53dcbefa71f99","sha256":"d5cea1aeebf4ea84a1e6dde020607c79983bdf236a0fb78bdd6b6def1ec12e54","sha512":"d00ec9510cf821e622a03882d71ea0a8dce2be89c7bf293ef03b03ee93e002b9379937df1d48e125039a3845a3fb2b8e4f1b2c9dba9d49ad8448d3bed469febd","ssdeep":"","tlshash":"3df066caa7417de3f6c99ce5c105a0b156b6179247f487b094ee52768310060ce01916","first_seen":"2025-10-03T09:12:25.68101Z","last_seen":"2025-10-08T12:50:10.512199Z","times_seen":491,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":2,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.livechatinc.com/v2/customer/token","fqdn":"accounts.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"POST /v2/customer/token HTTP/1.1\r\nHost: accounts.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 225\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://secure.livechatinc.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://secure.livechatinc.com\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: application/json\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 201\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\nset-cookie: __lc_cid=648702b2-7820-4dab-a5e2-fe26800f649c; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 08 Oct 2027 05:13:36 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=2274ce64982f5ff010255304d785230267bde2c93f1c8df90eff7b94f2839338a90fda9aa06c84a4c72ea524f7194f961e7577efd7afc1a1f0c503ce180d; Path=/v2/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 08 Oct 2027 05:13:36 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cid=648702b2-7820-4dab-a5e2-fe26800f649c; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 08 Oct 2027 05:13:36 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__lc_cst=2274ce64982f5ff010255304d785230267bde2c93f1c8df90eff7b94f2839338a90fda9aa06c84a4c72ea524f7194f961e7577efd7afc1a1f0c503ce180d; Path=/customer/token; Domain=accounts.livechatinc.com; Expires=Fri, 08 Oct 2027 05:13:36 GMT; Max-Age=63072000; HttpOnly; Secure; SameSite=None; Partitioned\n__oauth_redirect_detector=counter=1\u0026t=1759900446\u0026tag=cfe290e7e7e70d7164317b4fce2dba94a89ef31c; Path=/; Expires=Wed, 08 Oct 2025 05:14:06 GMT; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=86400 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":201,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fdaf5c6ffcc1f1fbd369b3eaef22a5b7","sha1":"5e6e0c24135a1d52725996c0e97a0a5c0e338733","sha256":"a1c9b74724b63066d67f17f8ed80aad803578475c9d4adc8e0b7e5432770cda0","sha512":"b4693afabc280bb1533f95a7d58b3529370b85dd4f9fcd65ab87047b648dce7b029faf9e6c2a2cb490f294302eed3c76344f26aea3bde083f917d4810e27b0e5","ssdeep":"","tlshash":"f1d0238e5785dde106d71f77d411064564525733418400cd45f7d19504487245347d05","first_seen":"2025-10-08T05:14:04.09455Z","last_seen":"2025-10-08T05:14:04.09455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\ncf-ray: 98b3264e587da0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4064\r\ncontent-disposition: inline; filename=\"live-mg.webp\"\r\nlast-modified: Tue, 15 Mar 2022 06:24:43 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=A_NtmgzFaWkz6g9agYa1hdeRsHFJed9aFMIxl0n6Ym8-1759900413-1.0.1.1-xA07AwqEagD9SPVVSS93Pqg8FhDgdXsnNo2TXWtdbWFAQncO7zUismES9ieSFxY3dyo3YpzrJmJ0VLmjqg_htsEIrIjNITr37B08WU.vIxM; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.686608Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //interactive-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\ncf-ray: 98b3264e689aa0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1967\r\ncontent-disposition: inline; filename=\"interactive-hks.webp\"\r\nlast-modified: Tue, 15 Apr 2025 09:02:35 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=Xd1Kr0xmRqDQMH9z_zMClnhnhLzup0VijxU53c8M.OM-1759900413-1.0.1.1-Eu4_h63BrCzTY_EKKBDvyQqUKpb42BF8bgTROUsPI44h8fGNRwHnK13vyoBRGGrfJV467ilyzhute7fXmm.e6axNx8JVJkfXuoo9QojsVCU; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-04-04T05:56:02.781389Z","times_seen":1793,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //interactive-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\ncf-ray: 98b3264e689da0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2758\r\ncontent-disposition: inline; filename=\"interactive-wow.webp\"\r\nlast-modified: Mon, 28 Jul 2025 04:39:16 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=HpCbJiWq4VzYG.vhyVAgTRsGbZch7v7aG_kKEzY8sHQ-1759900413-1.0.1.1-8hJd_THykbFDDVO7juGLG2whhOzWMyt6mFnNPtDU2L8mkZd5DrRr4_gkpJWwcdMYSGDCtPga0PG5CmbHaGxqF71GYZ2_6anFmjfrDoy8IZM; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-04-04T05:56:02.702043Z","times_seen":1463,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/slider-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /banner/slider-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 479590\r\ncf-ray: 98b3264e68d6a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=505235\r\nlast-modified: Mon, 06 Oct 2025 05:32:12 GMT\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=hXjE_9rmYX6p2raK2poP7O1_7OGRVjVRPCoY20XNvyI-1759900413-1.0.1.1-u_XphKBXOLJb7SiKgkPuONCmtS5RNrvbDTe.pxfk5sY9F3ZS5sDtTSElvhW0LJ0xXo2gjQJCE4RDhA2oHG0mwjjj.m8uL3RDDhs6zJGZlAU; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":479590,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"83433476fc2e6f633c8b2f6387a2a722","sha1":"70e2659bd2be552a104f18671850aee49eef199c","sha256":"e25e2b450d4924336cb6be4d29f032117abf397037644f610d87486ef0c1f09b","sha512":"183746dfbff1315f2c7bb21ee9d038e17d47170fada0acc704d861de5300be270f3372db998bb27bf90bbc1669e356bc35e6ef11b413864ff9bb8e9030958333","ssdeep":"12288:IkD1uiOGtxbyfIG05wOIDRn51WCLUFdlFztguyLBHtv:vhxXG0Spn5xLUFd3J6NHN","tlshash":"7ba42312f8ae735116aed730068cebb5485d695fb85a0b23ab320d7e4c2c9e364b4674","first_seen":"2025-10-06T09:36:23.202476Z","last_seen":"2025-10-28T03:58:16.611981Z","times_seen":222,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/js/old/new-webduo35.js?v=1759900168","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /js/old/new-webduo35.js?v=1759900168 HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 27 Sep 2025 06:42:32 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nRtyjcqwoS8OC4TEV5mYf9qxPxTU09vPdxYxoQhhUHHV%2F8oj3kw5Uwoq91LA74c89bgSgALjCJDCxs2TrNz%2FZa3bt3OP2tLuBaouog%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98b3264e49560b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32780,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0349a6c5e308d1fdf60f69d25e17b6a8","sha1":"49e6ce6dc405b1015ec5042eb5097872d82664dd","sha256":"c54dbe73f86fc6342668aaf75d2acc9f4383a3c4780dcb9d4f2dcbb15f3de4df","sha512":"20d4717c15d35318a88bad25203dac015b04c9b2cd319f21c5d80e22106c0a72a1193c8733bbe441927d9b7b1baef058e52bca805bcb7ce773520383bd6e26b1","ssdeep":"768:92LaB4ntNnaBMdXh18Q8Y8o8sAMgmMuYUQ6cX:AntNxdXh18Q8Y8o8sAMgmMuYUQ6cX","tlshash":"91e2424aff4c4acf57b626ac483b91c55f5d4d28e10b0e02fe6c54c86b4b615b272a2f","first_seen":"2025-09-27T11:18:39.559692Z","last_seen":"2026-02-01T12:36:05.254311Z","times_seen":452,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-togel1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //icon-togel1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1916\r\ncf-ray: 98b3264e68bfa0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3573\r\ncontent-disposition: inline; filename=\"icon-togel1.webp\"\r\nlast-modified: Mon, 18 Dec 2023 06:25:25 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=2dzgEqj_32jJGOVx0dokfY2Qo1Tv1qVP7jc7DswGKLQ-1759900413-1.0.1.1-9iN8AH.IbPhELR72R9Dym.UezA_m4jhK6_ZVyqQmdYuAeqXbugyixKGwJGdoiaiHmdFalOaErJJJpZ.CCNNz9BUUBqE_vAcEeJkGup5olNA; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b306d736a18621948e272f5e0fa5da4","sha1":"fd3152657117384a997cfce3748c52398a5bc58d","sha256":"b91d8ddbd317eef3393479d983082ba6a8161c4c2b36e2caf544530a23600ce8","sha512":"6ac579745dda219f72a9b5865ad164f0434b12e7134dc788ea1c8b830762c99d4338708c3910b55bf704bc9fab88357a20fda7498d473b06b00b82934870ddb5","ssdeep":"","tlshash":"7f415b40892c3564dcab700d82b2ffbb0bb00993668636985f5fb60bd4a82fd5c0731d","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-04T05:56:02.789549Z","times_seen":2294,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-gmnl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-gmnl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1892\r\ncf-ray: 98b3264e5884a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6578\r\ncontent-disposition: inline; filename=\"live-gmnl.webp\"\r\nlast-modified: Mon, 07 Apr 2025 16:29:40 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=shIYZDkUok6T22inm0iSnQDa3_qmBL70UoT00iNzSLk-1759900413-1.0.1.1-.wPl8nAdTgRzqsFf9OCXIa_rTQJOWtPPvVTH_x1Z9vddtuTrpep9TnmGkGwaMT67KEzDc8sk7pF4LlH4RgfDMycSZKe3CHPh1yzry1XQvXU; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"033ae41c81e5664b5a14cf0327d6bc11","sha1":"a1a51d625b808570ced4eb38c66ce65b64a8d027","sha256":"e3ad658c0ae844fb1fd103a62f6be460f7816c3446afd38209d24a1550c998bd","sha512":"16ef89bc560dd25788f1f535bfb28d853d734cd74931050243dff0ce52927feff738b1f4cd8e8a3462d1835f40f0519eaaa425f1225e17c71a5143cf178a20c1","ssdeep":"","tlshash":"bf4119ee007123f548f93409caa19b55d08a938138b8cf716990a78ade8e19c5d0065f","first_seen":"2025-04-11T01:18:54.278204Z","last_seen":"2026-02-09T13:27:20.102009Z","times_seen":1364,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-slot.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //icon-slot.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1822\r\ncf-ray: 98b3264e68ada0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3134\r\ncontent-disposition: inline; filename=\"icon-slot.webp\"\r\nlast-modified: Wed, 19 Apr 2023 10:27:47 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 973\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=gHZ9RzLbF9AqKUClxRIl2a4vMVgHRDumyNafT9Mnrmc-1759900413-1.0.1.1-b5tula1IVqCwDVlnk5oku_nAwoj9k.3JZyjDvqVGgXhXh5hG_g3caXRxsQZBc3yr9l6BCgK7zYlw0wQuz7R_sM5AHFK1Bsti.RE0WFtvSzE; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1822,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"630672f790ba3e4db34b199d4037639b","sha1":"7f64af94aac957e309be6dd2e6cd98825e95818c","sha256":"4565f55cc02a93bb42bdfcbbac64facc4a1a7f1236e4da1e9c6a35199d0a4af2","sha512":"fa345474e08d03b8200508a6726377f88a0cb531f722c03b5efcc61b511c6b388a066473c95b33cfe8e1623eb0cbcae69318f97ca5e5c819ef58d8aa1501531e","ssdeep":"","tlshash":"47312d38d9b53706d24f897c037f561ded74f83c1964ddca49c94a7910801e45701cee","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-02-19T12:42:40.137417Z","times_seen":1603,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewahoki91.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"1d9d0-F9rQd2iZrRvq2r0GHDTioiss3nQ\"\r\naccept-ranges: bytes\r\ndate: Wed, 08 Oct 2025 05:13:35 GMT\r\nage: 2423277\r\nx-served-by: cache-fra-etou8220122-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 121296\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121296, version 1.0","md5":"7f477633ddd12f84284654f2a2e89b8a","sha1":"17dad0776899ad1beadabd061c34e2a22b2cde74","sha256":"966620f9e3bec428663687f9e8d67a6b8e35d79adebf6fb204e9b139eada7599","sha512":"b46baa2a3ea38512f8b539774c751004cc866d085a9739f4c25f2ade9d97c10d6f4b20cf87dcbb6a003e0df0ca2df200f9036a4c76a013f24c57d365981f6e00","ssdeep":"3072:Nodp66TvfwN7lvK/5hwbCuy3Y5vV1uXZKeufOdZMJgQoHy:Gp6gX+7s/5hwD1RvqufOoJgHy","tlshash":"75c313267cc162a8bf6dbcb2545af65c99b4c9ce6a802bacfd30db90c1075ccd910771","first_seen":"2023-04-07T20:14:59Z","last_seen":"2026-04-04T05:56:02.672676Z","times_seen":5767,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/13.Du4z9uvj.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/13.Du4z9uvj.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3LNXnz8afldJOtJDi73lvhd7aVsxIm-By2xMzKNYtj0YNaKXcIZVCWS-e9qCe1yr1Ma\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\netag: \"c77c70c8570694d5e20553711a6d1b28\"\r\nx-goog-generation: 1759482538807789\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 231\r\nx-goog-hash: crc32c=aPUdaA==, md5=x3xwyFcGlNXiBVNxGm0bKA==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 231\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":231,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"c77c70c8570694d5e20553711a6d1b28","sha1":"72e8a99d408cca32977b7c54d2210d53188e94e7","sha256":"bc125921b5e4dde1c19d4fbc0a6ef3ea616eee9577822c96b29789b7f69ba5fd","sha512":"7e955d05ed7c1d8637b00590fbd00e61b5458aa185a87ad983780333bfc93322f40359d0fcd27b73df82e70e765fbe15c10d6707eab659b84cec6af5c57078e9","ssdeep":"","tlshash":"37d0a7c6328136fb0aa120d80c3bd203a5146f556cece2418104e7a104e7667870fd26","first_seen":"2024-08-27T15:26:58Z","last_seen":"2025-11-04T08:36:53.731316Z","times_seen":12739,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nxt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-nxt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 726\r\ncf-ray: 98b3264e68d2a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1401\r\ncontent-disposition: inline; filename=\"slot-nxt.webp\"\r\nlast-modified: Tue, 24 Jun 2025 10:35:19 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=obEsfhf4jOVejlQTHiCaXvniOkaegyj.RyHqdw1tJmw-1759900413-1.0.1.1-SmYyiyfhBkIkjmo6yUm1cKfjTjt1RoG0R4uFpcYOEIwBuhaYDisyYEZPn4ehlwIaKVV1etMHxrZ5vsKlXwgmdTGonmQx4GCzZeHDv468j70; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6449a17268b8f3221bdad537a2018215","sha1":"a4f56e8c44c4a178b9f261fb449c8fb36c9769fa","sha256":"5113196adc5f4c02ea7f5026149ce8dd97782f2bc2aa701e3ee11919a7950b6a","sha512":"803c55fd5af1caa42b842c4cc3b6e53790e3bf8e2e09d70bad65c03ec3dd77ea0b94c10397b0ec16d26da8a1b6511ce35e26b6a6bcdf303f87419e41eaab593a","ssdeep":"","tlshash":"c5019914ab51f11216f732975332f148966e7082233883708f43394c32f676f5939e03","first_seen":"2025-06-24T13:08:13.727437Z","last_seen":"2026-04-04T05:56:02.651206Z","times_seen":1579,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/css/old/light.css","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /css/old/light.css HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OsbGejdKg0N2x%2F0NQNMYEJmDd%2BMA4bUyI8qYCed5fKhxhxgKqkD%2BFJB5ouu%2FrGFiPXtmp4oKLKIJCKjEgD4NUZawizcn608X4I%2B7iA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98b3264db8ef0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":801,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"918a774c526038844073234e83746e7f","sha1":"0686e06932950193c7d8e14059fda19d5fb1a4d8","sha256":"823bb72f9ae0f0d28bc4e6b5b326091d52c9a871898fe02329167886233d18c7","sha512":"2fced9b54191a7a450ba0b701443498784fb26c17291deccb2768ee05ef41a358e42bb81d7a879d5616cf4f0696e2737ebd00277f33e11bec454cd374441c52d","ssdeep":"","tlshash":"490126b9906b8836382f97aa73efe5376261a847c001ff637fd910906f041996232952","first_seen":"2023-06-07T05:59:23Z","last_seen":"2026-04-03T21:03:38.5148Z","times_seen":425,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/js/old/jquery-3.6.4.min.js","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /js/old/jquery-3.6.4.min.js HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8vBNAXVZg8GC6%2F0CcgsfRO7pRG7eXuqI8DxjEzMPDtNqXpmHRAVUGIheYPXqx%2BUmRGUiewg4xasr2DCTLMIBJaVWNcLHX05L7tKjA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98b3264db8f40b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-04-04T05:56:02.65037Z","times_seen":2567,"resource_available":true,"data":null}},"time_used":626,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-gmn.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //interactive-gmn.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1766\r\ncf-ray: 98b3264e6894a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4417\r\ncontent-disposition: inline; filename=\"interactive-gmn.webp\"\r\nlast-modified: Mon, 11 Mar 2024 04:30:34 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=MfMgOyt4OhK1NwBEIcoFLtIcgaqHNe71UvvX5Tq2Rwg-1759900413-1.0.1.1-LMgEnaGspIllX.NUV8sj0GCNIich_3pALED.InRx.aGsshrWcoBvwdeW6jD.TuiM_PahFXaZ1_9vOc4wJ9RXfHBwsCHcjG7AmtAU2nCLVBw; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f89632ca3f4d9915c5e398c5511037bd","sha1":"c89176559445f60316d818d55a5a0b24161303a3","sha256":"35ac284ee8ca72f42f9f5fcb5022cf71af19b3b42a02c07c5dccc58ee4bc12bc","sha512":"6a6d96f23fc82a623adad91e1138a335b67b67c92827c3f9dad04bc762ab06ed42b3d598ad4566c5d714171dc31bbf9b2822a0f929bbc5aa4fb3a79821e3904a","ssdeep":"","tlshash":"a631e91c3dc838288746ad953515635bc274579e306dd169b9c59b783e3c0b4de94220","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-04T05:56:02.69237Z","times_seen":2289,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-fishing.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //icon-fishing.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 634\r\ncf-ray: 98b3264e68b7a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4057\r\ncontent-disposition: inline; filename=\"icon-fishing.webp\"\r\nlast-modified: Mon, 22 May 2023 11:27:42 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 973\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=GcPQeduM.oZu2o4tdR_grbcxCfhhl7cZFSDLbt3FHhI-1759900413-1.0.1.1-KphvnhNwZXuDCgk1FhNcEFdi3XX9Y.FPiOI58Io2v_qUoDmU13bR7uGfCVwV499ZvuMJu.uQowOJWlS09PFj7NvSG4tfStuG8U2IDsCymjE; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5eb1459aa04d9473921f63100b8c093","sha1":"62cce8098c7822d8602feeb5ef992f9154544ffd","sha256":"f5d79e08852078b4c29c8b20cc80f6d8559f749fffd6d44ad4864f7f6adf4c31","sha512":"239f4eb8378fd0c31af36aa7c374d7a95fac99bf8aafb70c31195144a893a0a32d54707250376c12ca529066af704707ddb00ffe58ee09e6deafd7ac6a0272dc","ssdeep":"","tlshash":"26f06874cb3d8b21bde5315b027571a1b8c3d468c146bd1d62356c8213ee5c359c50cd","first_seen":"2023-05-22T19:38:00Z","last_seen":"2026-02-19T12:42:40.129147Z","times_seen":1604,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/providers_w.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /assets/providers_w.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53702\r\ncf-ray: 98b3264e68daa0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=82337\r\ncontent-disposition: inline; filename=\"providers_w.webp\"\r\nlast-modified: Sat, 04 Oct 2025 07:54:40 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 7019\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ASSUiR.V1MbJHQJFt9OGUn.oIbH9W4dMjRa1hLH6aIY-1759900413-1.0.1.1-06igViA7pvAD62VUSLZU263AOfXCuoqA8XIihRtCqwMMeb2LX5f0C8SYqFljtsOKzyPuvEEcI0iGLyywWM_WYI0Zb0FOkS91uXEelWhjndw; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":53702,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9750145acd29e6a9b7a6e3bcbde97057","sha1":"fa6d95656b05c65c8cff495a33d4fc2da1206b9b","sha256":"610d44fb3c404cbaf71e48e04a3f22d24d8648df6408f58400fd52fdf066fe1b","sha512":"2650f72c9bd407621cd80cd77476859593e3fe89eadeb5f4058f83b44664bda41c689366d6d79a476c8f56bf49d3dff085a9129d4715de40b148a292c471f62f","ssdeep":"1536:wTAqrYifZ9/Y/p0rwq2viIe/y8MVWPVcAnSb:wD9fTY7q2R98McrSb","tlshash":"5433029d3f4f312d8bc78e1524a28ab5933154b48461ce4be2c09a5af37dadfc1e6170","first_seen":"2025-10-04T19:12:14.038506Z","last_seen":"2025-11-19T06:59:00.85772Z","times_seen":106,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/5.8dnJ5-bs.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/5.8dnJ5-bs.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3IMVbGMD6zUOIcsvXcZ9uIU4H8iCt35HN-lClceZHep0C5KXdA635AyzTpVhDXqXEa4\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\nx-goog-generation: 1759482538914365\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 137885\r\nx-goog-hash: crc32c=Fx6nYQ==, md5=XAHRuwz1BSYiaI94GHViKw==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 43410\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":137885,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48863)","md5":"5c01d1bb0cf5052622688f781875622b","sha1":"aa2c4ee16eb6ecbdbd3af9968f5899bdc15150fe","sha256":"3a1c3ea94172fe471e1363b145daac726ae8b47eb37ceafbf2bfd229be31d3f6","sha512":"185548a287f064389be8a4dbb273b18f62463dc852db852e45b41fdb8cd50aeabb79c57551acdceefbb8da3f9db6c0c7a4f1cad95a3573d81c19824c89fc0746","ssdeep":"3072:yFElwwQWShYCBD/hVfWq5XYpmIFN8FHgb:lnCBDrf5pIFH","tlshash":"93d3f8e83995f9626bf312a700af2417733c291b280c4960a211fdddb5b845eb17bf9d","first_seen":"2025-08-04T13:28:18.131383Z","last_seen":"2025-11-03T08:11:45.787886Z","times_seen":5629,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"17579-AwBvMnkuAzSX6cpoNztsM4YwWTM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\nage: 521603\r\nx-served-by: cache-fra-eddf8230113-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12937\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95609,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06cb502613f99040e534fec65fa725c7","sha1":"03006f32792e033497e9ca68373b6c3386305933","sha256":"e1172d3a0a208cf01dc066f0abeaf17f00264a966159a69f71947d6edcd4935f","sha512":"734faf4aff6d9c64b87f3c1320114f71d099d10c0ff9a4de3ef65e009918a5b8faecabd0e7e56b2630e1de58a5e3c2c82c9c6120241feba750f2dfc12723a8fe","ssdeep":"768:+qnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVyMW:7Oocm4FuwZ5ijINRDl8Sb","tlshash":"9793feba914f05f9d341e4d92743634693aab93cd1813c7ad342399ee3c5a1c8ad72ec","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-04-04T05:56:02.783973Z","times_seen":4793,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":90,"dns":50,"connect":27,"send":0,"wait":42,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-togel.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //icon-togel.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1720\r\ncf-ray: 98b3264e68aca0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3175\r\ncontent-disposition: inline; filename=\"icon-togel.webp\"\r\nlast-modified: Wed, 19 Apr 2023 10:27:47 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 973\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=3uRBm7nT01zm_hPXLQoz28W0HV7.X9PztOJeDuP6Mts-1759900413-1.0.1.1-lUoVgm0K0zofIZYrVnrDB.WdsBbqIvbc79QI7BhMmMQIhDhkz7fHV_mtIpBx8.eCgbd3OmJwPzICyxJdUiUArlzdMwVZjBygGH_ZUkB_HQk; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"66cb46b15ea06bfa1b86c07da00362c9","sha1":"0950b0e15be49278069109958f00c16d0e82570b","sha256":"b3f16cd2679e8bc3c5af1f4d39313fd87444f1df79cec3ce456f340edceb29e4","sha512":"3007eb8f332842d8abe9a7e54ec9c4ca756647dca0ee0ad254d76e65629081c76e890da983058c49964aaa396713d8440df04566836addc131fa5290963ab63f","ssdeep":"","tlshash":"e531d8b32ea28353c547aaf2abb263da15677bc89458e3094112c07c632a09b781357a","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-02-19T12:42:40.136501Z","times_seen":1589,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/images/upload-Slides-20240104211555.jpg","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /images/upload-Slides-20240104211555.jpg HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 414339\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jan 2024 14:15:55 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tw2e58Z94DRar8LfNf1q2rFK%2Fe3aFuyW4pyp1XJ9o9KkQ0qFjiH1QCXX9qQl2hyYUAviqHyK99%2Bo8k5ZWDt8Cn9FeeJX1XkWOR31dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264e19370b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":414339,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1900x380, components 3","md5":"94c5e00f9ec9ba25b5b4e636b520169b","sha1":"d22243f8be284ffe8a655735fab75fbcb839818a","sha256":"20bb326410b2acc7d3d1025f7946f9155873f6a5742ed4fe2748d48a78a697b3","sha512":"fc50feeacc6de774a2ce5f316baa1faf237bb080016239480765ddbc7165b8751bfef61b8b5f03824c6e9092d1dfa989268a379fdf77503832c0be0f42306fd2","ssdeep":"6144:vfoezwGEkbANVb+fPcl4b/diQJeU3mVS/xNV9MEf6uhz6W94YDj/apaHku4OVpM:vfoKw/cqb5ciQJGEXAcrvDj/apAkudvM","tlshash":"5e9423a7484e199fd98a1a963c70b2b8989df4ac40f2bb2479530c647fd23e417d50fd","first_seen":"2025-10-08T05:14:04.121303Z","last_seen":"2025-11-15T12:35:03.827718Z","times_seen":3,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":491,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"seomania.sirv.com/91DEWA/RTP.gif","fqdn":"seomania.sirv.com","domain":"sirv.com","tld":"com"},"ip":{"addr":"88.198.9.15","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sirv.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Thu, 07 Nov 2024 00:00:00 GMT","end":"Mon, 08 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"B0:DB:70:2E:15:4B:40:F7:27:11:5D:32:57:04:DB:0A:79:9C:4E:19","sha256":"43:9C:4A:24:C4:EC:81:D2:09:41:74:11:C8:58:51:B7:70:83:4B:90:EF:AB:0D:D6:60:C0:79:C8:E8:51:5D:CA"}}},"request":{"raw":"GET /91DEWA/RTP.gif HTTP/1.1\r\nHost: seomania.sirv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2662338\r\nlast-modified: Wed, 01 Oct 2025 14:20:23 GMT\r\ncache-control: max-age=605699\r\netag: \"68dd38a7-289fc2\"\r\nserver: Sirv.Imagination\r\nx-sirv-cdn-server: sirvcdn-deu-2\r\nx-sirv-cdn-cache: HIT\r\nx-sirv-server: c1-extra1-fireball-9\r\nx-sirv-cache: HIT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\nexpires: Wed, 15 Oct 2025 05:28:32 GMT\r\nx-sirv-meta-width: 300\r\nx-sirv-meta-height: 300\r\nx-sirv-shard: c1-riak3-new\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000\r\nx-sirv-deploy: b59658a69\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2662338,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6df5c2813bd59782ec56d0abddb87847","sha1":"2c38eec88a3012ce1f139cbf02e960e6aac9838d","sha256":"284741e64d8d1daf52886ffe08cd7b369439bf19bd106a307dbfb00c28ff569d","sha512":"d5dd862fdf14cc1b5ce14ef8bee722eaff09378cd0a605a77990945a690d72c97fc1b62126d0a468ff13b44f7c2b0b88ad4d7bc8e141a91ae8edfd1c76be655f","ssdeep":"24576:IegsBV/gldVMIBKc7quuVtyWopxkzOHJKbcy:wsBdYV7Uc73uVZojJKAy","tlshash":"dc2533870e0bc589dfb690f6a6726238fd1e590b7d834f424cd321b49c79d09b66f642","first_seen":"2025-10-08T05:14:04.122519Z","last_seen":"2025-11-15T12:35:03.883595Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1692,"timings":{"blocked":99,"dns":55,"connect":29,"send":0,"wait":40,"receive":1403,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/css/old/template/ES.css","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /css/old/template/ES.css HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:06 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoB1lcygupOyj4EMfFZ7fZYmaN7q9zRJcCRbHqwMwqcrAz44JfeUkGw%2F4moPwjSc8ffhxERM24IjLYnRScdNcgxavnwBEtziTibtxw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98b3264db8e80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":701,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d364abf6e0a4a1ab18fd196a60b6b8de","sha1":"290c1bdd7862b32917ba009af77a2daaa8bf0951","sha256":"df1a909bc1c782af4f881f16a327436c8a63a5ce22aaf2b36292b6f5f7467cd1","sha512":"0f61137c46c62a95fd9adfa916b5bda1d242d1f7f9e425c66c1aa96808b6d9a7048a0bf21a35fffee1c868445dc2b4aeb767c40076e07114dc9d5e705d240639","ssdeep":"","tlshash":"dd01a265a98b841a25374cbf33eae503fb30a44bc455bb69bfd8d1702f78454393a852","first_seen":"2024-12-14T10:22:37.59608Z","last_seen":"2026-04-03T08:25:11.182324Z","times_seen":32,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\ncf-ray: 98b3264e68c9a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4064\r\ncontent-disposition: inline; filename=\"slot-mg.webp\"\r\nlast-modified: Tue, 15 Mar 2022 06:24:42 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ZOTFhFcUApBfG1vI_ZohJDyiGqBJBx8UY5KUMK51jMQ-1759900413-1.0.1.1-0TjJnWDg2R28U7X3wKSD_ie6zCFA5AeJzmJQu0OebxxkbT2s2o65VdVfMMB72BwfcaRACU4HuVUIm8rpWs07uWNSiH8pFnRbKXdPpbDFiMY; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.686608Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-cmd.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //sport-cmd.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1426\r\ncf-ray: 98b3264e688da0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2527\r\ncontent-disposition: inline; filename=\"sport-cmd.webp\"\r\nlast-modified: Wed, 25 Oct 2023 10:43:29 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=q45TYZ4lY.EcoOuItp8Kj4_xNMaIQCAWPIjt1wksPCE-1759900413-1.0.1.1-U5kgtWY2LX_fCWo1d7NagFvFCSw8PWU0Ob1U1snKsmd0ARdufKQUE8WALWdjcgn5Yv2zjb7_i3IlPbGaRnQH4GPhylf8Yq71_XzVO47RC6U; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82295774a82a60a2bdf65e81aa06d97d","sha1":"ef420e886ce432d2dad7afae92992400eed77aa5","sha256":"532c5913a005178af2df0eeee8f64033b4ea49287a7eeed73b16b10d82b1b142","sha512":"d3fc69268e8c0e28191a4d5b5e78e81dde311ae00c46fe7d9a34ca60ea4c00295a765ebfa5fe914e9aaaf83007d2550b6253793e54ac9d64f63c7393835ccf9d","ssdeep":"","tlshash":"aa21e679bef8a5f10d167314b27ce200596394841c49d7e880e37b108470a5236bc1f5","first_seen":"2023-11-27T08:55:50Z","last_seen":"2026-04-04T05:56:02.702708Z","times_seen":2293,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-sv.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //sabung-sv.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 994\r\ncf-ray: 98b3264e6893a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1698\r\ncontent-disposition: inline; filename=\"sabung-sv.webp\"\r\nlast-modified: Sat, 13 Sep 2025 09:16:27 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=XbqWn0I1sZcZOh12eLggWfXRvG03GXAvIf8tYOgs1kM-1759900413-1.0.1.1-FcyywFFVA5e0R.9cwRpXMx6.0bUa3OfiFJy_DLZACZVw8U.k7lQZGHafGc4uWwdPlguM0f6jcC1d8GM1y4cU8PNx6HAiQzXtTaXPPsqVGlw; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28ec208db2d7b9ab92a7def6285608b9","sha1":"cfcd270dbce51874a5b0cd4ebaa1bbdb5950423f","sha256":"1cf25e65aceed06d6fb6898f1f10c620b236bcf94676ee585d2ed8c258318db0","sha512":"be225647c983a5047d00ea048177332fa16493868ff5e4d8f6a66eb81bbc478ec674f689ab26684148ccd9f03150384403bc69929a0f8482e2950d1c07254630","ssdeep":"","tlshash":"4611a5a715386388fc32e548b241ed209d9c206fc161ce41b9e309cd8bc211c492b1aa","first_seen":"2025-09-13T17:11:51.504401Z","last_seen":"2026-04-04T05:56:02.768458Z","times_seen":1324,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//beranda.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //beranda.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1030\r\ncf-ray: 98b3264e68a1a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2053\r\ncontent-disposition: inline; filename=\"beranda.webp\"\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=Zac4yTkCUeNYyTAA1JGVhbL6cS1j_c_UfSJD5d.c738-1759900413-1.0.1.1-Ky1qL8KALE2UQXaBKlRM7pJuAzQgQyxn7u1z2iUJ4du0cl.mvhckTfkw118ygQ3ZOdIsjQUoyLVEYoOEHfZuzAumzrFwV2jHgAkI.uxmwXE; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bceb37290ad06c67404f9731c08e7fc0","sha1":"aefe049005226e0d17a3ea12258425440ef5deb5","sha256":"7aa3bf8373bf81c320f612e1e4f74391c7a3ec04463447da5c1bc6eedf952d76","sha512":"8c00b3f5523bee63fe20d0d7d8bbb0c78babdfe1677bce185ddf64239f8c20457870d418fbd8c207b024bed76c412deb8ea8346f211c6f285c724ae8591c4e19","ssdeep":"","tlshash":"b311d8dcc1b1885dd6c078f8b1ad7232d84288f84fe61b152f387d98834011f1415b2d","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-01-05T11:56:47.782247Z","times_seen":1590,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//telegram.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //telegram.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2708\r\ncf-ray: 98b3264e68a9a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3789\r\ncontent-disposition: inline; filename=\"telegram.webp\"\r\nlast-modified: Sat, 08 Feb 2025 05:00:08 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=8kL3Mt1n_uu2zqj2oz1g6c9Av1Induaffy0Dn.fiNXM-1759900413-1.0.1.1-8AK0vxggzBM1MuQWUMy8FUU3JNUOORvCSBYkborda.QTMGxm3c1B_locD_NbTDkzf5U1LLdsN1C2asvsfQmxX5dHQ0.WYVA9J_jGRO73jZc; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2708,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1e2399c5c12deb8566fdd4d6214b05c3","sha1":"d216a047e46c89dda18734a4e2f31c9a15eafd8d","sha256":"8f9b7a09a86f3bb12c36874781e3039d33699017b17839b2853d0dddabdf5155","sha512":"73e8643ea7e391b356af7100969df7769cd0c2703c2e3a6abc4a05474cfe480f2d88b638d18a050400c005ef2bf94b48cc96d63b64780c319cea6ba5b873a19d","ssdeep":"","tlshash":"1c515c240fb5b31454115ef54293cc30c61c81adcfea1c6f1f2750ebf9b82620ac4636","first_seen":"2025-03-03T01:41:44.876148Z","last_seen":"2026-04-04T05:17:57.695595Z","times_seen":917,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/images/upload-Slides-20230106215915.jpg","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /images/upload-Slides-20230106215915.jpg HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 278131\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Jan 2023 14:59:15 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQtA%2BlVV15xCib2cgBeT8w%2BpcMXXg%2BxjqhGi9nHPWycLih6fLtsQkWoswq0ipzTKULvVCnU%2FaTdqKJ4vaVP8zQ0%2BS7vo%2BfDzIYFu3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264e293f0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278131,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1900x380, components 3","md5":"6c1703559cbc8a6a2abcc3dfcda44ba5","sha1":"0072642eb6b55af85b876dbfd44ac62d355906d0","sha256":"c9d7ff74e5698d79c1ea2a20df10b801078d554e4e074ff374fe31e0901b577c","sha512":"869b9c4d5b3cec905feacd3d962c1c155ea82cec28381a85edefed05c07aa196898e432ff357efd90f2858a4c94dfba22b4f4da42a701d9cb0e946a3e082ce38","ssdeep":"6144:/vysegxRbcfGmPK5DQKWgVUU/n0AfUq6Qm/efsp3lb1yzVY6CB59:isegxRbcf33KnLn0AL68fs16qh59","tlshash":"49442341ab8b5f3bfb0655f136525c23382bfeaa9d3470dcadc30980b9d1d58220ae5c","first_seen":"2025-10-08T05:14:04.128177Z","last_seen":"2025-11-15T12:35:03.904784Z","times_seen":3,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":472,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\ncf-ray: 98b3264e68eba0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2758\r\ncontent-disposition: inline; filename=\"slot-wow.webp\"\r\nlast-modified: Mon, 28 Jul 2025 04:39:12 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=6A.B88VLe2vwmCeoOQTExo5kSK4wLwLuC4rL1jh.Lhs-1759900413-1.0.1.1-KjvrgQojyXZfid18xVwPbLQoAm3NJLZuF.Xx9JpF1qBnGVQhdRfYMAqjfZY52RX.itl0SbJSc2ZQrRR43AoI6_v7JJXvz1eVJ9yFPrCRixU; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-04-04T05:56:02.702043Z","times_seen":1463,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\ncf-ray: 98b3264e587fa0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2690\r\ncontent-disposition: inline; filename=\"live-sg.webp\"\r\nlast-modified: Mon, 15 Sep 2025 07:44:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=SeuY.5hmzTP.2sDCoMQwpLZyQLwNQeB7CdTtzUPxFgw-1759900413-1.0.1.1-1cPSl4.Wyp8RXPMUo.pGoL7augeeu2nXQ6yu0MsBu_.eu.OmmbH9xLZrNkaF6kRD0TnjlBa8YCJyf8eR.609GA4O1GCy3dFQ.zQ9G2qXqAM; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5226d29aef9aad472795f18b79eceaea","sha1":"ce47d4a7ee1d0c56f477dab5ff66c0de15432cb2","sha256":"bc4de63c2fcb87195d112cb068604727015cbe7cc14bd6c29c83d53f3a7aac2d","sha512":"f20e4f162b5abe9512de4f5d2bb82d8f9ba17ec199e74d0bbec14d83115baeba1fa81eb37c5fa9bed8c2b206844d95d92ac52ed1036d8f0623b83ac7d3b083a6","ssdeep":"","tlshash":"6531e92086baecedfd1ab65d4e4e0ea4452850a661808debfc1fd57021f0f6512cc696","first_seen":"2025-09-15T13:55:36.940008Z","last_seen":"2026-04-04T05:56:02.656221Z","times_seen":1329,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//events.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //events.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4764\r\ncf-ray: 98b3264e68a3a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6850\r\ncontent-disposition: inline; filename=\"events.webp\"\r\nlast-modified: Wed, 21 Jun 2023 06:13:46 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=eeoU1NDJrXzrEadb.3D79QSCbJ5P81..SQF3UQnfE6o-1759900413-1.0.1.1-g8nTjx9zyZc8fQHCI2gFTc6tFao6aQdYZd_XSmy4J23i58qgp6hWiguhYZXT5LIe2yDQ8q11ZZg3M0E_syHmE0ZnwQiOuJa1jVzvfV8FoBQ; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fcc8214161918b4a6454d0012185214","sha1":"ef1cb58cdb13c4eb20d829b0a1e5c0c7ad07f1a5","sha256":"50bd32098504e3e1e509c05915be1871628a9486e8d76b84f13384b27df09c62","sha512":"80232fa4bb935ba30c39608c09de8d0092f8a755017025b43466991cf82665d7da23e98170baec45aacf6de7b67e0a652e9e384404b2a1e1e44193a5f60d15c9","ssdeep":"96:5OAObmsqYZpT6KVsJjm5Odtk0HxVGBvC5wyJ++D/Vetw:4isqYbu9q5ONVbxJ++D/Vetw","tlshash":"0fa18f3e4236d24b80457babc61d963a7753358ed501feb40fc32752d1758f602816e7","first_seen":"2025-02-01T22:41:26.02949Z","last_seen":"2026-04-04T05:56:02.700602Z","times_seen":1868,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/telegram.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /kontak/telegram.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 276\r\ncf-ray: 98b3264e68e4a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2476\r\ncontent-disposition: inline; filename=\"telegram.webp\"\r\nlast-modified: Thu, 13 Apr 2023 05:55:59 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=s5J1kRWd5eQwSEAEPrfF54klvfHbK.mlq9_ZkIh7F2I-1759900413-1.0.1.1-LdmVYXRrLXl77qnIxO3A1fSDK36bQS2aAzC.oBJwNtUO7h1DnAJyvnXmLcShi7dylztrmAwvzzzcUVzKC39VShU9P1NKd8927.qXEabLaQg; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c316d773fa9836d1cf1dc54ae77a8d1a","sha1":"2f2ef3bd745077bd8f3a7c83d83153391d4a73b1","sha256":"0d45af6dd72282092f374a0f0da9fc1443188ce7e240691fd7fc1f67c240f430","sha512":"a7eb9648a5b6433f48eefc41ca6fc17fbec6c2136c398530449f7284c1602f6d2ca859ba0c27831d69dcec5c12d05014d8146e9a444f3715d5db736cab8c79a3","ssdeep":"","tlshash":"b9d0eb34336005eeb068738d639c09000601fb439a02226114f388b922006dba40842a","first_seen":"2023-05-06T03:43:35Z","last_seen":"2026-04-04T05:17:57.795773Z","times_seen":1363,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/USDT.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /USDT.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1364\r\ncf-ray: 98b3264e68e1a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2462\r\ncontent-disposition: inline; filename=\"USDT.webp\"\r\nlast-modified: Sat, 19 Apr 2025 09:58:57 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=YpnpOfl6Gv1cKyXbC8GvqobuZS7.wR__6wZL6uXs.8U-1759900413-1.0.1.1-2NkQDlr1zz2RhXes7wAYwLyzvY81XmAwfl98Y0zGI0oLihc9a_1e6.SqqlAm9lUjqmiyHyuUS.OBZckzVCYUGinNW_PXwMpkrVgjxr1JgY4; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1364,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ffc6f49636d50bb237ffaf9570acaa40","sha1":"0c0d8e51a3a2d939f0d747ee11d3fd9abcda23ca","sha256":"1be377c146f0a2398cd62fc5cd10dfcdca48be513cb3c0762fb87bdcb652b22e","sha512":"d0d9f24d0f74d1e9fd0cddd2eae301212e176a1e61fac13466c65a406195468aa5055d48af4df00fd1f972e4519b5a4d205236de5b9f31b6750b64e8fa4bc80c","ssdeep":"","tlshash":"2c21b8049c422ae571e31a23a1bedac394a1888369bac5c12602c32276e26027156e4e","first_seen":"2025-06-02T09:38:49.675951Z","last_seen":"2026-04-03T09:16:27.575758Z","times_seen":444,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:34.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewahoki91.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 12:42:07 GMT\r\nexpires: Fri, 02 Oct 2026 12:42:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 491487\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-04-04T06:20:04.102996Z","times_seen":12680,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":80,"dns":1,"connect":20,"send":0,"wait":21,"receive":23,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-evo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-evo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1224\r\ncf-ray: 98b3264e587ca0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4930\r\ncontent-disposition: inline; filename=\"live-evo.webp\"\r\nlast-modified: Sat, 24 Dec 2022 07:19:19 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=fhjNHI23z5tlMS8QADRwLgW0FIBBYSH9RrShjYvQ9XA-1759900413-1.0.1.1-MtPBkBUCEoHdgShRK8Jbpk_S8BRfepEDzNX1jd1h0tqjYHMmELrVxnrpSE.mBlLElPhLoigiEulymjV1xcdb3ot4ZBHKRNixInrEZ_5uJno; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27aeaaf4f87ea70e9d8f179dab9c1d6","sha1":"acd3b82f10cf00f0487ca7fe1e22ad662d4638fd","sha256":"9d16857bece7fbf86f719af897f7a7036dd151d2fa4d31e2ae08f863e0dfe179","sha512":"c00bf7d196964621d8aa2659f4e940e3726d152367dd270948fd168ff06397f1e1aaafe70e563bc19bfe8268d8dde742520da92820a36fde5f1e11897ef6ba19","ssdeep":"","tlshash":"af21b46d4a900818694d3ad413260f2b3361e61afd47c8e266ad22e8b1228184e2b8c4","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.671791Z","times_seen":2372,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //sport-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\ncf-ray: 98b3264e688ca0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2245\r\ncontent-disposition: inline; filename=\"sport-sbo.webp\"\r\nlast-modified: Wed, 24 Apr 2024 09:57:15 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=xZ1TR83pFY5ejIGxa.5C.iYuDMOnvkqHM1MvHaPNaCk-1759900413-1.0.1.1-EuZl.7EIbQieumbgBgD64.do5VUPN7E.tArZkLwmz0cF_jvNcMj7d2JmTpNu4VFGMuC3lsvgdD9aaYZor1ckYDjW1U__dcs1Vf2Xwm4E7tA; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec313ad70ebf040f8a7f198d4b08f5fc","sha1":"6dd5e6b742b5b6f4ddfd36a56e31591702468320","sha256":"e7e3ff1ffc4a20c85261693b5e5fb017db4495990484037361699f2994938389","sha512":"d0ef2625a6b0df028d59dac949f08064bfce2f4d1d95802ad7425272d270e5c3f8afdadf031cdd3cc0018d666a91c7c8fd7483ee6dddfc906563bf2b2015fbc3","ssdeep":"","tlshash":"9321eab1c714d61df26c354c43df19445a3e9a4f6407e333ab93bf1143a03b93215552","first_seen":"2024-04-24T22:56:01Z","last_seen":"2026-04-04T05:56:02.703425Z","times_seen":2301,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/images/upload-Slides-20230829180854.jpg","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /images/upload-Slides-20230829180854.jpg HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 479607\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Aug 2023 11:08:54 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CKwv5s%2BvYyqba0hvU%2BKa80jGOHFTgIWGhQTv86jxhFmWN5DvgmqgpfZRueMyPSJsUzcQlsOCOWcgI0K%2FvMbg1Cu5QtBX9IWbIBPjGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264e293a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1900x380, components 3","md5":"365e1222d0d82d12e3551a2c9102c07b","sha1":"77a9ab5e3015ecf80b815ed7461c62620b4c246c","sha256":"d8ccd7fa99b92dce927e0f8e1a2128b571b6d82507315994c75e6fc99f26399c","sha512":"0cb8cc99fc3698a7d1e043c1255f91d7565079968f99ec3c22f2abd2750a5d30549b71f1f22d343a698b7491fc45323ca06c8ffdb117b3000916573c558a272c","ssdeep":"12288:xiEk0ozLEyjpgtqP5MOlqQtsJ5rV0kbwovE4NL3Zvl:xbczYyiq+OIQ416ah84lVl","tlshash":"f3a423c483eb118d9208745f0f4ea0abf32b93861ed9427b39d4cf9a951073efe91a55","first_seen":"2025-10-08T05:14:04.136614Z","last_seen":"2025-11-15T12:35:03.848653Z","times_seen":3,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/mproviders_w.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /mproviders_w.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 82162\r\ncf-ray: 98b3264e68dba0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=165221\r\ncontent-disposition: inline; filename=\"mproviders_w.webp\"\r\nlast-modified: Sat, 04 Oct 2025 07:54:58 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=QLklWEPxw_4EbSzgs7TJZyBynCfJ93lDqobONm3kK1k-1759900413-1.0.1.1-UujZtFSkR58Q3IffOWnduy9mlrXFYq5PJQhpoDJ2UNTEwwrngZYXs7xVy6iaRsmFhKud_UaXJDVcSfVtE0X7.Fb7uEz7.5wx6fQFknuMd6o; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82162,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c22393145b241fdf248f399cd0401819","sha1":"e65e664edded9908587655c49327dde89290da12","sha256":"7cfe4d0d165f422679acc6f9aeff68d78e38c2a80570859a5d980c039cc9d5a4","sha512":"3a9e64f3cee26f345345817ac44075a690367938044f2001ce2c6e63ea527c59feca946c2fea26c1fb3356f37c6e2bfbceb3d8a9882049d474b4c673bac36b82","ssdeep":"1536:WGWabpVMdKSktshGEQUBaJWrCOtmm6ILi7/jlJHOIkxiMf/A9q/ZO60p:WGWabpWQSk6vIsrCOtmmI7/h5OIA/M6G","tlshash":"168302c024f7b24720a3fd5edea63ea7a76073e92b1c4745732752a49613ac446c12fb","first_seen":"2025-10-04T19:12:14.10067Z","last_seen":"2025-12-21T17:00:30.846457Z","times_seen":112,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCjC3jsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewahoki91.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30508\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Oct 2025 15:24:57 GMT\r\nexpires: Wed, 07 Oct 2026 15:24:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nage: 49718\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30508,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30508, version 1.0","md5":"c6bd3f0bf07f006f394988f7ec53b24d","sha1":"1ed27190e58308bbc4f0f14339c9672e841ff42a","sha256":"428ec293d3b79af16abdca704f630c6c951744f572eddbc80e970bc9a94a33d2","sha512":"c60a4f61b6c53f44c53f3c58e19c67ecb04f01f21656ebc27e4f8f26288e75367ea598420086da791f0e840e14b5979e3a773d32748a39e688ee1cc563e26e5a","ssdeep":"768:LvTtYZduSuUagqNr6VTkl6yuwBNFOHqAr5OO8t7:LvJaBt9qNr6V4syuwrFOKXO2","tlshash":"e0d2f15cfee3912e549bcd70befbcbc08c836d251cd579ac2ecd424649a78883909667","first_seen":"2025-09-02T21:16:23.972354Z","last_seen":"2026-04-04T06:20:04.063566Z","times_seen":6946,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-saba.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //sport-saba.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1770\r\ncf-ray: 98b3264e688aa0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5247\r\ncontent-disposition: inline; filename=\"sport-saba.webp\"\r\nlast-modified: Mon, 19 Dec 2022 07:31:08 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=7a_eZFBKzvV0YN6M8bhjDK27Pr66J6tYZo98ShjLZfc-1759900413-1.0.1.1-ehxC.5dZGgauvCrVHviGXErjvZNRJswaPevp5QcA8nYc7CJnSky4BGI86sVq7TR.7nGmW.nWhWbgM.kRUYRGxeBYQnvqz8jTe1eaiEVReGU; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9dc335c8ab6468b47a49e492aa97af52","sha1":"e8982a717f2557a1242a1dfd4511ceec6b47cd70","sha256":"277b290785f86422c338396b72410c9dfb7f0672b608e6808f41365b3579f26f","sha512":"1fe4fd928f064b203b3f55039e8fe0a6f6b86084e50e2535b9d03e2a009b674ed638056c6145fcc9b99a3df4dd7b787b657f2396ff8dd56f8a0907d1a3dfcf29","ssdeep":"","tlshash":"7b31e9b9bf1f80f8493220554d34957afc9b950cd21f2d13d2ab1be4460f6aaae22cd5","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.754582Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //interactive-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\ncf-ray: 98b3264e6898a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4064\r\ncontent-disposition: inline; filename=\"interactive-mg.webp\"\r\nlast-modified: Mon, 10 Jun 2024 04:52:31 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=3WnZL3S1qJbGfOdGCjNA1vA4qBf09qsigjGwNajFjfY-1759900413-1.0.1.1-Xs600.XSwlpqvwdKZURIVTB1bhbZklgYOhg5UIeSbZJ7ChRgynqaIFQQw_9Ko7Gpui6h49fkGlSNQlSr1KMRVWGoBqCgGGqyEbcz.y4UjQY; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.686608Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2836\r\ncf-ray: 98b3264e68a8a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3881\r\ncontent-disposition: inline; filename=\"whatsapp.webp\"\r\nlast-modified: Sat, 08 Feb 2025 05:00:03 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=GfgwkCq2riDdN.Ckk250vtThi_mc5Od2wH6aPX0sNoA-1759900413-1.0.1.1-MIKK.t9u6J2iSofVuyT9wQzkOTZzExPbrQRimvOkms6a7hFbZbwzQX6NRO1L7mIK_FqdHKJw6M3RC_WzW8aVIeKJtOoB9deGNkCJNw8MtUM; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40e64453edc6a67b90ef4c57a48bc37b","sha1":"710b350b599a185717514a7e487819741d8c64c9","sha256":"4156ca22a91808f35d7fb2f49daf3a58db2e03489358b4998caf039210e28d27","sha512":"cdaf75fc547433774eb0c20ae8e35375ec0a3bc4fe1e5056b2fc5cc1210ecb6d215544c7d6a4a067bf3fbc656cfbcff56eafd9b5be1a8bf41026b2ac73b1133a","ssdeep":"","tlshash":"6c516be5d8f39ba8afbd0005dc3ecc1809b120810deb21079ecb03aa06871a4ba53c22","first_seen":"2025-02-07T22:02:30.786218Z","last_seen":"2026-04-04T05:56:02.676104Z","times_seen":1436,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/capimg.php","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /capimg.php HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21a7Ahk4cHpem%2Bx%2FS12Khi83lRYBTMkTbWuBHXLCRcC7OtMLaEaZyDL5WFZ3PQOkrr5%2FXwn3Uq%2BNMZRN0KCLYikg2bcsuhc5DEdALg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264df91b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 8-bit/color RGB, non-interlaced","md5":"5597a14ff06758f1cd7c6045c8f5b070","sha1":"fe5e70af3ae3fe34b3244a1c6a4735454af42dc9","sha256":"6e68c013c56ae2da843f81246dc46793f3e8c9641a6052f609ad328614e96b6f","sha512":"bf31cd7b21ac4927190adca9caa921aca15a3d8bd6de4bd2e3962a4324120931ebd5529b8f2f838b21dddb7ef42be7fc40932f2e70bbfe0b985d4889057bfa23","ssdeep":"","tlshash":"6a019957bcf14d64c72e5574034f10a7612b170e40cf62193844d24f2670445de58bdf","first_seen":"2025-10-08T05:14:04.141001Z","last_seen":"2025-10-08T05:14:04.141001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\ncf-ray: 98b3264e68cda0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1967\r\ncontent-disposition: inline; filename=\"slot-hks.webp\"\r\nlast-modified: Mon, 03 Feb 2025 09:16:22 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=KzDvriR5tVLFTTAVVS.OhmlYnqt69Vg.9UTEyht4FWA-1759900413-1.0.1.1-upt8C_56h_dpXDYRLwMFOesIbnZKIHRKTi7AY8wuYIYnDb3z0Rv8KmbSGhBq8KYHB3qYxUOIRbBsv1WFrsNkGX.keIuqpDRybYHF5EySby4; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-04-04T05:56:02.781389Z","times_seen":1793,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //interactive-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\ncf-ray: 98b3264e689ca0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2786\r\ncontent-disposition: inline; filename=\"interactive-pt.webp\"\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=xxkE4k.Zxk6M3O8BpyAP6KN6Jz0mO24c5LMHss3k290-1759900413-1.0.1.1-WyAkC.xZxn_y_gho7oLN0o0Urj4S22HJ3Y7XmEZ9wELo1SX61PBJEv2HCGzbelTvQjoE5AKb0wwAr9.m3PT9l4iGZeoZOx.J_R_lfZAClG4; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-04T05:56:02.644255Z","times_seen":1648,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/m/capreg.php","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /m/capreg.php HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zU4CYpfsNbuaWXOyC1dJjRkkmw5d3akjuB1E29B64IftjLhKA3A88y0SCI0oWCQGFDgcjh4voRKBDwqyq3fNDRbGOH6PTvzT4F6cig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264e09200b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"b82c3694f106e70e6f60b3d0860356ae","sha1":"74ea8ffe09e1d70bdf0b48250a6cdf41737765cf","sha256":"14156969f2d9a23b73e58e29a30b681c6ebb3efa244b38fe93230d40adf1d039","sha512":"7bda877d3cdbc6f93f5a46a826f91d9871e48e509afa71de31e47edf488bf005c52233e269c297ce8e2217c1280a7d968d5e1bdadaed01a316f0635b24c9f1eb","ssdeep":"","tlshash":"31413b8933b9de7d3c2991b55924c54c21e203f7200fea80d9386df525509fe8e5fa9a","first_seen":"2025-10-08T05:14:04.142202Z","last_seen":"2025-10-08T05:14:04.142202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-sport.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //icon-sport.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1662\r\ncf-ray: 98b3264e68b5a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2886\r\ncontent-disposition: inline; filename=\"icon-sport.webp\"\r\nlast-modified: Wed, 19 Apr 2023 10:27:47 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 973\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=Kykc4uPCXhLOPY9q.k9TKvIRsb1JdB7UBPIsjYToze4-1759900413-1.0.1.1-GSsOKO_WkZj2DDeQyvDhUzWyHRr7F3nbCEFnMyOWAgQYdWo3Goir5fNRl_XxY.aYVS0OS_uU4fCHan6_KWuLlT7gUZG75MGRvfoBOZS6DGw; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1662,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4799090486d8810b96f35cfe2294aedd","sha1":"54d8ea61bf71ea1109d543bef3208ec80d968ce8","sha256":"acc4113c310a8f0286b0e453971cc280c5b0f52b9a1257bfee63707c8bc102ca","sha512":"b1638414041495dfea39c87b5ee6e8e60e23deb61879543794304041a0e4ce48f89b0d0481d0db8fd74a7fc01b454912f795a883ab1f16dff1a0978140061b58","ssdeep":"","tlshash":"cf31d8a6951f6e1103f127c4120d42a1833a8fc734e28afe66bba137d47705c28dab9d","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-02-19T12:42:40.138111Z","times_seen":1606,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/new-webdata.php?content=data","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /new-webdata.php?content=data HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:35 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYKKk%2BenqpyfgsbxWfwsWiq9%2Bhxu1w46BQjgFgo5eZdSGaUhN8eUdQu8ZaLluFTZBoVQ%2FEuZ7i9jfMnwGzstc8PGbMLaBxK2BecuYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3265a3ed80b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"913fabfb8d7c44460cac878cab7f839c","sha1":"6a31a6deb9385323ede5cb2fc2273b11c629e421","sha256":"b6824cdc7d1c076f82e2162fbddcfb53db0813fec4ce2e69e17ff6490ea6d3b7","sha512":"4513ebee841901aa3538d617da02f3fd11c8511c95cb2e5ebc2ba4376cb3d1889953956d21b1066233629b7044e5f149d8ae2a37b05ae67dcbce918fb3bc7530","ssdeep":"","tlshash":"2bb01220d3ac4d43090886f890ea676717c064735702753933e04c0c0b77b3f21a840e","first_seen":"2025-10-08T05:14:04.14422Z","last_seen":"2025-10-08T05:14:04.14422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/css/old/variable.css","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /css/old/variable.css HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ASZK8Ycq7G%2BCieQtadBAzMpIpY2PKLOESekjcflBT0dz7HFGq2sV8tMkn2kyz%2Bbvr1NTfudSnu%2BoZCOhyIqBjaDCNe9P%2Fp9Gv7JHvw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98b3264db8eb0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ae5328ef8b69161bcfef314f9242715b","sha1":"3c738ba67d113bfd06bd99816fabcbd4af5c046f","sha256":"0201e0d85b7cd86ae9bbdfed466b52df0f3ee95d363a36cfc9630e3760554039","sha512":"592bd491ffde13970beb798f9d66be6265db0d1ea69c7d660f49dc93b675e08b506a16a266477de6154ba4e9dc9a8786b4d740b4e994a4b6cd7ef3b2e62036d1","ssdeep":"","tlshash":"24114f159097a8bc763fd5b267ea5b0be22c5d1ac80a3f4e70ec75e04ea12ac1077c64","first_seen":"2024-09-04T08:18:43Z","last_seen":"2026-04-04T05:56:02.662939Z","times_seen":1690,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/assets/24h.png","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /assets/24h.png HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 11955\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Apr 2023 07:14:00 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aaZBReI2f8afSy3g4v35wE6vf7FSkQB2CWNY5fj054z%2BX1t5tguqQI97jf4AkaTF7HzldRhoMUWFobVczlOExvlIVQcSzZ1RmVqypg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264e49550b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 193 x 122, 8-bit/color RGBA, non-interlaced","md5":"5b0a3d535cfbcabd0b37960167c67ed8","sha1":"622c2616c39007e70e676009afaa68438482be94","sha256":"7cf851a08a27bb68c7b4176852fe96a0e09593d85e7704c2acd862660de8ca62","sha512":"defd5cd4950bcd971144bb8218911da30c97c94c51916a5e1a618084ffee88dc8eba8148b4bcedbbb8e76f0c52cbe0f1a08333a829c7200d195d5bcdeffe1044","ssdeep":"192:8wzGVKv+l9Db0bVj6ugjkiKAUjAhaXA3afkbNaV/8mmHT+8Av1z5lX:8wz1v0DYi1aOacukdg5lX","tlshash":"2e32cfae70e1e0f93ec0a87a806617837892e90695500bab43e4c1d0f7f7f648794cd7","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.684539Z","times_seen":2817,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/1.BLnOvpDN.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/1.BLnOvpDN.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3IF0DubKJBHsQuWsiDXY5OaQjDLqJlhU1Q9037v19lNyRGdT6w23IbFNMcE2wSmjYek-pe7tw\r\nx-goog-generation: 1759482538811761\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 52584\r\nx-goog-hash: crc32c=Ymdj4w==, md5=1Hvwv4e+jKLZITs2SQNSng==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 19069\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":52584,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36637)","md5":"d47bf0bf87be8ca2d9213b364903529e","sha1":"59cf032df1186a868935885ca206406913b23b31","sha256":"ba29c1aac1d0647c2449a5c6c8e7fe866177b11c428eba8c9dc2a56b42b65aa2","sha512":"af830764d7133b6c3e1b5f520f01242da9a4f12c733abbd09a5f69629bdb6400426d30ef9afd2c2cbb296d42ec83a633da66c63aec6bc4ddf4baf0fb180b4d11","ssdeep":"1536:KNJ7de1n8vVhnm6qm6YwGnUwNs81YNu3E1aJ:EDe8Nh2NYwuNsLNu9J","tlshash":"40333bdef281713557e314f3a06fa006b636692c385cc0b0fa28dd9925de44b626bf6d","first_seen":"2025-10-03T09:12:25.815123Z","last_seen":"2025-10-08T12:50:10.629897Z","times_seen":493,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/9.qYTqns9Q.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/9.qYTqns9Q.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3L4Jt-Qc5_ckA3vZcNYWFHhzh7VXwarrP3IXwDHB4B_fZqkLIZb_Rfv1fIdy-UdWeQl6LADkDFfFDliYA\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\netag: \"d541ce2d754402b833cc65b76eaea2c6\"\r\nx-goog-generation: 1759482538871727\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 40\r\nx-goog-hash: crc32c=jQQqwg==, md5=1UHOLXVEArgzzGW3bq6ixg==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 40\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"d541ce2d754402b833cc65b76eaea2c6","sha1":"c36a92a0f5cef497ce42b1e8b4c72c8d9bd3786b","sha256":"80353503e48ebf6c2ae9f70184d3e758f64bacf48afe147e039df807509200cb","sha512":"f8cd5cc49f9276c580419958bf312ee0a311194fd41d116ee709e56401d769511700031ec9f3e6151f8da6b7e13b16e374a231e31cb00b92413ce5c751c2a0b6","ssdeep":"","tlshash":"f090044530d334753111111c453f5c0551144c4c05d55730c010d5551f514f4571fc4c","first_seen":"2024-07-04T09:32:22Z","last_seen":"2026-04-04T06:42:31.141064Z","times_seen":24259,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-l22.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-l22.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1410\r\ncf-ray: 98b3264e68eda0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2410\r\ncontent-disposition: inline; filename=\"slot-l22.webp\"\r\nlast-modified: Tue, 15 Apr 2025 05:37:33 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=WbW5xvuyvdw4.ozN5LbafoSaEhFOZyOeV7WN5Q19JdE-1759900413-1.0.1.1-FeSDoSi5BrC_OCJ9GPe5Bf.zrr6Irn64VQdjExIDJCnfIO7ep7UJScplCR0nXPAD9GlAK2MAdj02YIq6WUxRrnvfzO5vmdjsVjIIVzwA6pY; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45b89f0c6420d854331da394e750ce79","sha1":"40b7d0ca3dbec643333db69e8418f851a84220e3","sha256":"8973ba339bd3e91614797a78d3bdd3b39851b72fea3ca7d361e5b57d667168da","sha512":"be63c0770d32b2909e12d918a576275d8b4ad5f10f30f3dfc0716996e07b3510df04a746a1624e7a51ec67b72b718ec1f956d46775324c00c614c1e49e9e9a5d","ssdeep":"","tlshash":"0421082b71acb6301ab0644531085eda9783b419f0846c11cbb178699bbce8ab6699f3","first_seen":"2025-04-15T12:52:35.808781Z","last_seen":"2026-04-04T05:56:02.717596Z","times_seen":1663,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-opus.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-opus.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1330\r\ncf-ray: 98b3264e5886a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=4303\r\ncontent-disposition: inline; filename=\"live-opus.webp\"\r\nlast-modified: Fri, 26 Aug 2022 10:55:33 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=AAg9AIjalqmUWlKi8lk.3Ir50ZlZIAffB9eZgxKM12A-1759900413-1.0.1.1-qkSh5sh_tm0Xih5kxPzAx4L49EhftlHgUHfAzx5u5lscmUDPu5k5xswmr_pkcsvWs5.xE0bdLbhmYwIYFfu_hhml05DU.GB4ML6t4Jx1jVs; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff58f7baf1903414b9e121fa194c01a0","sha1":"9686d2811e39d923e00d3573d187e84dda29fdba","sha256":"d68d2439ada8dcdb278433a33da32e2659f34ce90cc7c9023180bbd3dd92f54a","sha512":"a83b25ce5d697a2912ce51e8edd60e1d9f1385f2b85dfc10e69ae3b3bb006c8816d3cefb0e85846a85644b6e5d65ec4cc372f2383971d8ee9fdd4a9792ad0701","ssdeep":"","tlshash":"8221c874dbd1c52db42875508b966070006d50a63947e7603fa39f7d12920f547ff24f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.704742Z","times_seen":2371,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-ws.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //sabung-ws.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1366\r\ncf-ray: 98b3264e6892a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2970\r\ncontent-disposition: inline; filename=\"sabung-ws.webp\"\r\nlast-modified: Thu, 13 Jul 2023 07:34:01 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ActH7WKRUfD2cw9YP_ZlNhHPeVBLiLNmeZPSenTebC8-1759900413-1.0.1.1-o3blokGBmDLRvW6jLoMqO_75LA0dW4fpvy7iEde8mCpuP4Afwp9jNAN7aktjrltxLi4gq3zEPhkZI0dDTj5URivttvORwO_3AnjCg5HWoKo; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12e10125b7a65d74f94467a847dce8bc","sha1":"c67d4b17bc3162371c2c2329209bbd39d6f7cb95","sha256":"e86efe377195faa9e5f5709ca33a5bfaea418399ec78379d41d34c723a3d3060","sha512":"311f0626f696dff522740af39c1d9aa57ea4b1c569d7614c363493fe0839de04e26ab6bb84c17360e3a015eaca90196d540f02221c47c5ceb281004d12cb205f","ssdeep":"","tlshash":"e92108b7a374c3b2902892a8508bc68c804d1bca5aad0178fd7b4cd034780dc5d8a9db","first_seen":"2023-07-14T08:22:56Z","last_seen":"2026-04-04T05:56:02.767518Z","times_seen":2357,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//facebook.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //facebook.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1562\r\ncf-ray: 98b3264e68a7a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2189\r\ncontent-disposition: inline; filename=\"facebook.webp\"\r\nlast-modified: Sat, 08 Feb 2025 05:00:04 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 5527\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=L0CreSJoY7En5cIZmClIEku4lSwyuttCAPciElaJyb8-1759900413-1.0.1.1-6Nc8tW.9FkNlbNGjwwoDiq1ePmhI6yWo7N_637r.IIM08lAZJL5iNKQfF2ROCWTGYscdjnC.mRqV7ZkLQXgVDdF4mr03QtC1cxWpQ5vkR1s; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9bdad2f82638c1e9b276f27678da7370","sha1":"8afba01e4fc2fa89e6f8b9ce777dee23e21ec1c6","sha256":"ad87f81773c22c3b4cb196bb2fb36c8c13217ca1de4923ea3a606c4602430a1b","sha512":"969519c04410a76c7ccdaf69394956035eb695c462b4eccfbed2a66db5f0f1cd1c0da6c8523112434c2a6063ecfd127357c5267b04b50a18f93cde28fc251166","ssdeep":"","tlshash":"6a312a9b289538196dc91f1932335c284956a944c385294c45e08c0bc6aafce830a80b","first_seen":"2025-03-03T03:02:38.50188Z","last_seen":"2026-04-04T05:17:57.812967Z","times_seen":412,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-sabung.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //icon-sabung.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1448\r\ncf-ray: 98b3264e68b9a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2668\r\ncontent-disposition: inline; filename=\"icon-sabung.webp\"\r\nlast-modified: Wed, 19 Apr 2023 10:27:47 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 973\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=xMWw.kLiZftuHF4vZSgXwNn3YxCPxG2w9dph9.fBUuk-1759900413-1.0.1.1-hyWQB4LDYk25bIIwFTQFU_PAweiz3XYe7PC7nAWPjqPukLQEVUrpjnFSpBWnAbcw3M6GgelY1Zb0_TPwi9ZRn84n7pThGolwjPdkurUUc3A; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79aae3f01c9b5628890820020a6aecfe","sha1":"603070faaa3f2fe960669cc5a02bc5ad405a7abc","sha256":"47c9dc87b20eeeb920089f52a31b056e9398ad2218702278df70b4906fcec95d","sha512":"15e6a5a13d089fb159568db6ddcb532a6f5c00f4e63e1b5d86eccbccd2cb343f16f61ba1a232c10c26f706da5bd7ebe9ab19500bcd8dcbb27d53ffeac771672b","ssdeep":"","tlshash":"9531ecf2857003a34ee330810d1446c9d0f12958232f5d01d736f7783d9ac75892e69e","first_seen":"2023-06-26T19:27:32Z","last_seen":"2026-02-19T12:42:40.12972Z","times_seen":1597,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dewahoki91.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"38cf3-SvPX4VpqOAxsurukLprfMwtJ1Y8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\nage: 2478418\r\nx-served-by: cache-fra-eddf8230134-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65335)","md5":"d603cfa239a34ac65af566681e7aa3e7","sha1":"4af3d7e15a6a380c6cbabba42e9adf330b49d58f","sha256":"16ee7f3d53462650bbd32e263c48c0ea759574fcf620c681ad719008912c461a","sha512":"8868c69b0226d541cd692bb088d15f077f87a734ff60b24c8983cace54045694fa1568b9adfa5bcab06e4cfb1e49c382581911b6cad121bad3cc9a50d3621a2c","ssdeep":"1536:Xa/tfXbf98fOdBfvO5wlP79y9A37onOHFsY/ElV6V6pz600I41r:itfL98fVnOHVI6V6pz600I41r","tlshash":"c33482d6f590317d9ca7c1499681fefd866fa985cb120aa6f003776847cabd30922dcc","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-04T05:56:02.725929Z","times_seen":3630,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":92,"dns":54,"connect":28,"send":0,"wait":43,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-pg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1740\r\ncf-ray: 98b3264e68bda0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5084\r\ncontent-disposition: inline; filename=\"slot-pg.webp\"\r\nlast-modified: Tue, 08 Jun 2021 09:18:38 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=q5C6GdI6GMuJB1wgJzAhQERXJV6V_O4yJM1mMUzigoE-1759900413-1.0.1.1-1GSvmFsabVo7KJReaWT.QDQFcY.jdtQxZptsto.Akas2H8FrSgLztyrFyBCnik8ev8TkUKWAU0aHoZ61oIkIQZ_AcXxyOSUum9tCZjkSgDE; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86ec152055228538f1a8f8943f179a97","sha1":"ef30830c693272695c7cf5f2ac12679c75a2db18","sha256":"a643c08a5d025958c4499731c62c3cc78663aa9c6bd2d567bbff38b4637b339b","sha512":"ae8080c64346011e314aff414514dffd14595c410f86ba018ef5da16cab2b1239b89a4b788dc24e9bffdc15d9d2679bb5753b420a0ed1bff138812ec744933df","ssdeep":"","tlshash":"09314d80628b9b5606fc60710230a4725d006ccc13f84a858d72af973147eb7ef9484b","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.697952Z","times_seen":2376,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1418\r\ncf-ray: 98b3264e5878a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=7765\r\ncontent-disposition: inline; filename=\"live-pp.webp\"\r\nlast-modified: Fri, 26 Jun 2020 07:51:40 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=.PTyQgfWyhkmRcZWoT46lEBh7WjMEPLJnSbZYoHK4hw-1759900413-1.0.1.1-lXMWGFk0XCcXujZiDsmX.UVBIaZreqB_rxXOcP38K9AUcdRcxgdWzUcdDB712rlomFRmkGM9E14ZcwFIQUi_MkiMjn4Mvih.jIA0vxNfoIg; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f1aa38c5a91ca20b6bfdee9245eebc2","sha1":"5f00a7a39257fc368e3fcaaf0b923f6a9fd49bcf","sha256":"57d9d0b26be6a4ea6d8894ff8dab03ea2c4400155146d5380281f4a589966e65","sha512":"54a31f338389d1b99243da7023fb2f109640cf90887627d5dec60f156ddf296454eae20d4d8a056f6682d56d3f0c9eff3a1b5af2ef4756816d61cb43586567a8","ssdeep":"","tlshash":"6a21c6784526df623d88772113f97f39802f468d47e803762ff91891346d2b42260cb1","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.699832Z","times_seen":2372,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":9,"dns":50,"connect":1,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //interactive-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\ncf-ray: 98b3264e6896a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=7983\r\ncontent-disposition: inline; filename=\"interactive-jok.webp\"\r\nlast-modified: Mon, 10 Jun 2024 04:52:28 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=cy8DWGjj0fcwlAD9psiZvXxtw1JW7exveKlZWbadU5g-1759900413-1.0.1.1-9moC1dvzgwurIU1JJfPHWu1Im9gtIDpRj6YwqrdnrDLgUzRyuNCK8VX54Nyvu9f3Yif.J49Al1vSTu__1YUXlFE5suQc.mtksLuhCfXRt3w; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.780392Z","times_seen":2372,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/images/logoweb.png","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /images/logoweb.png HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 32392\r\nserver: cloudflare\r\nlast-modified: Mon, 02 Jan 2023 12:59:41 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qc4xmn8HQFbDjLpSte6%2BZb5OjOTrr8MUHL%2B3ECc0rJHclRg18tY1qH3vPtwMMBpd8wlJP1Z%2FRo%2BaHVN1Tuc9PL0%2BWx76aTwd4hc8ig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264df91a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32392,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 90, 8-bit/color RGBA, non-interlaced","md5":"a80b0dcaf3b4b13c41e07c4c7449e7ef","sha1":"4a896397a0a2ea25dd46cba8921274b9679d5036","sha256":"7bf55011addea9cd8f75950531cba50d4948fc40ea8535fff6ab09f3c27134c4","sha512":"62bc22e67976ecc606d8ad1ec5d1d108cb769f42b6b0d80bc0564639774b0645e0647ac8ae4e7ed78ca6a1eaf3bc0e02cd5d73794c10dca7f36dcbd649c95644","ssdeep":"768:I0+afvWtkA63ybZkscofni8OYB49bX0CrFFZwxh2:I7wOinybZhcofntobXdFZwm","tlshash":"08e2e1c16e7679157886c8128ed7f92377b7cac0d5d324a8bddaa432a5b40f5c02eb42","first_seen":"2025-10-08T05:14:04.152044Z","last_seen":"2026-01-27T19:43:54.949667Z","times_seen":7,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":414,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/images/upload-Slides-20230106215834.jpg","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /images/upload-Slides-20230106215834.jpg HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 233725\r\nserver: cloudflare\r\nlast-modified: Fri, 06 Jan 2023 14:58:34 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqYeidrFzwkIqbr6v7FKK9J7dS8wOXFdKUONkP%2Bf1BXgeuqjIcBZ7aUpqwZdwx2e7PHAIJcgcaZ%2BTe6wTgompixaVpJAlbIf27NMcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264e293e0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233725,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=0], baseline, precision 8, 1900x380, components 3","md5":"02d5999ffe2ac02af15bc90f62df4c91","sha1":"62f167fa5bb2b0ac93e21c5358c5d687f0167440","sha256":"272e3ee510ff529f9c9f8a0dd4f717f24227a7ca2133793ff7070a8665d09f3e","sha512":"b8eca802e14669e675d14baed5cf116e8e0ce9e32b0bd44df346e877f2bd3adb1d34542e183aeb76b5ad54efc23f4a37a2ee7348eaf9626acd04eb6fa3eeb330","ssdeep":"6144:ASAMNiqc3AUj1N8FoTEpEACu7QvdXYuERNXg3:PYqc33N8MEWndXYuYw","tlshash":"603423838cdc319ff528c7b89a303fd46364bb021aff8aac47e4d8726770d984999565","first_seen":"2025-10-08T05:14:04.15325Z","last_seen":"2025-11-15T12:35:03.851178Z","times_seen":3,"resource_available":false,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":405,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\ncf-ray: 98b3264e68c5a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3284\r\ncontent-disposition: inline; filename=\"slot-jl.webp\"\r\nlast-modified: Thu, 27 Apr 2023 04:57:42 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=sDnTiJtQsw.r1J1zr7z6yjkE6WTmBeKo_ZAs8yz9oDM-1759900413-1.0.1.1-CkL7VlLRyfk9upd5hOQ.2dev7JEbPH1n2zy0Gm7eimFn4Cq6acBK7SuLf_ruspGTuTNmrMQRkomWKsL5EGrmE8Viuz9G.L.ARit5ZvBS0HE; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.645245Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/facebook.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /kontak/facebook.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 300\r\ncf-ray: 98b3264e68e9a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3295\r\ncontent-disposition: inline; filename=\"facebook.webp\"\r\nlast-modified: Wed, 05 Feb 2025 10:50:46 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 5527\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ADKKJXMwH5YFy17YiVRmm_5mqYV19ec6NWYObsj_oUI-1759900413-1.0.1.1-aIb9rrSD2BlZ5BC.firu8xFO1ZAxJvM0YXW3irGvkE0ChbpI3MCgAF2EnDFicOs.pWzYSgOPc.3AsJk6GReK.uNCNhXvi8sokY10pz4654Q; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9daa0755bb1f7cbea82e2d506d355535","sha1":"09438e3bc734c47538cf70f11dc8450dc3471ea5","sha256":"b7216eb923bbb92bb47ea39c84e2f84a8fc7daad9bb77d9f89fa3528d3a59f78","sha512":"445a1ea6b49b27a16c878d9f7444fc5b70eea2620877ef3009332a09abd4bec5bc394475297512a5e79883e277b88d0a398750e026946e44ce9525c798f01437","ssdeep":"","tlshash":"48e0eb136814e0daf41162ed662bc28a58c2779266c8b302e0cbb5c5bd5f80fbf4ccc8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:17:57.765874Z","times_seen":571,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T05:13:32.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6cdOFNF%2FxDPMbmdpOz9CE4%2Fy9CGGBs9ua2pG5oB4eaZI7xwtX%2BJ9zmya844KiLYsPMOkQxRYnhZe8qMmuoV%2BtncO%2FpCZk2EdZxQB1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f; Path=/\r\ncf-ray: 98b32649efe15684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":162815,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (516), with CRLF, LF line terminators","md5":"4f1a963bc8e19cd4bf058a43f6d77a48","sha1":"2f2accd4de470fd97ec98863d7731db6855258d9","sha256":"84fca867f933c5f570fdd2c6077aebb17bbd53e9ec1c5bc81a0d7442a1d3cc74","sha512":"2bf74ef6a12678d84b40cdef15c3f4514b7b8ce4cef86851196815c33425d0176bd9ff1e9c68429d104eb0f8a11c3135673d26af1a8459da7ce165f0ea2b63d7","ssdeep":"1536:NOSLYhwwxeaY5YUbVU8hLTojpqsOS45P7qU+4WRV:NOSLLCULTwOS45P7qU+4S","tlshash":"4ff31d3145e0106751b3a6e49ab15b1afe96c207cb0f8a04b6ed1bd71ff3e51dd232a8","first_seen":"2025-10-08T05:14:04.155012Z","last_seen":"2025-10-08T05:14:04.155012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/style.scss","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /style.scss HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnGCGc09%2FNPdtbYdABNVLYB9bLHVegv2J6TxVXHnJQdaB%2Fdm1Uhswiv4yHcP3tvbPsshEX8yZac5RFI8UH2JbAVG%2BbuBWCxvjC%2FRpw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98b3264db8e60b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/global-mapper/lc_license_id/15058581/region?jsonp=__lc_region","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /global-mapper/lc_license_id/15058581/region?jsonp=__lc_region HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nuber-trace-id: be587e79d97c7e453b42f1a662961efe:e41416de28facf57:0:1\r\ncontent-length: 35\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 08 Oct 2025 05:13:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b17346aced6298b7e1cadcd62f40003c","sha1":"c28b849fff4b4d9d006d803bc4d18368446ddce4","sha256":"a379b1707064386da00957301b6eb053249cfb462047d44e4fb6d52898f5b78b","sha512":"93be3c00856eedc8cedd0c7bd2b2a5873aa85dcf9e893d9e972421d122c568cbb1c9b4ca633497bc80900f688898040a218616dc69a4716fcd3d5a2dc93fb928","ssdeep":"","tlshash":"8080000e20002ae30a20ef3e8023ec0cb03e033223008288c302208228002b0822ae0b","first_seen":"2025-05-16T12:26:33.454661Z","last_seen":"2026-04-04T06:42:31.151515Z","times_seen":21848,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":38,"dns":18,"connect":1,"send":0,"wait":319,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.5/customer/action/get_localization?organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026version=050058475503728ee9698199ba8e5308_8aa06b112ddcb9425ae1f146f67b3637\u0026language=id\u0026x-region=us-south1\u0026group_id=2\u0026jsonp=__lc_localization","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.5/customer/action/get_localization?organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026version=050058475503728ee9698199ba8e5308_8aa06b112ddcb9425ae1f146f67b3637\u0026language=id\u0026x-region=us-south1\u0026group_id=2\u0026jsonp=__lc_localization HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=599\r\nexpires: Wed, 08 Oct 2025 05:23:35 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 4844\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14039,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (14037), with no line terminators","md5":"3d29f5f285a5f164b8fc23934b58c8d6","sha1":"f1dda344c4141d8e09f084937f59124e5882465a","sha256":"43a6e358c7c098fa8520a29564e177a6ca5087f3fb526de8dbfca6882fb27b8a","sha512":"6a44b3bf3f443d6ddc5d24a1fbeb29047d3c55fb628322e6890a744e6fc06e738f07d32c6af0669fc77980b071a0a5ec227a547a56c34af540e9d31795157c43","ssdeep":"384:k8hODwsg3FZmEpbo5LQCBuLdAeAk+E0UJ0L:5XfFA9vuJAY+BL","tlshash":"e352e9540daa79aa0b2753daf5db5d1e38ec3364ab401a2fdd984f304284bc1735be39","first_seen":"2025-10-08T05:14:04.157629Z","last_seen":"2025-10-08T13:19:58.862411Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/2.C3OLXqrt.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/2.C3OLXqrt.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3KzjvVGulVK62paTQtVR73f_SISzZi94RUnMG8Mhf5zIMWDG39WLKbRQTf7kf2K9vv1X0vwPA\r\nx-goog-generation: 1759482538914270\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 367588\r\nx-goog-hash: crc32c=lQh59Q==, md5=SXOpd4xiLNPmd9IU5JNj8g==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\ncontent-encoding: br\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\ncontent-length: 108348\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":367588,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4973a9778c622cd3e677d214e49363f2","sha1":"5a76dc6264f4bf5cf530064ae39eaf092331e145","sha256":"d21c9e3dc427766c85df5374fabf9cecf1d9dbc43961d177b91c78729bd66b13","sha512":"2f33773145786275e063ac486c06efa793600e65c836291100b18488d53435240d7ae526d9764cce6ea5c62c33de5853c964c92b857a135e29a7702729a0b108","ssdeep":"6144:sF3FClm7Up2gDAFGA05GBT9EjJUpc8fsNkC8WMQhiHr3ecsK1r4oQfKUUs+knXO8:QMUp6NkC8WMQhiHFsK1rg+AObtBEjoSP","tlshash":"3a745be07341b538d7d7c1aa90bb6609f33d3d59b82a8150f2adecad33954889327f64","first_seen":"2025-10-03T09:12:25.740106Z","last_seen":"2025-10-08T12:50:10.507303Z","times_seen":493,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-ion.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-ion.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2434\r\ncf-ray: 98b3264e587ea0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6674\r\ncontent-disposition: inline; filename=\"live-ion.webp\"\r\nlast-modified: Fri, 26 Jun 2020 07:51:41 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=m.01vO_rJRmUjqQOHqbK72wweANFJfpQecr_.wxGCdQ-1759900413-1.0.1.1-eW93ucv7at79zQn.1H4Uo8mYuEphcoT3UzDXroK1MF8BI0IL5OoyuQPD8O2kMzsfFIE6dbhe0aB4.xt76eJLdMHzvFytoF_gU5E6lBBQZlc; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a48e4a72414e5587b22eb4ac4ae959b","sha1":"a3ac92a04917abab71a98503dcfff52be3af7cdb","sha256":"e48ccb777ed57ca1eee701da53a8fa2d85b64639d0b8210e3160678e1753b144","sha512":"5310124afeb9ff22ed40757c3612d38a85cc104962992a003f0d26e1565d7d1db3ca16be7f898b4634f3c8c0c611ac5198cc3b1a5e1b2a5adaa2212e17f93b93","ssdeep":"","tlshash":"b3413b6c6fd4525dffa807430e46e385a2091d61c82b3a5c01a200a72113183f9fc82b","first_seen":"2023-05-01T19:31:55Z","last_seen":"2026-04-04T05:56:02.759745Z","times_seen":2372,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-tf.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //sport-tf.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1148\r\ncf-ray: 98b3264e688ea0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2565\r\ncontent-disposition: inline; filename=\"sport-tf.webp\"\r\nlast-modified: Fri, 09 Jun 2023 05:12:11 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=GIWrN04a2Fv5oeQZvgJ42v8M21tU3L37AO5k8SVDOq0-1759900413-1.0.1.1-HnUY1kUpHoKjVy4IJVvBebGZT2Y2Z8Q7M5ZNiL5yzxh0IasejzbtknxwIBL750D1_VYIqRcGgjv_txXC1nG51Mr7UDF.FaLLYwLvXE.VRJw; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1148,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc4fa9cc349b0cf768f45038d1246f19","sha1":"f85ab86fb81b010f37a04bc8f682fc3e85a3f7ea","sha256":"68baa1f93a0fe9e1e20f86d5793025f920a15bd1631e47abd62fa9e86a8372b2","sha512":"788a16cfd6ec571fa54b6b4c40e92e34a6a9c31e26dfc0a5a74be8737e5a5bd2d53e64209ab98ab06b4f07310cb4939944a91543025b735b5fb30b951fa97768","ssdeep":"","tlshash":"9621a7de2384721c89e178fcc241e538516ace87e5473a30d54b2850a5632936d6dbe5","first_seen":"2023-06-09T18:38:01Z","last_seen":"2026-04-04T05:56:02.712327Z","times_seen":2355,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"api.livechatinc.com/v3.5/customer/rtm/ws?organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026x-region=us-south1","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.5/customer/rtm/ws?organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026x-region=us-south1 HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://secure.livechatinc.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Gv9Qvsm+/JRV0LgrVPtgzw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nsec-websocket-accept: u7rPUB3iFK6xYAx5GFNx9rRnPsk=\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: https://secure.livechatinc.com\r\nDate: Wed, 08 Oct 2025 05:13:37 GMT\r\nUpgrade: websocket\r\nConnection: Upgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":388,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\ncf-ray: 98b3264e5883a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2786\r\ncontent-disposition: inline; filename=\"live-pt.webp\"\r\nlast-modified: Mon, 18 Aug 2025 04:28:44 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=yUQj.vbIxDCeFW35karnWJlYQUv7ZpUcszvLqmd_7j0-1759900413-1.0.1.1-lwq3eqXtst93x4JSMh_Oqn3VaAoR3K_0a0kWSo27aBo49Bgx2CxZC1Ct_zH5XmqM3sDdMEtdDfXJGRaurI2i63Ege5aUci1f20pzuR2wsDA; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-04T05:56:02.644255Z","times_seen":1648,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/assets/hubungi.png?11","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /assets/hubungi.png?11 HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 6150\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Apr 2023 07:14:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVFu4mtPWoXoGRpxLIlZe7cuDercUVRnwPieaFXrMeO%2FtYsekK%2F6r3zJqQv80Hth79uOuvBysAmC5l%2Bv6C%2F7hSAidJZAcUvxyct1Aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264e49540b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 246, 8-bit/color RGBA, non-interlaced","md5":"889fc3f6fa14cbe1ea3fd8dda586bf7e","sha1":"e340f2fcee7e827285172f2120d00ad05575b31e","sha256":"e2f56e54711945f441ae0191957d648fb18fde319e9d77866db44683bcc7e2c0","sha512":"52dcf0114b46be7e51c166003ff072eb7323e9eb7f9f98980a35059b8beafa002576a471cf78d7731fe39eca43b72ea99b18d4736e47c85586b8c296245160b0","ssdeep":"96:UrjNMBOTlR7KEbZAWl5RMs7dPX5QyrXtqmg+MCoMGvhH3yfO8P5Wn:q2Ba7KUGwPPX5Bxs8P58","tlshash":"b6c19ee5d9e1a7fccd2667fc9a1b7b3a42f20a71b80fc991d36ec8519e4620c40062d3","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.707994Z","times_seen":2815,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.5/customer/action/get_configuration?organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026version=1098.0.3.131.398.1375.4.5.3.1.3.7.5\u0026x-region=us-south1\u0026group_id=2\u0026jsonp=__lc_static_config","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.5/customer/action/get_configuration?organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026version=1098.0.3.131.398.1375.4.5.3.1.3.7.5\u0026x-region=us-south1\u0026group_id=2\u0026jsonp=__lc_static_config HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ncontent-length: 1501\r\ncache-control: public, max-age=600\r\nexpires: Wed, 08 Oct 2025 05:23:35 GMT\r\ndate: Wed, 08 Oct 2025 05:13:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4417,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4417), with no line terminators","md5":"8dc47deaa4ddd74c8b2042df0ea83bc0","sha1":"cdae779d75721f94d985f4395e5dd7b7abef037e","sha256":"24784de52e5075326b0bc508c5e8c52f7977e2129c5eed161e2ba623ac3eb7c8","sha512":"46b70984cfbe70c29021058958fab209419b41860925cbc53c162fa61e8a4b56ef6c4a022b2c9400ae4506ffecf3089442eb76d593f0627561429f9c4160a4b8","ssdeep":"96:p/dQXSlK/IMsPJwX/InbeN7kz0c6ceI8zFPJvCLq:p/mFmgwSk4c6cexzLK2","tlshash":"7591122a834fc47ba177d19e53d7b70b745c913ca1ec583fe8608a3461861d3e202dea","first_seen":"2025-10-08T05:14:04.160935Z","last_seen":"2025-10-08T13:19:58.849202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fgs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-fgs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1324\r\ncf-ray: 98b3264e68cea0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2957\r\ncontent-disposition: inline; filename=\"slot-fgs.webp\"\r\nlast-modified: Thu, 22 Aug 2024 05:14:43 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=5jFdzq_9GFbcTvv7LF7AXu3H6tLMDjrDDqFp_wycsTs-1759900413-1.0.1.1-znB4u9RBsVRmgXjpCdbLJfcohFiBINQnIovZycdQUzOJwi4jOrgbyoTHqvNWTXAlSYI6FJXOpd9JQDyLfMxbeKyAtT7sWfwPobKNjyVHj6w; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0db329565ff7fa54709c6b982d143079","sha1":"86787749df4f0dac3c2aed2d7ed03c12d4e9f9cc","sha256":"a56b49bc68bd936efed2bb75c474cbff5aa6382bb4db26ea9ed393cd3a846b3a","sha512":"23e85ddefc5722b311bafcaf8bcf198dc28da94cf904129af1ce7795e2bdb38e6930feda2abf2d9ea1fdc2e8ae0d1b8bfe7abb7d0102db4366d3a65455b4bfe1","ssdeep":"","tlshash":"e421d5206bd3894c865fd608686ae401257b725a5d24fa7b0bfe16338f3f0608428919","first_seen":"2024-08-03T17:27:29Z","last_seen":"2026-04-04T05:56:02.753285Z","times_seen":2009,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/6.CKlS54Ol.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/6.CKlS54Ol.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3IBPrgNGVJRKKLuYFAF4E8vJ7O5iAvFdThaAaANX17eTxIz_RpegAVwYGoKwyIBAiOA\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\netag: \"f8a48a27250bfa311cbb26e9a24ad901\"\r\nx-goog-generation: 1759482538871398\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 883\r\nx-goog-hash: crc32c=4Hp0FA==, md5=+KSKJyUL+jEcuybpokrZAQ==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 883\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":883,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"f8a48a27250bfa311cbb26e9a24ad901","sha1":"5a84ea7a9b85e3b0f8e7987a8fc7181ffa0eb47b","sha256":"1dc43b0cba7aaaffb1c6e8f1176c829be282651fb3035a5f2e0ec466b4325dac","sha512":"4f949266aa75fb63b9a40b75022d90eb4ac115051d2121c4a94fb93f5bf31d52ee071300a0d485a4e726d5f64e56b9713da6cf2a98e8743037cbd70871cd3405","ssdeep":"","tlshash":"411100d93cc3d8b0d73bd8cc52a899e5d43c0e88a8fd4180e4e86e853b155718236ea8","first_seen":"2025-08-21T10:29:01.941959Z","last_seen":"2025-11-05T08:19:33.416839Z","times_seen":5362,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechat-files.com/api/file/lc/main/15058581/2/ec/d1475f161ef3206f7b617b7d6630c52b.png","fqdn":"cdn.livechat-files.com","domain":"livechat-files.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:37.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /api/file/lc/main/15058581/2/ec/d1475f161ef3206f7b617b7d6630c52b.png HTTP/1.1\r\nHost: cdn.livechat-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 8962\r\ncontent-type: image/png\r\ndate: Wed, 08 Oct 2025 05:13:38 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 80, 8-bit colormap, non-interlaced","md5":"1ddf2d6a06dff805c398603060113225","sha1":"17887e1b4e64d5cafebf92e2d67e02ab934315cf","sha256":"2e1651b8797e18d4ed78c345fc76ef774e59c9044c16bb15dcc99f01b239f02c","sha512":"698147a1bb45c36b1df2d4dbb73e257ebc89268942f2f9026a6a561bd913b3abdeab459f3d297234374203748f11a092dff45247d13e15aeab4029b94196b98d","ssdeep":"192:ksagjnwoq0M/CVeWdIZ9shRMfFa4S3Xd0Mree4Zgl6qp48g:PnRE/LyMfFaDXd5edqAqi8g","tlshash":"d302a0e11ac379251d18279b736397123f311da27e8be01f67b728a29fc1714d890672","first_seen":"2025-10-08T05:14:04.163096Z","last_seen":"2026-01-27T19:43:54.989279Z","times_seen":7,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":259,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/css/old/style.css","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /css/old/style.css HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6r%2F3VMIbqAvmG6cE4d7912kwaXGQrQO1OgsCHVcKZHry65%2BypSHCudksnF%2FzpB4RRga4SQfAOK7Y%2FTIDnqc%2FeJFVdvxjO6JfHwSgxg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 98b3264db8f20b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19387,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3ede65f196ad52a72641234b5d83de18","sha1":"a9190bb7065fe04a4a2a0b6e1b38971b40804771","sha256":"c76b8f4648ad3fb327daf0f1739addd270422f7cc152c3ef523dfce2b5bd296a","sha512":"62177c9f9725e56bf4033a9537f3ae85e4addb64592bd2f5705917cb69a6ae030e3db8df68743a50f95f292389b344d1498f3edadce779af613f24a13841266d","ssdeep":"192:WoVF+jJSouRa9Qj74vDL+TKfX4y5UCUmIcOyMA+AHFtzTFsSbbewoyOlnUAdhwjb:Pf+gxwQj792s5cDKTVf9rN3v/7kK9w","tlshash":"c192736dd512209a2633ebb4af750b19e76d8023cb0653693fdc62848ff21799161fec","first_seen":"2024-08-15T07:52:59Z","last_seen":"2026-01-24T22:24:41.53673Z","times_seen":1091,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-av.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-av.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\ncf-ray: 98b3264e68dea0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1284\r\ncontent-disposition: inline; filename=\"slot-av.webp\"\r\nlast-modified: Sat, 04 Oct 2025 06:38:22 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=2WXp5uI8qLChzQgxxDX2eRmy80XtOU8LJNnhK66UYxs-1759900413-1.0.1.1-uQuMUhgpNtTk_0lVIfTFXzseEJa2Ep2vyb2w9bGjX_0PKp4dkqNDBWKHBbMp23eT8EPLkLFu4tgLvh40OgopDB9AtrjfmvaWKlUeEC3K0JU; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76044fc8943ec031dc01d35bf3ce3b6d","sha1":"8f280e5e155b32963cc71c6aa00e9c9c32a54120","sha256":"1f5a41f74224cc8954664489b76cc5553cd0c8d5dde133cc48b62a8af296e40b","sha512":"1e2916804e5e220f70a2f39a2184b97a8a090b1f827abf8732f81d9ed49df99719709d4d19887d8a3fbf5c47c3f36dacff1a244dfe2fabcaa90b14920567927d","ssdeep":"","tlshash":"caf041c577bea8940a2674aec642aa473843244cc1818b56ddc394906d43955e286c8d","first_seen":"2025-01-07T08:32:27.13192Z","last_seen":"2026-04-04T05:56:02.675452Z","times_seen":1804,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //live-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1316\r\ncf-ray: 98b3264e6889a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=2322\r\ncontent-disposition: inline; filename=\"live-sbo.webp\"\r\nlast-modified: Tue, 14 Mar 2023 10:02:25 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=rhVi_F4Vm2d8ckBpotT5yC98BR3aw0GAKHE8ZjgYSDk-1759900413-1.0.1.1-2yFrdQZiglWiCvP0WUErIU4lsXtEEmDKBQYtFCN32NMjpDJFXQIeW0_tWQwcpwGbD4Gu5.eRszwZFnCnhVQGKpxE2WPw6AepigT2ME7tkFA; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82d79c98d9d30be3526d638e7eb2189","sha1":"3c1054d400925292bc9c0bdca6f9d6b4b8cc7d50","sha256":"1f379fc8801fe0287a907763ef57ebcf097aef6dd3773500df5f938aed097dc9","sha512":"2d2d3ca97dd5e68354ba0cdc97df4219597405b141f5e55d00597175403e4216a3acef1bd2cd99345b86e88b4cdcc5e72d8639508f5b8cf3b01faa9c802a1db8","ssdeep":"","tlshash":"c1212bda91348d65770b74b143f4a86abda90132075668711149c5e4df8ce2002d8980","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.682381Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//chat.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //chat.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6724\r\ncf-ray: 98b3264e68a5a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=9418\r\ncontent-disposition: inline; filename=\"chat.webp\"\r\nlast-modified: Wed, 05 Feb 2025 06:04:56 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=S7kuZbMWEdpI7sQQ6Qx8pSgNXAiHx37SR2mEMp47yf4-1759900413-1.0.1.1-3tGahIdkErFj22vX6QwMhlVkX4_w1CLX2S_eMIo9pCayqbdOYc.PQ8kRrdkc0Lu6Wd6e2OLbmytCeBMNCDTVw4lRJvBs1tehVn0EeQB1h6M; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6724,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e26cc220d8c829e9a9226189b32bb34","sha1":"f24fad3d9616a61ea711f2d9fcc4a0ca74eb633e","sha256":"8bd11111242b3d18160d8ed0b9058ddcaa0950add34b0b40d4e2d643de4b7aad","sha512":"9190624f6c31864cd68887f3967b1c3332c7fcb5ac5bfa0aebbe0243d484d070ff0ebffe5707f9c1f30cb8749b77069b0d8acfeeb3231d9d244c56896a817149","ssdeep":"96:M4ToQPAeVSHSyziKndYm7P56+SKUVrETS40t9cP5DR7qgEY/K185opJMs7zxu1Ma:5kQIe6Lvd5AVTEeu1R7jEY/aZOyoKudj","tlshash":"01d1af6b88095f18f2bf0640c17c3868f55c01707779b25d6b27e43fa59168deb9c1b2","first_seen":"2025-03-03T01:41:44.857779Z","last_seen":"2026-04-04T05:17:57.780422Z","times_seen":934,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-live.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //icon-live.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1390\r\ncf-ray: 98b3264e68b2a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3265\r\ncontent-disposition: inline; filename=\"icon-live.webp\"\r\nlast-modified: Wed, 19 Apr 2023 10:27:47 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 973\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=P5M7xiUr2PBOPbUT031jv_zYxU1Vk9GJFhYgxnyiy9o-1759900413-1.0.1.1-0weMNC6oHsME33cDYfmd3mFVRNQa5RxJaUiNaGRmb5HikvExCu1qVrEs8NE5bPzfcwm33q87ohVJdXCCPhUzWKn7ygEdGu2KPCsS22NjuZg; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f67a22f51e7b7b83a0e223533c0fc7a8","sha1":"a41054843bba42af4a108297a8763d8cab58d5b0","sha256":"ef0d3521e7ebe6142259086f66d1e7c587e37118ac8c2d9f2a110fadff006de8","sha512":"f4f01a93005540f8de10304a60114b98a6beaf2d48d7a37ec0afd627aee3b5eb741c050d4b5df6b5550a96119a24b6e12813475d3ee38a4519fc430c0de29ece","ssdeep":"","tlshash":"a621d84094b54ef44424cd5de670ae191ff364710faa97a53ad9e8febf1c488a022971","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-02-19T12:42:40.128598Z","times_seen":1602,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/mgl-24.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /banner/mgl-24.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 397960\r\ncf-ray: 98b3264e68d4a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=414368\r\nlast-modified: Wed, 01 Oct 2025 05:34:07 GMT\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=bYnWL_Bk7sEhVacZcrXavyErY1_AMSnKzFctiPkmFKw-1759900413-1.0.1.1-0FA0JtQRRlKe.2lySDazbj_CIH98SPZ4pUmXO78aJg0WUfRCcFUZXremyQgSjCBF8_l0PgVuvuQGw1I1_smuooxhvmi5FN85J6X6mrj_2B4; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":397960,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1900x380, components 3","md5":"1c6acf715c03a6fee80ae0caa703157a","sha1":"7dce965feca7e31099347b3ac5c835575266dd56","sha256":"9300cdee357ad62bb6085b897ee00c72d44721d1bb0b5f54980784e224f770c9","sha512":"cb3b6feb1bb41230162e1cf8c9076f1ff1a809fae4faad3b26191b36d7900430d2d2fdb3ad4eabf5cb49fe6af703a76f8b183828a5cbfa7ef81c0acca0f5988f","ssdeep":"12288:4n8h/EcmySVCXiNLl6uVGcLQc6rRv0UdPi9oz/DihG:2e/QygCSNh65EezdVuhG","tlshash":"5684231d983a7f236d3b40ed0a8de01a9c6fafd561eaee55cb13560094f3825cc92c57","first_seen":"2025-10-01T05:57:05.999231Z","last_seen":"2025-11-01T08:31:13.783089Z","times_seen":286,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dewahoki91.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"13ac2-jNeXExg3GrPRY3nfbPslSlxkn8o\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\nage: 534728\r\nx-served-by: cache-fra-etou8220161-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65292)","md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-04T05:56:02.713596Z","times_seen":4211,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":7,"connect":16,"send":0,"wait":33,"receive":26,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dewahoki91.com/m/capimg.php?4396","fqdn":"dewahoki91.com","domain":"dewahoki91.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dewahoki91.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 04 Oct 2025 14:28:32 GMT","end":"Fri, 02 Jan 2026 14:28:31 GMT"},"fingerprint":{"sha1":"BD:3B:62:70:CF:99:7C:4D:59:91:9B:0D:48:1D:EF:6D:E2:D4:59:0E","sha256":"ED:F2:45:DB:CD:85:00:8D:09:F4:8F:66:DC:4E:E5:FD:BA:04:86:E4:18:E4:25:28:EA:A5:0C:65:28:CC:BC:1E"}}},"request":{"raw":"GET /m/capimg.php?4396 HTTP/1.1\r\nHost: dewahoki91.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nCookie: PHPSESSID=5fcd3c6c3f93a9603b3999f3b2dd350f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BlscgyUl8KRe9AT%2BsHggbH6nSSPuDUwykErU4vsNNUPVaHLLc5minAU%2BxubRw%2F4%2FyithDrAiSPRYrdh4DqPHAscbNoXKIWnJqN23Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b3264df91d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"cef2d179ef2e8acc89929e110596d7d7","sha1":"8ea69ce1e65474ff5a125b9de05daf81f859d417","sha256":"81b616c09decf91bd7ab7b65b2d0a12a87cd64344f9df627686da640cd8ee03e","sha512":"de754d03f98961234d614797071bc2088381a0f4b33fd04384dc94ae5c3b173233fc74e2f6020641d470838d2ae6a3c93f4510ad3fa62adca61e10b7deca4532","ssdeep":"","tlshash":"af517db53c0197f6b9fd1952421940d0a9706238818452df7a5cf3016215d63e5cefe4","first_seen":"2025-10-08T05:14:04.168034Z","last_seen":"2025-10-08T05:14:04.168034Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-08","alert":"Sinkholed","trigger":"dewahoki91.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /kontak/whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 378\r\ncf-ray: 98b3264e68e7a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1628\r\ncontent-disposition: inline; filename=\"whatsapp.webp\"\r\nlast-modified: Wed, 05 Feb 2025 10:50:46 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=E__WYFvCTLLno21EqSqNmD8Wo28AfMr4fQ5vBZkWtLU-1759900413-1.0.1.1-Pple8v0hmCHiSVHRVsMiHPWBm6LtdVlh70QZDPa3qKwjrhF137UQTGvHLqj0pSpSyDwB9Yi1dTlGmNQ6en7ksmzhQePIIunDm8nhmf0e_C0; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d9883e1a072905361ca73d34a57734","sha1":"c9dcf63a7866cd530f7615bd220e7ce4e81aad0d","sha256":"a06f5509e0ed17a2901ee5d71717a549f53e66dbec7607e3944cb418c60688c5","sha512":"fb470bdc215ebaf74df39bba27c8887b99765385ebf31d4a06258c7f3ca92fa0084ff9dd647cdf0ec4bf7a461468754366a3cb6d18343b3214f8d7b23313a08b","ssdeep":"","tlshash":"43e0f1b81c50030a5df62d07a3100fac4b7905c55b56fb23a1964dd07100ce4483379d","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.657546Z","times_seen":1841,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/tracking.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:34.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /tracking.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3JmE0uycp-92VKMAzJbDPsRScZp-0lqRNTtph1oMYFmqYsbYgi5oGMVTpDdsnighfKEz6npPA\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\nx-goog-generation: 1759482538946498\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 103788\r\nx-goog-hash: crc32c=R0cBgw==, md5=etcm5cW/Eu8v+1AsWULm5A==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-expose-headers: *\r\nserver: UploadServer\r\ncontent-encoding: br\r\ncontent-length: 33360\r\ncache-control: public, max-age=28800\r\nexpires: Wed, 08 Oct 2025 13:13:35 GMT\r\ndate: Wed, 08 Oct 2025 05:13:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":103788,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"7ad726e5c5bf12ef2ffb502c5942e6e4","sha1":"59f734ece00b6e703d5d541cccb3c219b486e040","sha256":"cfada8f7f80becc0282f4f6e7f02bc44ce6c15b09d8767728167d1920eabae5f","sha512":"e657546eb264879f1d9d4dc9f78436187115ff79fbd3aaec99586a158b5371cf44ffa2f60a6e6b8dd93fc3afa50d8713c930aeb1843898a9389de9b92553dad1","ssdeep":"1536:eooHdrfIyjci3aeyujD3j2oXBc+gM7gzhDagKZiBHBE:eXHd8cByujzyo0hDagKIh6","tlshash":"54a339d5b381b03142f786a791bfa316b7392418340e8414f13cdda93a5a987d1b7f6e","first_seen":"2025-10-03T09:12:25.729849Z","last_seen":"2025-10-08T12:52:19.272277Z","times_seen":576,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":43,"dns":20,"connect":2,"send":0,"wait":4,"receive":4,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dewahoki91.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 09:57:28 GMT\r\nexpires: Fri, 02 Oct 2026 09:57:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 501367\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-04-04T06:20:04.076725Z","times_seen":10095,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"91dewaid.com/","fqdn":"91dewaid.com","domain":"91dewaid.com","tld":"com"},"ip":{"addr":"104.21.42.95","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T05:13:32.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"91dewaid.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 17:36:09 GMT","end":"Mon, 05 Jan 2026 18:36:06 GMT"},"fingerprint":{"sha1":"E6:53:20:85:39:17:90:B8:7E:3C:37:30:C7:B9:C1:CE:E2:5F:BB:64","sha256":"5D:AF:FC:4A:76:2D:DD:E1:58:B4:00:A7:0C:CA:7D:30:D3:C2:D5:10:B6:AE:73:E1:F7:BD:47:DF:24:C8:E3:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 91dewaid.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 08 Oct 2025 05:13:32 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: https://dewahoki91.com/\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G9xc7JCY7ZEcMvmqaM9RDFkuy9x0J7kogsMc%2Bd%2FioOsWAFWzBy8xi0imhcMJc%2Fmd%2Ff8HD8TLASGqa7bI78i%2BRoJ83gDHbGS0eoY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98b32648088756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162815,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":57,"dns":38,"connect":1,"send":0,"wait":245,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/pop/mobile-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET /pop/mobile-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 191730\r\ncf-ray: 98b3264e68d7a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=201996\r\nlast-modified: Mon, 06 Oct 2025 07:52:11 GMT\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=5yCixIqqXcVnsPoa75Pw5KttaFHZBHMFypdo8pJfu0U-1759900413-1.0.1.1-kNBWIw82iywLY0SO2pt8V.Dl4S1bTZA7c4AL8aNuajHO6dbXPpnh9Za_JgjcTwIHPR5j9M2E9UFEr7lWxLcobOd1yhxg.vd2h7PSmEhoGoQ; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":191730,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x200, components 3","md5":"2945984e07b609626545b04c62141168","sha1":"2cd2ca4c59a0e6d4b1528af0880bd8f590832c98","sha256":"362908c2b15edbcc950ffcd9188a737276885a843e57a26bcf20eba1c0beed83","sha512":"a40d62c175b43c5a9e3fd193a6b8ebb6543b28a2321259c0107224c257b22c1cce07c54cdbc67716de79b256504d04738878cb9cbb323ce16808d9b84b7a1fc2","ssdeep":"3072:dh7QO6gNdi8UntjgwdxxNzoBgQSc7gM33EWLSn+AMF9sdxHLboJHIicbN+Dmxawj:dh7QLgeztVXjegQS6nPt9sdxH4JwVdpn","tlshash":"531413d653d3eac98b184f4785cac9675d309e5670732e29bbf842c36ad6b17021e10f","first_seen":"2025-10-06T09:36:23.196253Z","last_seen":"2025-10-20T04:35:05.826665Z","times_seen":143,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hab.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-hab.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1888\r\ncf-ray: 98b3264e68c1a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=5768\r\ncontent-disposition: inline; filename=\"slot-hab.webp\"\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=u27rsMrQoiO1G1.EJOci4Hnf4nu6mLD4QrCnv2p8e.4-1759900413-1.0.1.1-2McRNydY6AVWGcdMwNDLYoJBHMGR3ppUqOYokpJJcc6WlKkhv3N5LMSC.5WigzgIVatrv90qBccQSIy.aMeI9dzwMm6yRK8GAFDh6jhJid8; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"158c1eeabbd166126f46035ec5e6d457","sha1":"83fa7159d10da9989fc9853ee6f96ab57b065e83","sha256":"11bd40a973e0e088856ced2e923bb0badeb4291c9ea0d11386d9a469817eeda0","sha512":"457d8ae758976d87cfed9c13e6911a874d712790eea76995846aa183aca261c1bd7b0fb5436cc168e665ef490ce7cc2a36a3dc58ff2c1e263c7e511c885320c3","ssdeep":"","tlshash":"ed413b6071c9712115b952b2d860a7ef0e34f77d7209ab714686208d63131c69366150","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.674109Z","times_seen":2375,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //interactive-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\ncf-ray: 98b3264e6895a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=3284\r\ncontent-disposition: inline; filename=\"interactive-jl.webp\"\r\nlast-modified: Mon, 10 Jun 2024 04:52:26 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=X_2.VWjYiA5SJLQ8_yzf8nB.TX0juJiNJ25DsqVNd8c-1759900413-1.0.1.1-ABMr2f03R8H8XGGwczrIudFrvVds1i1bXzMm2_uUyysE9Wu_6TSxFaplv74pd8_oWEqx7UR6hVCmpJiOzXzfp5f7RN63jr3eLsD7AjuYzuQ; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-04T05:56:02.645245Z","times_seen":2373,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//promosi.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //promosi.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4572\r\ncf-ray: 98b3264e68a2a0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=6991\r\ncontent-disposition: inline; filename=\"promosi.webp\"\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=pO0m4Az7hOJJ7bR.XdiaFrjdJH9jsj8NhBKem1t3ACU-1759900413-1.0.1.1-n6DtHDhEG2WwLkTCj_wirz4kYDeTSguBLYpQGWY06B1StMLZia_9ChNtlryW1BwYrzjxw7Qsw2Vgg0iEMS45E5f_u1Rdp60G15aVkjTRHN8; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22fe7e055070f4d93573d911106f0915","sha1":"f1a2dd86dbfd35926751fa3dc475610b8bc3a9a2","sha256":"e4fa61fb5af8d64e7261796f4b1080b885dd33b4d33182773165ef2c418cf618","sha512":"615e8cae1aabbc9c122334c9f567046f1b7b2151315d2878e7b34ca430bd77850ae930ac9941f933529129e9af54b8a4a2fb2f72a7415699fd38120710f4603c","ssdeep":"96:Kg0nKF+KSETc5+EX0F5k1tiOyLgpXCIOTAtzr/LJK8CP:pNDTc5zkTKyLgN1EYr/LJK8G","tlshash":"8991aea2e037412f188f43847ba48bef3eea8924012b4eb1b8c25de8461c15d32d0677","first_seen":"2025-02-01T22:41:26.037317Z","last_seen":"2026-04-04T05:56:02.791105Z","times_seen":1877,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.livechatinc.com/v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=15058581\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fdewahoki91.com%2F\u0026group_id=2\u0026channel_type=code\u0026jsonp=__pf5fok392g","fqdn":"api.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"2.22.225.83","port":443,"asn":20940,"as":"Akamai International B.V.","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:35.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /v3.6/customer/action/get_dynamic_configuration?x-region=us-south1\u0026license_id=15058581\u0026client_id=c5e4f61e1a6c3b1521b541bc5c5a2ac5\u0026url=https%3A%2F%2Fdewahoki91.com%2F\u0026group_id=2\u0026channel_type=code\u0026jsonp=__pf5fok392g HTTP/1.1\r\nHost: api.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-security-policy: frame-ancestors https://dewahoki91.com/;\r\ncontent-type: application/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nx-frame-options: allow-from https://dewahoki91.com/\r\ncontent-length: 408\r\ndate: Wed, 08 Oct 2025 05:13:35 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":408,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (408), with no line terminators","md5":"01d9f8e8530e44dcd2a2871ec740ac51","sha1":"b4dda426daa8a7ae7a28f468ba98f2d31ec97de7","sha256":"3ae3aaece5250bef55a465037347e0a98f987c1d56487bc2bbcd040a11d0522d","sha512":"69085c00d3aa74c23fdc6ce0e21e4b8383f3f702c606204adfd5d4d5bc0cb9e565c56a3974e67330f24e54fad5322fbcb270fd4e92af30dd0e656236d0982e84","ssdeep":"","tlshash":"eee0f1327209c0b3e6c1d3b444403e01aa301722960d69fcb4ff0358111b3cd6330917","first_seen":"2025-10-08T05:14:04.172449Z","last_seen":"2025-10-08T05:14:04.172449Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.livechatinc.com/widget/static/js/4.C_rgEAoe.chunk.js","fqdn":"cdn.livechatinc.com","domain":"livechatinc.com","tld":"com"},"ip":{"addr":"23.36.77.179","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://secure.livechatinc.com/customer/action/open_chat?license_id=15058581\u0026group=2\u0026embedded=1\u0026widget_version=3\u0026unique_groups=0\u0026organization_id=53b18c43-ffd3-4586-a2f2-0916e4e87bbd\u0026use_parent_storage=1\u0026x-region=us-south1","date":"2025-10-08T05:13:36.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"livechat.com","organization":"LIVECHAT, INC."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 11 Jun 2025 00:00:00 GMT","end":"Thu, 11 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"66:A3:6F:A0:92:9E:A2:01:91:16:68:AA:27:A9:41:28:FC:25:27:68","sha256":"03:FC:5A:F6:F7:06:15:5B:0F:31:DB:6C:4E:D7:E4:1B:69:80:1F:C3:5A:E3:85:5A:FF:8D:22:81:92:ED:25:2F"}}},"request":{"raw":"GET /widget/static/js/4.C_rgEAoe.chunk.js HTTP/1.1\r\nHost: cdn.livechatinc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://secure.livechatinc.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.livechatinc.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-guploader-uploadid: AAwnv3J28yzYeU1cNDpd4CcjOKbn_p2cZZkx1mptgNTuSIjSkGajzKoYu9nDBhvQe_1QwpuMp_lBQQ\r\nlast-modified: Fri, 03 Oct 2025 09:08:58 GMT\r\netag: \"1771376dc07da48b3f03339d86d57b7b\"\r\nx-goog-generation: 1759482538858495\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 193\r\nx-goog-hash: crc32c=C03sAA==, md5=F3E3bcB9pIs/AzOdhtV7ew==\r\nx-goog-storage-class: STANDARD\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: UploadServer\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Oct 2026 05:13:36 GMT\r\ndate: Wed, 08 Oct 2025 05:13:36 GMT\r\ncontent-length: 193\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"1771376dc07da48b3f03339d86d57b7b","sha1":"a5861ebfff23a92ccd1ce6b8a517b6f877d50a63","sha256":"6e148df31d721a0ff08563f2d676751786e01418c86ee54ee8f0e88aa46ae26a","sha512":"6038efed0774fd61c7bf6558d3ea24ccebfada1041fa2c1606263a19f8700043a18f6e368ed550fc61f644eb7b81f8cac01498f30cc56a103295911b28e436b0","ssdeep":"","tlshash":"afc022563060f3a502bb0ed00033e02af32a402cf0ebfa80a65cc4f020630530a26b1b","first_seen":"2024-06-24T12:34:02Z","last_seen":"2026-03-18T08:07:40.315578Z","times_seen":23367,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //slot-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 794\r\ncf-ray: 98b3264e68eea0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1595\r\ncontent-disposition: inline; filename=\"slot-sbo.webp\"\r\nlast-modified: Mon, 18 Dec 2023 07:14:51 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=w7k.WywW2LfOr6DTjOPLl70addo0VqZBiWkEK43gG6A-1759900413-1.0.1.1-P88x8.OHWzb_o9iztPfO3wiXTvZNppcV1VPNJmo2Z6v9PJ8IZNiOIEAyXG8OYznemL4uZHwhB80gy_h6qHQ0OWJPnXRkV7bE_ehqRmIIa5Y; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"041b8eeed633afc9d95344aa6e28ed7d","sha1":"e42388794c68fe2b9282cbfe914b057c58fca502","sha256":"5a2a23b2d0c30c3938c1b279922c8fd42659a06a6a55f5f3f94b6f69f1ec544d","sha512":"aea1d59ae0cba007c99972fc9c18b389facb46c266af985b973e76b6c53bdedad4d38c953d59bbe080142870875bf2fbd202861b30560ec60fadf7599f521f8b","ssdeep":"","tlshash":"1f01419c2da5560e5e5434ccd774a0a0640d7e0551091da3bb04ea56200e50a1e49c19","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-04T05:56:02.690995Z","times_seen":2291,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//livechat.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dewahoki91.com/","date":"2025-10-08T05:13:33.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Wed, 13 Aug 2025 06:51:29 GMT","end":"Tue, 11 Nov 2025 06:51:28 GMT"},"fingerprint":{"sha1":"FB:FA:6F:E4:E7:29:2B:DC:64:6E:F9:44:E3:3A:3E:42:4B:E3:B9:E1","sha256":"75:74:D9:5B:E2:59:DD:0A:93:0E:3C:1F:3E:B9:53:3D:6D:13:77:91:1B:64:05:D0:8D:98:58:3B:EC:23:0B:00"}}},"request":{"raw":"GET //livechat.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dewahoki91.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 05:13:33 GMT\r\ncontent-type: image/webp\r\ncontent-length: 876\r\ncf-ray: 98b3264e68aba0f0-OSL\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origFmt=png, origSize=1402\r\ncontent-disposition: inline; filename=\"livechat.webp\"\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\nvary: Accept\r\ncf-cache-status: HIT\r\nage: 4035\r\nexpires: Wed, 08 Oct 2025 09:13:33 GMT\r\ncache-control: public, max-age=14400\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=gLIVIhpiyKtlV2_slrEfPjzE3BW58B6whJenqQzAUHU-1759900413-1.0.1.1-uJRdTzVsoUDSuk9ik7RUuefmJNQ4Wg66WUhStLw1cKKWjAjqzwpq66um_k0oBp3VcoQ12b4UOfln9oz3crxoKLYVRaR_v_k32e7_wq6hmRI; path=/; expires=Wed, 08-Oct-25 05:43:33 GMT; domain=.viva88athenae.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fd943c7ef4e87e7ffb66ae1d1ae3a1b","sha1":"ede68872809c0ff7a62a063dc889b961da200e8e","sha256":"8a8dbff878032e3ad32d7e087c77eb065b7ab5bce7f3956fc58d331bfe74f9a9","sha512":"5f9f21e0dd41194f02ed029a048a0e4c741b64d1e6ff0fce785f79864c2428a18424221e55dc0887068e0a4278bfd4daafa825ad5855c3f0f70ba01392e17c61","ssdeep":"","tlshash":"60116365970a4eec8283e8a68a1a09894f9920b2e45b295dd421e68bd4d74e6e02754c","first_seen":"2025-02-01T22:41:26.030981Z","last_seen":"2026-04-04T05:56:02.665425Z","times_seen":1886,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}