{"report_id":"d573e797-341c-4aaa-bca2-427b49789725","version":6,"status":"done","tags":[],"date":"2024-07-27T18:52:36Z","url":{"schema":"http","addr":"mail.nwfpg.zdnbk.biz.id/","fqdn":"mail.nwfpg.zdnbk.biz.id","domain":"zdnbk.biz.id","tld":"biz.id"},"ip":{"addr":"104.21.57.40","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"mail.nwfpg.zdnbk.biz.id/verify.php","fqdn":"mail.nwfpg.zdnbk.biz.id","domain":"zdnbk.biz.id","tld":"biz.id"},"title":"Konfirmasi: Anda Bukan Robot!"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T08:02:33Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-07-27 18:12:19","alert_count":0,"request_count":3,"received_data":2662,"sent_data":981,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mail.nwfpg.zdnbk.biz.id","ip":{"addr":"172.67.189.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":5614,"sent_data":1613,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30 02:15:09","last_seen":"2024-07-27 18:37:49","alert_count":0,"request_count":2,"received_data":61375,"sent_data":981,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-07-27T18:52:11Z","timestamp":1722106331,"ip_dst":{"addr":"Client IP","port":58482,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.57.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2024-07-27T18:52:11.075371+0000\",\"flow_id\":1238500021894655,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.57.40\",\"src_port\":443,\"dest_ip\":\"172.18.0.26\",\"dest_port\":58482,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"mail.nwfpg.zdnbk.biz.id\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":859,\"bytes_toclient\":213,\"start\":\"2024-07-27T18:52:11.065023+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-07-27T18:52:11Z","timestamp":1722106331,"ip_dst":{"addr":"Client IP","port":58496,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.57.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2024-07-27T18:52:11.082287+0000\",\"flow_id\":208730073017661,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.57.40\",\"src_port\":443,\"dest_ip\":\"172.18.0.26\",\"dest_port\":58496,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"mail.nwfpg.zdnbk.biz.id\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":213,\"start\":\"2024-07-27T18:52:11.077117+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-07-27T18:52:12Z","timestamp":1722106332,"ip_dst":{"addr":"Client IP","port":58506,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"104.21.57.40","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2024-07-27T18:52:12.302052+0000\",\"flow_id\":229814067560017,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"104.21.57.40\",\"src_port\":443,\"dest_ip\":\"172.18.0.26\",\"dest_port\":58506,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"mail.nwfpg.zdnbk.biz.id\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":213,\"start\":\"2024-07-27T18:52:12.294481+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2b09c06f0e714b6144a6788a28e3950","sha1":"ce54f85f278fbcd5cb2292f9c186eedf63cdcf88","sha256":"d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5","sha512":"4e82fa51859e3f18e10d028d8a84a2e00c89e4a911c58f85d7e162ec9821d07a792a4dbfb3c143ef3bac2437689df7b9074d10c3e07cb5a5f117a0852e7a8d0b","ssdeep":"1536:7mwziELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWUZ78:awmza3YCl45wZODZTbYR8","tlshash":"7e73c5593244b4730ada85b68037430bf3265998b24b812cb57cadde2a7dcc67277f78","size":80668,"data":"","first_seen":"2023-08-05T00:21:02Z","last_seen":"2026-04-05T12:59:50.953035Z","times_seen":4684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.27","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-27T18:52:10.948650521Z","timestamp":1722106330948,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"5D2CC1A96F886C04483D570F2FBA83B9B430796D2FAF9D6D115CCA98BC6B713F\"\r\nLast-Modified: Sat, 27 Jul 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=16281\r\nExpires: Sat, 27 Jul 2024 23:23:31 GMT\r\nDate: Sat, 27 Jul 2024 18:52:10 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"182b9c01b864c7d116c3fc28cbb58d6e","sha1":"644efdd1cd6ee4e5d5ec976387b3dbf47ed51dc1","sha256":"5d2cc1a96f886c04483d570f2fba83b9b430796d2faf9d6d115cca98bc6b713f","sha512":"f1d6cd69db95a577701c3f1f461265338578115386dfb851e46e4ed326beeac57972012be668e3e35d8a1c80606865530a88a1132f1f1dd068f5b4a9e49d119d","ssdeep":"","tlshash":"4bf07585056c7586f378070419e8f2149911eadd2c442da2681043e1fc3b7f241c440c","first_seen":"2024-07-27T14:02:03Z","last_seen":"2024-08-19T15:35:34.356344Z","times_seen":27365,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.nwfpg.zdnbk.biz.id/","fqdn":"mail.nwfpg.zdnbk.biz.id","domain":"zdnbk.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.189.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-27T18:52:11.177Z","timestamp":1722106331177,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.nwfpg.zdnbk.biz.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sat, 27 Jul 2024 18:52:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nlocation: verify.php\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=MV6xQ9JNFIdwMF%2BCTt8Ui%2By%2BTlIgkg3za079JR3%2FLL4Jaj%2BLnHugoIAcOc6kdNFww6wCC5EWJXr%2BIkonlglY6ptcoe5kZb3kMk%2BiK87W06rNQ7RvhhS6%2BECQrH0CCjCGQuisUA6vwuCTKQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8a9ed339df01b515-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":1110,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.nwfpg.zdnbk.biz.id/verify.php","fqdn":"mail.nwfpg.zdnbk.biz.id","domain":"zdnbk.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.189.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.nwfpg.zdnbk.biz.id/verify.php","date":"2024-07-27T18:52:12.659Z","timestamp":1722106332659,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /verify.php HTTP/1.1\r\nHost: mail.nwfpg.zdnbk.biz.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 27 Jul 2024 18:52:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nset-cookie: PHPSESSID=57335a3aa12171a5d94a85f996272c98; path=/\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=M1vfMAtMgocfV311A%2FsV9UJegmX7pUjwtLT5rpK%2FNd2HBZlePJmdZ3lev5Arc%2F%2BRYUo%2F0Uhq57%2F0QqekdPSaCjcvD8H3HR8IMZvthz0ATuogQa7zTyWSfsZYXXlWH3mNAXi5CtdOWvfydQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8a9ed340fd8ab515-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":903,"size_decoded":1823,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"9372593d5ea90c90fc9b07f0fd389abf","sha1":"bb18c5567dd385ad916feecf02b6ae003e0888c7","sha256":"f8b5321b092ab3626024f59892e9dc8379f6ed7c3f898644e4c59d5ca0b62e4e","sha512":"cf6dace283140e19305c40892bfec55ae5857b2c02d2a2e11a9c8ca86e736cf6217585404e2fba44984eaedf2f466a4539ff97e309aab36b3f9a3f33cfc880ed","ssdeep":"","tlshash":"d131645694f2298b205289ec22d8e5147c48d147ca469ccc3eee17e40fc2e874d6725d","first_seen":"2024-08-19T15:33:37.991543Z","last_seen":"2024-08-19T15:33:37.991543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://mail.nwfpg.zdnbk.biz.id/verify.php","date":"2024-07-27T18:52:12.653Z","timestamp":1722106332653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2023 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 27 Sep 2023 18:13:13 GMT","end":"Mon, 28 Oct 2024 18:13:12 GMT"},"fingerprint":{"sha1":"05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09","sha256":"0F:90:CD:B5:CD:3B:AE:F1:BB:01:3A:4D:6D:2E:A6:BA:98:C6:1B:1B:75:BE:DD:CB:39:33:E8:D1:21:F1:9F:EF"}}},"request":{"raw":"GET /npm/bootstrap@5.3.1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://mail.nwfpg.zdnbk.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.nwfpg.zdnbk.biz.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.1\r\nx-jsd-version-type: version\r\netag: W/\"38d97-sT73BUPXDB7H/dVqXrydfWQCOFE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 27 Jul 2024 18:52:12 GMT\r\nage: 2829413\r\nx-served-by: cache-fra-eddf8230044-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 34728\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34728,"size_decoded":232855,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"896192cc65e20f1fcc6d792b5b9a4626","sha1":"b13ef70543d70c1ec7fdd56a5ebc9d7d64023851","sha256":"d939d21f27010c09b6c2966681d8b4cfcd64ca418f240922518f967fded16ef6","sha512":"67f75e7f9cf9bb6691f3d3aecd873198327406777957570aa8111bbcb3a250d59d83d3d079756f5cb23dd1213840e1c695f2ea5270cd540632662f14c144e659","ssdeep":"1536:EZCtjXbn98fOdRfvO5wlP7Qy9A37zV98IsY/ElV6V6pz600I41r:/tjT98fNV98mI6V6pz600I41r","tlshash":"d53481d6f590317d9ca7c1499681fefd896fa985cb1209aaf003776807cabd30962dcc","first_seen":"2023-08-02T23:07:40Z","last_seen":"2026-04-05T14:58:49.597356Z","times_seen":5499,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":31,"dns":1,"connect":13,"send":0,"wait":14,"receive":7,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.nwfpg.zdnbk.biz.id/verify.php","date":"2024-07-27T18:52:12.656Z","timestamp":1722106332656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2023 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 27 Sep 2023 18:13:13 GMT","end":"Mon, 28 Oct 2024 18:13:12 GMT"},"fingerprint":{"sha1":"05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09","sha256":"0F:90:CD:B5:CD:3B:AE:F1:BB:01:3A:4D:6D:2E:A6:BA:98:C6:1B:1B:75:BE:DD:CB:39:33:E8:D1:21:F1:9F:EF"}}},"request":{"raw":"GET /npm/bootstrap@5.3.1/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://mail.nwfpg.zdnbk.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.nwfpg.zdnbk.biz.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.1\r\nx-jsd-version-type: version\r\netag: W/\"13b1c-zlT4XyePvNXLIpL5wYbu32PNz4g\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 27 Jul 2024 18:52:12 GMT\r\nage: 404788\r\nx-served-by: cache-fra-etou8220068-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 25082\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25082,"size_decoded":80668,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"e2b09c06f0e714b6144a6788a28e3950","sha1":"ce54f85f278fbcd5cb2292f9c186eedf63cdcf88","sha256":"d2ea6c1e0cabca20d18e924b25a1cd0187c38ba7c33f60ab06e1b0402b9bcdb5","sha512":"4e82fa51859e3f18e10d028d8a84a2e00c89e4a911c58f85d7e162ec9821d07a792a4dbfb3c143ef3bac2437689df7b9074d10c3e07cb5a5f117a0852e7a8d0b","ssdeep":"1536:7mwziELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWUZ78:awmza3YCl45wZODZTbYR8","tlshash":"7e73c5593244b4730ada85b68037430bf3265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2023-08-05T00:21:02Z","last_seen":"2026-04-05T12:59:50.953035Z","times_seen":4684,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":55,"dns":1,"connect":26,"send":0,"wait":17,"receive":2,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.nwfpg.zdnbk.biz.id/verify.php","fqdn":"mail.nwfpg.zdnbk.biz.id","domain":"zdnbk.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.189.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://mail.nwfpg.zdnbk.biz.id/verify.php","date":"2024-07-27T18:52:12.659Z","timestamp":1722106332659,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /verify.php HTTP/1.1\r\nHost: mail.nwfpg.zdnbk.biz.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.nwfpg.zdnbk.biz.id/verify.php\r\nCookie: PHPSESSID=57335a3aa12171a5d94a85f996272c98\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 27 Jul 2024 18:52:12 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FBRh4D2JUwxcC1HNNg04%2BfA8O8aE1SJmlNN6VZ0ekJSeZnFQ2OsG1tZ0%2BCuyz4Ig%2F9EXn%2Bwmvp7RGpnmxJs7ZhND9tTP%2Bwjm8%2BlFQ3By4jZZ2ikFbFAupsLksGhjXED1JvIZfzEUws6y2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8a9ed3431a17b515-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":903,"size_decoded":1823,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"9372593d5ea90c90fc9b07f0fd389abf","sha1":"bb18c5567dd385ad916feecf02b6ae003e0888c7","sha256":"f8b5321b092ab3626024f59892e9dc8379f6ed7c3f898644e4c59d5ca0b62e4e","sha512":"cf6dace283140e19305c40892bfec55ae5857b2c02d2a2e11a9c8ca86e736cf6217585404e2fba44984eaedf2f466a4539ff97e309aab36b3f9a3f33cfc880ed","ssdeep":"","tlshash":"d131645694f2298b205289ec22d8e5147c48d147ca469ccc3eee17e40fc2e874d6725d","first_seen":"2024-08-19T15:33:37.991543Z","last_seen":"2024-08-19T15:33:37.991543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-27T18:52:13.141604694Z","timestamp":1722106333141,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"310CA992570F568ED449D579727A026E44E75F4DD6A609897A3FBA0BC7CBCE57\"\r\nLast-Modified: Sat, 27 Jul 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5614\r\nExpires: Sat, 27 Jul 2024 20:25:47 GMT\r\nDate: Sat, 27 Jul 2024 18:52:13 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fe86340c305817b173f7c0f3f59c795b","sha1":"bae41a5fad9f6cf6e13281eb7d567d6103f292b3","sha256":"310ca992570f568ed449d579727a026e44e75f4dd6a609897a3fba0bc7cbce57","sha512":"aead2ac0e45f187f797ed266c8b5b3b6eb6706c61947647d3db4eb6450d431b2353e524f58c542d751dce06d118f2f5e7bba85b60651ff94536869afa590c581","ssdeep":"","tlshash":"0df00e1211f97662a3740a1b3caee2380d18b6ac318a7ef4f1e043f5643679a12c0088","first_seen":"2024-07-27T11:05:01Z","last_seen":"2024-08-19T15:36:31.273261Z","times_seen":26985,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-27T18:52:13.142560986Z","timestamp":1722106333142,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"310CA992570F568ED449D579727A026E44E75F4DD6A609897A3FBA0BC7CBCE57\"\r\nLast-Modified: Sat, 27 Jul 2024 06:58:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5614\r\nExpires: Sat, 27 Jul 2024 20:25:47 GMT\r\nDate: Sat, 27 Jul 2024 18:52:13 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fe86340c305817b173f7c0f3f59c795b","sha1":"bae41a5fad9f6cf6e13281eb7d567d6103f292b3","sha256":"310ca992570f568ed449d579727a026e44e75f4dd6a609897a3fba0bc7cbce57","sha512":"aead2ac0e45f187f797ed266c8b5b3b6eb6706c61947647d3db4eb6450d431b2353e524f58c542d751dce06d118f2f5e7bba85b60651ff94536869afa590c581","ssdeep":"","tlshash":"0df00e1211f97662a3740a1b3caee2380d18b6ac318a7ef4f1e043f5643679a12c0088","first_seen":"2024-07-27T11:05:01Z","last_seen":"2024-08-19T15:36:31.273261Z","times_seen":26985,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"mail.nwfpg.zdnbk.biz.id/favicon.ico","fqdn":"mail.nwfpg.zdnbk.biz.id","domain":"zdnbk.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.189.29","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://mail.nwfpg.zdnbk.biz.id/verify.php","date":"2024-07-27T18:52:12.949Z","timestamp":1722106332949,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mail.nwfpg.zdnbk.biz.id\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://mail.nwfpg.zdnbk.biz.id/verify.php\r\nCookie: PHPSESSID=57335a3aa12171a5d94a85f996272c98\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sat, 27 Jul 2024 18:52:14 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nCF-Cache-Status: BYPASS\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lCaa2jcKUVhwWup2AVINQGxgMXVprDxAxB43Tgll6kIPTz9lMM9EdGzm5q8H6GicHhufkcpvjOrKUJibhvsFRFHIZjqnoKGQpDoz92QkNVm02pnCDzReOWroz7uAkzb%2B6PhlGCcz8sPnYA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8a9ed344ee2cb515-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":720,"size_decoded":1251,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-05T14:49:33.391735Z","times_seen":115949,"resource_available":true,"data":null}},"time_used":1437,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}