GET goodimg.io/images/2025/03/04/promo.webp
104.21.7.144200 OK 1.1 kB URL GET goodimg.io/images/2025/03/04/promo.webp
IP 104.21.7.144:443
Certificate IssuerGoogle Trust Services
Subjectgoodimg.io
Fingerprint46:94:A0:99:09:20:6D:68:41:F9:D8:FB:F4:B5:7E:8F:03:DD:41:24
ValidityThu, 17 Apr 2025 12:37:03 GMT - Wed, 16 Jul 2025 13:35:17 GMT
File type RIFF (little-endian) data, Web/P image
Hash 69ea032eb7368c90110a0e8fb349574d
187cdb4aa3f853572c9efb4f47f19d95965dc3a1
ab0c176130c0b2abdcaf8613475ce60df2a3c4bce9a7f5530a8460a154c07223
GET /images/2025/03/04/promo.webp HTTP/1.1
Host: goodimg.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-length: 1062
server: cloudflare
last-modified: Tue, 04 Mar 2025 15:47:50 GMT
etag: "426-62f8631f7fc9e"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=j2Et6nwaoRLJQ9bu44T6NRVbxib8AeBC0IcN8vyqyEz2fF6oBCwbD9%2Bz3x0GxFak7l5Su2en%2FASMSzcDUYO%2BQIZ%2FmMyS4y%2Bs"}]}
age: 45
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d29dbb90b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET laz-g-cdn.alicdn.com/lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/font_482437_i9tqljab236p3nmi.woff
90.84.161.25200 OK 50 kB URL GET laz-g-cdn.alicdn.com/lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/font_482437_i9tqljab236p3nmi.woff
IP 90.84.161.25:443
Certificate IssuerGlobalSign nv-sa
Subjectlaz-g-cdn.alicdn.com
FingerprintA5:45:B9:D4:07:B7:25:BF:8B:2F:B5:D1:76:4B:72:0B:04:FD:10:91
ValidityTue, 22 Apr 2025 02:21:08 GMT - Sun, 24 May 2026 02:21:07 GMT
File type Web Open Font Format, TrueType, length 49860, version 1.0
Hash 9ed0a9af13e99f4a094d3667c7bfb071
e8c1a8ddde34f6f1fc5adacc1a24a29cab98c1db
e31ffa4ab077866db78d07241dddd66d8930229f67f42350ec8c8cbf278a539a
GET /lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/font_482437_i9tqljab236p3nmi.woff HTTP/1.1
Host: laz-g-cdn.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: font/woff
content-length: 49860
server: openresty
x-oss-request-id: 6819CA4019802F3736533BBD
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12542599084261558410
x-oss-storage-class: Standard
content-md5: ntCprxPpn0oJTTZnx7+wcQ==
x-oss-server-time: 15
access-control-allow-origin: *
x-source-scheme: https
via: EU-GER-frankfurt-EDGE5-CACHE6[4],EU-GER-frankfurt-EDGE5-CACHE5[0,TCP_HIT,3],EU-FRA-paris-GLOBAL1-CACHE24[3],EU-FRA-paris-GLOBAL1-CACHE21[0,TCP_HIT,2],ens-cache22.l2nu20-20[0,0,200-0,H], ens-cache35.l2nu20-20[1,0], ens-cache4.l2hk11[0,0,200-0,H], ens-cache29.l2hk11[1,0], cache31.l2fr1[249,248,200-0,M], cache37.l2fr1[250,0], ens-cache30.fr6[0,0,200-0,H], ens-cache38.fr6[2,0]
ali-swift-global-savetime: 1746520640
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 06 May 2025 08:37:39 GMT
x-swift-cachetime: 3581
timing-allow-origin: *
eagleid: a3b5fdba17465231685838065e
x-ccdn-expires: 2152954
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 0500298b3b1cc67f178428c11b351ff7
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
age: 439046
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/mui/i18n/5.0.4/??index.js,format.js
90.84.160.25200 OK 2.1 kB URL GET g.lazcdn.com/g/mui/i18n/5.0.4/??index.js,format.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (2118), with no line terminators
Hash 12ff6103c2d49bf3220254168787da66
ee2c9b09031bae4ab6b75f6b6dab07a38b49277b
64205e0c13306d03d4193cfc721dfb14615b12a43b56a59418450a92242e3206
GET /g/mui/i18n/5.0.4/??index.js,format.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 934
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 684078147116103738099746
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5889341508962415343
x-oss-storage-class: Standard
content-md5: Vni6Jx9uX2H21rvwqN9KaQ==
x-oss-server-time: 4
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fdb617490555079428237e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE18[3],EU-FRA-paris-GLOBAL1-CACHE21[0,TCP_HIT,2],cache1.l2fr1[570,569,200-0,M], cache2.l2fr1[571,0], ens-cache30.fr6[0,0,200-0,H], ens-cache14.fr6[2,0]
ali-swift-global-savetime: 1749055508
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Wed, 04 Jun 2025 16:45:08 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fda217495502755257686e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 25c8853b6066e69f42e4ec4240739aa1
nginx-hit: 1
age: 2575
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzd-cs/chat/2.5.0/alichat.css
90.84.160.25200 OK 914 B URL GET g.lazcdn.com/g/lzd-cs/chat/2.5.0/alichat.css
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type ASCII text, with very long lines (910), with CRLF line terminators
Hash a509975673a452b33e1c17ba587a4fd8
cfb00b8d692eb9e71e154233d9eaaa7f29ef189b
0f01f3eb1c5ec217214530aabed7b1fbaa1b36ae9e47be680104b8c46a76b340
GET /g/lzd-cs/chat/2.5.0/alichat.css HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: text/css
server: openresty
vary: Accept-Encoding, Accept-Encoding
x-oss-request-id: 6840192A82E9DB3639130222
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12366946014521292088
x-oss-storage-class: Standard
content-md5: w1Gvgs0nDF42Yy/SoJlHZw==
x-oss-server-time: 52
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6079517490312099865441e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE3[2],EU-FRA-marseille-EDGE1-CACHE2[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE9[3],EU-FRA-paris-GLOBAL1-CACHE16[0,TCP_HIT,1],cache16.l2fr1[0,0,200-0,H], cache5.l2fr1[1,0], ens-cache30.fr6[0,0,200-0,H], ens-cache5.fr6[1,0]
ali-swift-global-savetime: 1749031211
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Wed, 04 Jun 2025 11:05:48 GMT
x-swift-cachetime: 600863
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9917494672166368222e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 192b16120cca23b04879722f34c0ad8e
nginx-hit: 1
age: 47844
cache-control: max-age=2592000,s-maxage=86400
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
content-encoding: br
GET g.lazcdn.com/g/lzdfe/pdp-platform/0.1.22/pc.css
90.84.160.25200 OK 6.5 kB URL GET g.lazcdn.com/g/lzdfe/pdp-platform/0.1.22/pc.css
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type ASCII text, with very long lines (6449), with CRLF line terminators
Hash 17fbadd502b81b226f140e2626b59882
418a3bb9c84482cf5c6eabcb251496ec79a5c00b
f025608eb81037815a5c2de7868b0d941819fee8a0dbff8052703c7bfecd4c16
GET /g/lzdfe/pdp-platform/0.1.22/pc.css HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: text/css
content-length: 2193
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6847FBF99606BB3836FDC2CE
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3171041400854944349
x-oss-storage-class: Standard
content-md5: LO+js6UX0N1j7hLy9V9TjA==
x-oss-server-time: 21
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fd9917495480248376797e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[1],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE5[4],EU-FRA-paris-GLOBAL1-CACHE11[0,TCP_HIT,3],cache10.l2fr1[1022,1022,200-0,M], cache16.l2fr1[1023,0], ens-cache22.fr6[0,0,200-0,H], ens-cache35.fr6[1,0]
ali-swift-global-savetime: 1749548025
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 09:33:45 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdb717495480258802110e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 6f5abe2837cfd1615000b3936554ea9a
nginx-hit: 1
age: 5845
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/aeis.alicdn.com/sd/ncpc/nc.js?t=18507
172.67.189.152200 OK 232 kB URL GET cdn.lazadapro.co/lazada/aeis.alicdn.com/sd/ncpc/nc.js?t=18507
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type JavaScript source, ASCII text, with very long lines (32041)
Size 232 kB (232520 bytes)
Hash d830715dfba385e814b8e2db9f8df48a
652d8d66f7fbda43f2d8d3878b40c9452623e0be
09a8a91a4d25c77e7b5840851693444aaa0f6b4b69d8e112291611723ed86d2c
GET /lazada/aeis.alicdn.com/sd/ncpc/nc.js?t=18507 HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: text/javascript
server: cloudflare
last-modified: Mon, 02 Jun 2025 06:59:52 GMT
etag: "38c48-636914f891680-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
age: 4095
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=gy2XnJULXgZOP8sOY7ZIW6MW2XBELJyfCNQ9C7ULzMZL6zBjSLCcZK0KZsVLeiMw%2FqIx%2BzNibUkBwoe2kjqgq1hu%2BphKelrVA6wQr0wI"}]}
cf-ray: 94d86d27da7b569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET dewi1001.com/assets/logo.gif
66.29.132.60200 OK 209 kB URL GET dewi1001.com/assets/logo.gif
IP 66.29.132.60:443
Certificate IssuerSectigo Limited
Subjectdewi1001.com
FingerprintB3:27:96:68:65:65:B2:9C:4F:0D:A7:F9:3C:BB:AD:B2:7B:00:4D:D1
ValidityMon, 09 Jun 2025 00:00:00 GMT - Tue, 09 Jun 2026 23:59:59 GMT
File type GIF image data, version 89a, 800 x 300
Size 209 kB (209153 bytes)
Hash 91dc1ae2911e341bdb2ddd5ce0f00d83
f27b07f59c3c03cd9983ecba02bd32c64734046c
ce02c2b4c8179a39a1d92f474b57472bc143634b2a65f5dde35d298e72237b14
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/logo.gif HTTP/1.1
Host: dewi1001.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 17 Jun 2025 11:11:10 GMT
content-type: image/gif
last-modified: Mon, 09 Jun 2025 13:20:46 GMT
accept-ranges: bytes
content-length: 209153
date: Tue, 10 Jun 2025 11:11:10 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/??mui/feloader/5.0.0/feloader-min.js,lzdmod/site-nav-pc/5.2.38/pc/index.js,lzdmod/jquery/5.0.9/index.js,lzdmod/site-nav-pc/5.2.38/assets/links-bar/index.js,lzdmod/common-info/5.0.30/index.js,lzdmod/site-nav-pc/5.2.38/assets/reqwest/index.js,lzdmod/site-nav-pc/5.2.38/assets/common/popper/index.js,lzdmod/site-nav-pc/5.2.38/assets/cart/index.js,lzdmod/site-nav-pc/5.2.38/assets/download-app/index.js,lzdmod/site-nav-pc/5.2.38/i18n.js,lzdmod/site-nav-pc/5.2.38/assets/track-order/index.js,lzdmod/site-nav-pc/5.2.38/assets/switch-lang/index.js,lzdmod/site-nav-pc/5.2.38/assets/user-info/index.js,lzdmod/site-nav-pc/5.2.38/assets/affiliate/index.js,lzdmod/site-nav-pc/5.2.38/assets/logo-bar/index.js,lzdmod/site-nav-pc/5.2.38/assets/search-box/index.js,lzdmod/site-nav-pc/5.2.38/assets/liveup/index.js,lzdmod/site-menu-pc/5.0.45/pc/index.js,lzdmod/site-menu-nav-pc/5.0.73/pc/index.js,lzdmod/desktop-footer/6.1.1/pc/index.js,lzdmod/desktop-footer/6.1.1/pc/reqwest/index.js
90.84.160.25200 OK 189 kB URL GET g.lazcdn.com/g/??mui/feloader/5.0.0/feloader-min.js,lzdmod/site-nav-pc/5.2.38/pc/index.js,lzdmod/jquery/5.0.9/index.js,lzdmod/site-nav-pc/5.2.38/assets/links-bar/index.js,lzdmod/common-info/5.0.30/index.js,lzdmod/site-nav-pc/5.2.38/assets/reqwest/index.js,lzdmod/site-nav-pc/5.2.38/assets/common/popper/index.js,lzdmod/site-nav-pc/5.2.38/assets/cart/index.js,lzdmod/site-nav-pc/5.2.38/assets/download-app/index.js,lzdmod/site-nav-pc/5.2.38/i18n.js,lzdmod/site-nav-pc/5.2.38/assets/track-order/index.js,lzdmod/site-nav-pc/5.2.38/assets/switch-lang/index.js,lzdmod/site-nav-pc/5.2.38/assets/user-info/index.js,lzdmod/site-nav-pc/5.2.38/assets/affiliate/index.js,lzdmod/site-nav-pc/5.2.38/assets/logo-bar/index.js,lzdmod/site-nav-pc/5.2.38/assets/search-box/index.js,lzdmod/site-nav-pc/5.2.38/assets/liveup/index.js,lzdmod/site-menu-pc/5.0.45/pc/index.js,lzdmod/site-menu-nav-pc/5.0.73/pc/index.js,lzdmod/desktop-footer/6.1.1/pc/index.js,lzdmod/desktop-footer/6.1.1/pc/reqwest/index.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (27672)
Size 189 kB (188948 bytes)
Hash 2ccd0968cdba249db3247c66f9f87c18
f2fd43093bea8756c20c99ade52e4e7089d0446e
cd1411bbb194fde0a1a0b729f03c3a5bb38ca17b43983b0eb706c519a34280ca
GET /g/??mui/feloader/5.0.0/feloader-min.js,lzdmod/site-nav-pc/5.2.38/pc/index.js,lzdmod/jquery/5.0.9/index.js,lzdmod/site-nav-pc/5.2.38/assets/links-bar/index.js,lzdmod/common-info/5.0.30/index.js,lzdmod/site-nav-pc/5.2.38/assets/reqwest/index.js,lzdmod/site-nav-pc/5.2.38/assets/common/popper/index.js,lzdmod/site-nav-pc/5.2.38/assets/cart/index.js,lzdmod/site-nav-pc/5.2.38/assets/download-app/index.js,lzdmod/site-nav-pc/5.2.38/i18n.js,lzdmod/site-nav-pc/5.2.38/assets/track-order/index.js,lzdmod/site-nav-pc/5.2.38/assets/switch-lang/index.js,lzdmod/site-nav-pc/5.2.38/assets/user-info/index.js,lzdmod/site-nav-pc/5.2.38/assets/affiliate/index.js,lzdmod/site-nav-pc/5.2.38/assets/logo-bar/index.js,lzdmod/site-nav-pc/5.2.38/assets/search-box/index.js,lzdmod/site-nav-pc/5.2.38/assets/liveup/index.js,lzdmod/site-menu-pc/5.0.45/pc/index.js,lzdmod/site-menu-nav-pc/5.0.73/pc/index.js,lzdmod/desktop-footer/6.1.1/pc/index.js,lzdmod/desktop-footer/6.1.1/pc/reqwest/index.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 76018
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 68422372E71FDC3937BC7920
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5754340992191081510
x-oss-storage-class: Standard
content-md5: Xignf5zBtp7GvqZWEqODlA==
x-oss-server-time: 4
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6319e17491649134684305e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[4],EU-FRA-marseille-EDGE1-CACHE3[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE9[5],EU-FRA-paris-GLOBAL1-CACHE25[0,TCP_HIT,1],cache39.l2fr1[0,19,200-0,H], cache14.l2fr1[21,0], ens-cache36.fr6[0,0,200-0,H], ens-cache3.fr6[1,0]
ali-swift-global-savetime: 1749164914
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 06 Jun 2025 04:08:53 GMT
x-swift-cachetime: 586781
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9717495508584964821e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 50c646c8104c9ef323bebe0d726ad6a2
nginx-hit: 1
age: 1018
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET goodimg.io/images/2025/03/04/daftar.png
104.21.7.144200 OK 1.3 kB URL GET goodimg.io/images/2025/03/04/daftar.png
IP 104.21.7.144:443
Certificate IssuerGoogle Trust Services
Subjectgoodimg.io
Fingerprint46:94:A0:99:09:20:6D:68:41:F9:D8:FB:F4:B5:7E:8F:03:DD:41:24
ValidityThu, 17 Apr 2025 12:37:03 GMT - Wed, 16 Jul 2025 13:35:17 GMT
File type PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
Hash 758793b408c98d9c9b652a41799b0ca4
168f134496d6a4c21b1bae7535ecd5327d9e21c1
564bb7e28c50cbd0740214282aab475bb45b1e3b23085087110969285bfe56f7
GET /images/2025/03/04/daftar.png HTTP/1.1
Host: goodimg.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 1271
server: cloudflare
last-modified: Tue, 04 Mar 2025 15:47:50 GMT
etag: "4f7-62f8631fbf443"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=U9HytY6vqmXIKT0gLBIYGnjnc5d4%2F%2FSb9ytN0Q1jQUTPKXeF3kGaFVfILJfXKHo%2Bu6ohx71dRRLh8SYiuDZKR7Xa4PzRXfQ4"}]}
cf-ray: 94d86d29dbc00b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.alicdn.com/sd/baxia-entry/index.js
163.181.253.194200 OK 18 kB URL GET g.alicdn.com/sd/baxia-entry/index.js
IP 163.181.253.194:443
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
FingerprintDA:3A:AA:7B:92:DB:F4:10:34:34:38:95:9D:FD:3C:A4:2B:74:29:F5
ValidityThu, 06 Mar 2025 10:12:19 GMT - Mon, 21 Jul 2025 09:06:01 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (17899)
Hash 1da27f788daed8db3f9538b528fade0b
753e594a437d0cad965cfb91433a674b6d18ea29
65b746cd7ea3e4f9adee9f1ff5abc88a700127e5de5d694cc5a604ff0df567dd
GET /sd/baxia-entry/index.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 6338
date: Tue, 10 Jun 2025 10:13:27 GMT
vary: Accept-Encoding
x-oss-request-id: 684805472239253730E9AD30
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2952046737970176587
x-oss-storage-class: Standard
cache-control: max-age=3600,s-maxage=3600
content-md5: HaJ/eI2u2Ns/lTi1KPreCw==
x-oss-server-time: 2
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
via: cache6.l2fr1[0,0,200-0,H], cache18.l2fr1[0,0], cache18.l2fr1[1,0], ens-cache29.fr6[0,0,200-0,H], ens-cache4.fr6[1,0]
age: 3467
ali-swift-global-savetime: 1749550407
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 10:13:27 GMT
x-swift-cachetime: 3600
timing-allow-origin: *
eagleid: a3b5fd9817495538745103879e
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/??code/npm/@ali/lzd-h5-utils-qs/0.1.11/index.js,code/npm/@ali/lzd-h5-utils-cookie/1.2.10/index.js,code/npm/@ali/lzd-h5-utils-sites/1.1.11/index.js,code/npm/@ali/lzd-h5-utils-env/1.5.12/index.js,code/npm/@ali/lzd-h5-utils-logger/1.1.52/index.js,code/npm/@ali/lzd-h5-utils-jsonp/1.1.11/index.js,code/npm/@ali/lzd-h5-utils-mtop/1.2.56/index.js,code/npm/@ali/lzd-h5-utils-icon/1.0.8/index.js,lzd/assets/1.1.18/require/2.3.6/require.js
90.84.160.25200 OK 120 kB URL GET g.lazcdn.com/g/??code/npm/@ali/lzd-h5-utils-qs/0.1.11/index.js,code/npm/@ali/lzd-h5-utils-cookie/1.2.10/index.js,code/npm/@ali/lzd-h5-utils-sites/1.1.11/index.js,code/npm/@ali/lzd-h5-utils-env/1.5.12/index.js,code/npm/@ali/lzd-h5-utils-logger/1.1.52/index.js,code/npm/@ali/lzd-h5-utils-jsonp/1.1.11/index.js,code/npm/@ali/lzd-h5-utils-mtop/1.2.56/index.js,code/npm/@ali/lzd-h5-utils-icon/1.0.8/index.js,lzd/assets/1.1.18/require/2.3.6/require.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (43362)
Size 120 kB (120074 bytes)
Hash 3afbafb75e64c645b3bb5cb7b6793464
b57c01b835e29803ff7ebeae2686964386b38f41
2726754203792131f6f2bb5c35ef8b51469d4015a70960b5fefecfc74575853c
GET /g/??code/npm/@ali/lzd-h5-utils-qs/0.1.11/index.js,code/npm/@ali/lzd-h5-utils-cookie/1.2.10/index.js,code/npm/@ali/lzd-h5-utils-sites/1.1.11/index.js,code/npm/@ali/lzd-h5-utils-env/1.5.12/index.js,code/npm/@ali/lzd-h5-utils-logger/1.1.52/index.js,code/npm/@ali/lzd-h5-utils-jsonp/1.1.11/index.js,code/npm/@ali/lzd-h5-utils-mtop/1.2.56/index.js,code/npm/@ali/lzd-h5-utils-icon/1.0.8/index.js,lzd/assets/1.1.18/require/2.3.6/require.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 44333
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 684175F3D4ED2D36334B86D3
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 6191161463746282032
x-oss-storage-class: Standard
content-md5: ke99PDi7m8hy/yV9RjNvWA==
x-oss-server-time: 3
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fdb017491204982384767e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[6],EU-FRA-marseille-EDGE1-CACHE1[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE14[4],EU-FRA-paris-GLOBAL1-CACHE7[0,TCP_HIT,4],cache23.l2fr1[0,21,200-0,H], cache1.l2fr1[23,0], ens-cache37.fr6[0,0,200-0,H], ens-cache25.fr6[1,0]
ali-swift-global-savetime: 1749120499
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Mon, 09 Jun 2025 10:53:10 GMT
x-swift-cachetime: 258909
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdad17495528005804128e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 7d50cf4c4ebb7a9e2a0ff3320a05d38e
nginx-hit: 1
age: 1070
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01RNizk522j2cPtaRjc_!!6000000007155-2-tps-96-70.png
172.67.189.152200 OK 7.7 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01RNizk522j2cPtaRjc_!!6000000007155-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash fd4c95d34e0fb7a0ea098e2816aed427
1819b9b759b018db77fb60269309a3ccb43011cd
d34efe5f1f7f0c134024c2e86b03ec10f231ff41e91910cf7ac6696515dad147
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01RNizk522j2cPtaRjc_!!6000000007155-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 7663
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "1def-62041e713504b"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2BBagcmJqGPCVy%2F13i64q9yNR%2F3S3ERGP1B8CrnRNlcAbP2hwtyOvQ9ot8hFA94vwujiu8HlQM3Sa%2Fj3AUq5yZaNnhMP7cDrHTwq44j%2FO"}]}
age: 4095
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d286b2e569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/??mmfe/cps-rt-tracking/0.0.6/index.js,lzdmod/back-to-third-party-app/5.0.2/m/button.js
90.84.160.25200 OK 9.5 kB URL GET g.lazcdn.com/g/??mmfe/cps-rt-tracking/0.0.6/index.js,lzdmod/back-to-third-party-app/5.0.2/m/button.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (9453), with no line terminators
Hash 6279b5eeafddf309e44b2842d458ee5c
98c53753ef3c7b6594c95b1b30308490c98f29e9
ff06575b33329109bd181fd9a2e620cea5f6490db4df2e10eff70638c5c9a5e2
GET /g/??mmfe/cps-rt-tracking/0.0.6/index.js,lzdmod/back-to-third-party-app/5.0.2/m/button.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 4741
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 68469EF68B22313437FB9E3D
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13181317527886529276
x-oss-storage-class: Standard
content-md5: dTKzgcezPlcK63K0IXxSGA==
x-oss-server-time: 11
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fd9b17494586780002276e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE4[3],EU-FRA-paris-GLOBAL1-CACHE27[0,TCP_HIT,1],cache27.l2fr1[0,0,200-0,H], cache1.l2fr1[0,0], ens-cache38.fr6[0,0,200-0,H], ens-cache18.fr6[1,0]
ali-swift-global-savetime: 1749458679
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 08:44:41 GMT
x-swift-cachetime: 518398
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fda617495450816184055e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 4f9c712c69d0a5350ef51ad847ef2f77
nginx-hit: 1
age: 8642
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzd/assets/1.2.10/web-vitals/3.4.0/index.js
90.84.160.25200 OK 7.1 kB URL GET g.lazcdn.com/g/lzd/assets/1.2.10/web-vitals/3.4.0/index.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (7063)
Hash c45552392cdac20ba6f120b65d5b70f7
562d2c8bae2b4da968426ed95cbc4f16975a4eaf
6a85cb4f69ef025b2b86a217f8e999a8f30f43181f15017115e807dd5b021766
GET /g/lzd/assets/1.2.10/web-vitals/3.4.0/index.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: application/javascript
content-length: 3093
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 683EDFD1AC2DC23635B8BAAF
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11420272930762712522
x-oss-storage-class: Standard
content-md5: xFVSOSzawgum8SC2XVtw9w==
x-oss-server-time: 18
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6319a17489509927506955e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE3[3],EU-FRA-marseille-EDGE1-CACHE2[0,TCP_HIT,2],EU-FRA-paris-GLOBAL1-CACHE20[5],EU-FRA-paris-GLOBAL1-CACHE25[0,TCP_HIT,4],cache37.l2fr1[0,0,200-0,H], cache9.l2fr1[1,0], ens-cache4.fr6[0,0,200-0,H], ens-cache11.fr6[1,0]
ali-swift-global-savetime: 1748950993
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 08:56:41 GMT
x-swift-cachetime: 441992
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9f17495464022926319e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 3f634c2209321eb71ba1408b78971bc6
nginx-hit: 1
age: 7446
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2
90.84.160.25200 OK 11 kB URL GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type Web Open Font Format (Version 2), TrueType, length 10788, version 1.0
Hash 709f6f90c7d493cd16b8cd087df492ab
8fb2a4d035a6f1a5290dc14b4cba324d558f1205
b79781efede37903be212fcdf63955e41c8649e678b6b83adf824459d240a188
GET /g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:11:14 GMT
content-type: font/woff2
content-length: 10788
server: openresty
x-oss-request-id: 684194F5461F30383491EF2A
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9556587264596756474
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: cJ9vkMfUk80WuM0IffSSqw==
x-oss-server-time: 22
x-source-scheme: https
eagleeye-traceid: a3b5fdb317491284364934836e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE3[2],EU-FRA-marseille-EDGE1-CACHE1[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE4[2],EU-FRA-paris-GLOBAL1-CACHE2[0,TCP_HIT,0],cache24.l2fr1[1042,1041,200-0,M], cache10.l2fr1[1043,0], ens-cache32.fr6[0,0,200-0,H], ens-cache13.fr6[1,0]
ali-swift-global-savetime: 1749128437
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 13:00:37 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fda117495487565848406e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 7beb78ac47a732482716caaa6e9a89e1
nginx-hit: 1
age: 3115
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
GET g.lazcdn.com/g/lazada-search-fe/lzd-searchbox/0.4.11/index.js
90.84.160.25200 OK 82 kB URL GET g.lazcdn.com/g/lazada-search-fe/lzd-searchbox/0.4.11/index.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 1663855fe3963805db3cdd7fb08ea591
b4b99318bdb2bcf37de40386cb4f2eb38d865638
49760473597b8b5964e4956f746fa8e098419b34f81f1236abb104e2e8ea9d1d
GET /g/lazada-search-fe/lzd-searchbox/0.4.11/index.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 26303
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6842BA21D7B60F39301C3350
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 16651348871760440931
x-oss-storage-class: Standard
content-md5: FmOFX+OWOAXbPN1/sI6lkQ==
x-oss-server-time: 16
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fdb417492034883971134e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[6],EU-FRA-marseille-EDGE1-CACHE2[0,TCP_HIT,2],EU-FRA-paris-GLOBAL1-CACHE25[4],EU-FRA-paris-GLOBAL1-CACHE8[0,TCP_HIT,3],cache14.l2fr1[0,31,200-0,H], cache22.l2fr1[33,0], ens-cache35.fr6[0,0,200-0,H], ens-cache24.fr6[1,0]
ali-swift-global-savetime: 1749203489
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 09:52:13 GMT
x-swift-cachetime: 259156
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdac17495491336222553e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 40b02dc739ee18d86375bbca07ad41b5
nginx-hit: 1
age: 4737
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzd-cs/chat/2.5.0/alichat.js
90.84.160.25200 OK 61 kB URL GET g.lazcdn.com/g/lzd-cs/chat/2.5.0/alichat.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (51794)
Hash 15a060108aeae08822567a29e7f6965f
4abe0872031b8f44f00653197fb9414be0917b44
ddef1520fd2834426eef8ec09bb4c7a331d2b3bd81c08825e1a9b9c6dcecc27a
GET /g/lzd-cs/chat/2.5.0/alichat.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: application/javascript
content-length: 23399
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6842C2815C88ED33335CDAF3
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9282551974550447056
x-oss-storage-class: Standard
content-md5: FaBgEIrq4IgiVnop5/aWXw==
x-oss-server-time: 18
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fda217492056323431907e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE3[3],EU-FRA-marseille-EDGE1-CACHE3[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE15[4],EU-FRA-paris-GLOBAL1-CACHE27[0,TCP_HIT,2],cache14.l2fr1[0,0,200-0,H], cache26.l2fr1[1,0], ens-cache15.fr6[0,0,200-0,H], ens-cache16.fr6[1,0]
ali-swift-global-savetime: 1749205633
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 10:28:16 GMT
x-swift-cachetime: 259137
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fda417495512969235834e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 5a7ea25d2d491b992b6801821e8a9a99
nginx-hit: 1
age: 2251
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
OPTIONS member.lazada.co.id/user/api/getUser
47.246.167.130200 OK 624 B URL OPTIONS member.lazada.co.id/user/api/getUser
IP 47.246.167.130:443
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subject*.lazada.com
Fingerprint61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
ValidityFri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash e9b4dd7a0675cbc285fccbbe5b6e2ce3
37fb06bd65ecf6f73e1d5ec2fecb16c1d7c6203c
3a9ea6432a34b3725d2fda8bfb24037a94c14a024781da0dff46052cea78046d
OPTIONS /user/api/getUser HTTP/1.1
Host: member.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type,x-csrf-token,x-requested-with
Referer: https://dewi1001.com/
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:14 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: https://dewi1001.com
access-control-allow-headers: content-type,x-csrf-token,x-requested-with
bxpunish: 1
server: Tengine/Aserver
eagleeye-traceid: 2102fcc917495538739848614e21e9
strict-transport-security: max-age=31536000
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Roboto+Slab:wght@100..900&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
142.250.178.74200 OK 70 kB URL GET fonts.googleapis.com/css2?family=Roboto+Slab:wght@100..900&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP 142.250.178.74:443
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint1C:09:46:89:AD:F3:B6:3E:B4:89:F7:49:AC:15:E7:4E:A6:D2:AA:73
ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
File type ASCII text, with very long lines (1572)
Hash 1f8d8f5b48b02f133ec7d407d1d52572
aaa9a48012ba302e1b0ded171cd4d66228d6ce2e
d2bbd266053ebdeedfd0fe6f89e8301d7c5eee71bea7ca443289dd64d8c12a57
GET /css2?family=Roboto+Slab:wght@100..900&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 10 Jun 2025 11:11:11 GMT
date: Tue, 10 Jun 2025 11:11:11 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lzd-img-global.slatic.net/g/tps/tfs/TB1nQJUcwmTBuNjy1XbXXaMrVXa-986-930.png
47.246.48.186200 OK 108 kB URL GET lzd-img-global.slatic.net/g/tps/tfs/TB1nQJUcwmTBuNjy1XbXXaMrVXa-986-930.png
IP 47.246.48.186:443
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type PNG image data, 986 x 930, 8-bit colormap, non-interlaced
Size 108 kB (108546 bytes)
Hash dd3d5eccd48c2eca13d74effb06ac4c7
f8f191e59241a14eab12f0c8d0bb6143e8257f01
291eb640c321aaa04e6923e874643621f29ce8d9e0317e15d7367bb8a363735e
GET /g/tps/tfs/TB1nQJUcwmTBuNjy1XbXXaMrVXa-986-930.png HTTP/1.1
Host: lzd-img-global.slatic.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: image/png
content-length: 108546
date: Wed, 21 May 2025 10:17:07 GMT
cache-control: max-age=3888000, s-maxage=3888000
etag: "DD3D5ECCD48C2ECA13D74EFFB06AC4C7"
x-oss-cdn-auth: success
content-md5: 3T1ezNSMLsoT107/sGrExw==
last-modified: Fri, 16 May 2025 09:35:20 GMT
accept-ranges: bytes
ali-swift-global-savetime: 1747822627
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 06 Jun 2025 15:12:09 GMT
x-swift-cachetime: 2487898
cdn-type: alibaba
access-control-allow-methods: GET,HEAD
access-control-allow-origin: *
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
via: ens-cache4.nl3[2,0]
timing-allow-origin: *
eagleid: 2ff6309817495538722668829e
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto/latin.woff2
90.84.160.25200 OK 11 kB URL GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto/latin.woff2
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type Web Open Font Format (Version 2), TrueType, length 10748, version 1.0
Hash ece6673e477b4d7aca12f04dace5ed60
f8ff7fbe231448a58d3989d84803dd66851b9988
4352380f92ce7f9a4a4a23306b992bed10055dbfffe90987cc72083e583fc280
GET /g/lzdfe/static/0.0.29/Roboto/latin.woff2 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: font/woff2
content-length: 10748
server: openresty
x-oss-request-id: 68419662D86EC1383952D02F
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15489323926058991130
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: 7OZnPkd7TXrKEvBNrOXtYA==
x-oss-server-time: 15
x-source-scheme: https
eagleeye-traceid: a3b5319a17491288017433620e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE3[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE18[6],EU-FRA-paris-GLOBAL1-CACHE22[3,TCP_MISS,5],cache9.l2fr1[0,0,200-0,H], cache29.l2fr1[1,0], ens-cache9.fr6[0,0,200-0,H], ens-cache25.fr6[1,0]
ali-swift-global-savetime: 1749128802
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 13:06:45 GMT
x-swift-cachetime: 604797
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdad17495514818117723e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 00c45fd16efea8c40e79c88926ec19af
nginx-hit: 1
age: 2391
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2
90.84.160.25200 OK 11 kB URL GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type Web Open Font Format (Version 2), TrueType, length 10788, version 1.0
Hash 709f6f90c7d493cd16b8cd087df492ab
8fb2a4d035a6f1a5290dc14b4cba324d558f1205
b79781efede37903be212fcdf63955e41c8649e678b6b83adf824459d240a188
GET /g/lzdfe/static/0.0.29/Roboto-Medium/latin.woff2 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: font/woff2
content-length: 10788
server: openresty
x-oss-request-id: 684194F5461F30383491EF2A
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9556587264596756474
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: cJ9vkMfUk80WuM0IffSSqw==
x-oss-server-time: 22
x-source-scheme: https
eagleeye-traceid: a3b5fdb317491284364934836e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE1[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE4[2],EU-FRA-paris-GLOBAL1-CACHE2[0,TCP_HIT,0],cache24.l2fr1[1042,1041,200-0,M], cache10.l2fr1[1043,0], ens-cache32.fr6[0,0,200-0,H], ens-cache13.fr6[1,0]
ali-swift-global-savetime: 1749128437
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 13:00:37 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fda117495487565848406e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 7cbbf5b704b91b1c115e95ad3d3046d8
nginx-hit: 1
age: 3113
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/??lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/next-noreset-1.css,lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/next-noreset-2.css,lazada/lazada-product-detail/1.7.4/index/index.css
90.84.160.25200 OK 412 kB URL GET g.lazcdn.com/g/??lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/next-noreset-1.css,lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/next-noreset-2.css,lazada/lazada-product-detail/1.7.4/index/index.css
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type ASCII text, with very long lines (65532), with CRLF line terminators
Size 412 kB (412214 bytes)
Hash 0b0e18dda16ec5e61529240b3a3191c6
d91faebc6c036977981192a546db68148b268d57
428999fa916da237442560ccd11f22dc53a5f73c036d476813c85d540670e620
GET /g/??lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/next-noreset-1.css,lzd/assets/0.0.7/dpl-buyeruikit/2.0.1/next-noreset-2.css,lazada/lazada-product-detail/1.7.4/index/index.css HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: text/css
content-length: 66147
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 68423EA4145D00393943D821
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15844781135382133320
x-oss-storage-class: Standard
content-md5: rQDWIYFqRsvPnTYuX7UILA==
x-oss-server-time: 5
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6319b17491718759115164e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[4],EU-FRA-marseille-EDGE1-CACHE2[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE3[3],EU-FRA-paris-GLOBAL1-CACHE19[0,TCP_HIT,3],cache36.l2fr1[0,7,200-0,H], cache22.l2fr1[9,0], ens-cache14.fr6[0,0,200-0,H], ens-cache34.fr6[1,0]
ali-swift-global-savetime: 1749171877
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 06 Jun 2025 04:04:42 GMT
x-swift-cachetime: 593995
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdb617495500082514813e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 23d54f661e3e01ec05a862d75e56510d
nginx-hit: 1
age: 3417
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN0193C9ay1QIykTmUlwk_!!6000000001954-2-tps-34-34.png
172.67.189.152200 OK 818 B URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN0193C9ay1QIykTmUlwk_!!6000000001954-2-tps-34-34.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
Hash ccd8a92cf0b406e88dce9bcc61e97eb3
7052c4c90179593c11231f414af3971666eb1b64
9756b9d29ce32ca935095424fbcef5588e4baa9c33c89cbd37aba40778c6eedc
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN0193C9ay1QIykTmUlwk_!!6000000001954-2-tps-34-34.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 818
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "332-62041e713dceb"
accept-ranges: bytes
access-control-allow-origin: *
age: 7141
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=NoOyE73CJeY524srRi6qoWXTAwnLm4qkI3NXh1edWTbpvwP9VpJAi9cGbCwmRLEA6E%2FwfjZAfYZiEKU6zCm24JmvbiQOjyP52r7aWqJN"}]}
cf-ray: 94d86d28bbb3569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
HEAD arms-retcode-sg.aliyuncs.com/r.png?t=pv×=1&page=%2F&tag=&release=&environment=prod&begin=1749553873293&uid=zzmvbb52qv0fCI7zzcLyew0lL2aC&dt=DEWI1001%3A%20Link%20Join%20Layanan%20Resmi%20Situs&dr=&dpr=1.00&de=utf-8&ul=id-ID&sr=1280x1024&vp=1280x1024&ct=&sid=0gmmzbwXqgLfpp7k2cFIet9owq8y&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=0jmm4b8tqIafUz7qIc4e00wdXj4C&sampling=1&dl=https%3A%2F%2Fdewi1001.com%2F&z=mbqf7c0c
8.222.203.130200 OK 0 B URL HEAD arms-retcode-sg.aliyuncs.com/r.png?t=pv×=1&page=%2F&tag=&release=&environment=prod&begin=1749553873293&uid=zzmvbb52qv0fCI7zzcLyew0lL2aC&dt=DEWI1001%3A%20Link%20Join%20Layanan%20Resmi%20Situs&dr=&dpr=1.00&de=utf-8&ul=id-ID&sr=1280x1024&vp=1280x1024&ct=&sid=0gmmzbwXqgLfpp7k2cFIet9owq8y&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=0jmm4b8tqIafUz7qIc4e00wdXj4C&sampling=1&dl=https%3A%2F%2Fdewi1001.com%2F&z=mbqf7c0c
IP 8.222.203.130:443
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subject*.arms.aliyuncs.com
Fingerprint42:C0:78:4D:62:EF:4A:4A:B5:99:FD:F6:CF:76:75:66:EC:DC:7C:4D
ValidityThu, 16 Jan 2025 03:36:01 GMT - Tue, 17 Feb 2026 03:36:00 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /r.png?t=pv×=1&page=%2F&tag=&release=&environment=prod&begin=1749553873293&uid=zzmvbb52qv0fCI7zzcLyew0lL2aC&dt=DEWI1001%3A%20Link%20Join%20Layanan%20Resmi%20Situs&dr=&dpr=1.00&de=utf-8&ul=id-ID&sr=1280x1024&vp=1280x1024&ct=&sid=0gmmzbwXqgLfpp7k2cFIet9owq8y&pid=hyey0hz67v%400edb7c0e5e09aea&_v=1.8.30&pv_id=0jmm4b8tqIafUz7qIc4e00wdXj4C&sampling=1&dl=https%3A%2F%2Fdewi1001.com%2F&z=mbqf7c0c HTTP/1.1
Host: arms-retcode-sg.aliyuncs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dewi1001.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:14 GMT
content-length: 0
access-control-allow-origin: *
timing-allow-origin: *
access-control-allow-headers: Keep-Alive,User-Agent,X-Requested-With,Cache-Control,Content-Type,Authorization,X-Dtc
X-Firefox-Spdy: h2
GET goodimg.io/images/2025/03/04/login.png
104.21.7.144200 OK 4.9 kB URL GET goodimg.io/images/2025/03/04/login.png
IP 104.21.7.144:443
Certificate IssuerGoogle Trust Services
Subjectgoodimg.io
Fingerprint46:94:A0:99:09:20:6D:68:41:F9:D8:FB:F4:B5:7E:8F:03:DD:41:24
ValidityThu, 17 Apr 2025 12:37:03 GMT - Wed, 16 Jul 2025 13:35:17 GMT
File type PNG image data, 50 x 51, 8-bit/color RGBA, non-interlaced
Hash 5030a0470aaacc9efd7a5446ed4628a7
c5c53596b62139874adfeb39984d8151638c300c
eda0b47e64bebe25ecdc7a33ca1fef3560c2478c4cc4baf776a6a17fc962b6ad
GET /images/2025/03/04/login.png HTTP/1.1
Host: goodimg.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 4869
server: cloudflare
last-modified: Tue, 04 Mar 2025 15:47:50 GMT
etag: "1305-62f8631f3c678"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Cvtq2p7pKvtEKEGXeYCc%2F2HW8VhOMmE1CvySyhEolZYFA0pqDi3ntA5Sq8i%2BCSy6OoVRRXhwH1OcDuTUrjaJSmFAjnJJWokO"}]}
cf-ray: 94d86d29dbbd0b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdfe/pdp-platform/0.1.22/pc.js
90.84.160.25200 OK 74 kB URL GET g.lazcdn.com/g/lzdfe/pdp-platform/0.1.22/pc.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 9bdefd73dc25b84bfe8d9917b6120020
006f41d33d4a21eadbfe250e569b140a63fd5469
73a8360e318e76b752e953261326592e2ed9be1c1da0b6dbc9dd527e8f76830d
GET /g/lzdfe/pdp-platform/0.1.22/pc.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 25206
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6842BC8A0FEF153230A950A1
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 541127663539026094
x-oss-storage-class: Standard
content-md5: m979c9wluEv+jZkXthIAIA==
x-oss-server-time: 29
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fdb217492041058542700e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE3[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE4[11],EU-FRA-paris-GLOBAL1-CACHE17[6,TCP_MISS,10],cache31.l2fr1[0,0,200-0,H], cache7.l2fr1[2,0], ens-cache14.fr6[0,0,200-0,H], ens-cache24.fr6[1,0]
ali-swift-global-savetime: 1749204107
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 10:06:15 GMT
x-swift-cachetime: 258932
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdac17495499753383702e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 5cf4baa52b11c0042368c81c6481dd09
nginx-hit: 1
age: 3895
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/alilog/mlog/aplus_int.js
90.84.160.25200 OK 16 kB URL GET g.lazcdn.com/g/alilog/mlog/aplus_int.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (15420)
Hash 2fb0e843748bf497607842678fee0f7b
41a8b37a3ebda67884a222f654d499f105d4dcc7
8d4eba05a93b2dabe06c400ba0256fb8680f3e763392398cab0d26278563b784
GET /g/alilog/mlog/aplus_int.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 7162
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6841BE2BF241963133BDDCF2
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 5894079369142625180
x-oss-storage-class: Standard
content-md5: L7DoQ3SL9JdgeEJnj+4Pew==
x-oss-server-time: 20
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6319917491389866435218e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[3],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE5[2],EU-FRA-paris-GLOBAL1-CACHE4[0,TCP_HIT,1],cache30.l2fr1[0,0,200-0,H], cache28.l2fr1[0,0], ens-cache36.fr6[0,0,200-0,H], ens-cache11.fr6[1,0]
ali-swift-global-savetime: 1749138987
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 16:56:28 GMT
x-swift-cachetime: 601199
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9f17495495174228657e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 5866f7d26cab8d74068b4bff7a10a6c5
nginx-hit: 1
age: 3512
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01bSHOIg1O2N9lO20XK_!!6000000001647-2-tps-34-34.png
172.67.189.152200 OK 533 B URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01bSHOIg1O2N9lO20XK_!!6000000001647-2-tps-34-34.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
Hash 8fd8c875435d9f1b2160aa2a9994cf42
932831ffec70a345d5c0b4daad315d0915edaa37
7e1588c6fa7175777e2fdf34c17895bb0b2ce24583ab591eadc1c024a5a056d7
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01bSHOIg1O2N9lO20XK_!!6000000001647-2-tps-34-34.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 533
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "215-62041e713504b"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=MOLzyAmydjDbpqDi9V96l0sJGbjyUBPaWzGzK2M4vI06W4qBQB%2B8UZolG1Xd%2BXWASvdGaniLQ8PYPsZ9KdUv7g72fdb%2BVbmVuJZDn72g"}]}
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d28bba8569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET goodimg.io/images/2025/03/04/live-chat.png
104.21.7.144200 OK 5.3 kB URL GET goodimg.io/images/2025/03/04/live-chat.png
IP 104.21.7.144:443
Certificate IssuerGoogle Trust Services
Subjectgoodimg.io
Fingerprint46:94:A0:99:09:20:6D:68:41:F9:D8:FB:F4:B5:7E:8F:03:DD:41:24
ValidityThu, 17 Apr 2025 12:37:03 GMT - Wed, 16 Jul 2025 13:35:17 GMT
File type PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Hash f8adc6b2e88287e0a1b81ba25b816894
9abf1c80cbe7ea3ba7484fd83a94698b47c616a6
a191ebfab47c1982b4ab1a41ac6e3636939395b6677a176a317a44d7dab5805e
GET /images/2025/03/04/live-chat.png HTTP/1.1
Host: goodimg.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 5278
server: cloudflare
last-modified: Tue, 04 Mar 2025 15:47:51 GMT
etag: "149e-62f863202d9ec"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=8ZkBIdEiIgjKWhB5Z7sksp2Oc0Z2fpHSrAsCVS%2FKcBdNIwH3emgi7OBtTVabez2jStCfnxLvGljnyINLoe6AoG0Ksf3cZVUH"}]}
cf-ray: 94d86d29dbc20b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET dewi1001.com/assets/dewi1001.jpg
66.29.132.60200 OK 256 kB URL GET dewi1001.com/assets/dewi1001.jpg
IP 66.29.132.60:443
Certificate IssuerSectigo Limited
Subjectdewi1001.com
FingerprintB3:27:96:68:65:65:B2:9C:4F:0D:A7:F9:3C:BB:AD:B2:7B:00:4D:D1
ValidityMon, 09 Jun 2025 00:00:00 GMT - Tue, 09 Jun 2026 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 736x737, components 3
Size 256 kB (256505 bytes)
Hash ebf7a176d77f8c1bb18f33e676a04943
44392b0eb8916984bebd8a10c41e702361d1f22d
5637135f6ed9e60386fa31a34f950109396b9b2facdefd4aaacb2bbafef511d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/dewi1001.jpg HTTP/1.1
Host: dewi1001.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 17 Jun 2025 11:11:10 GMT
content-type: image/jpeg
last-modified: Mon, 09 Jun 2025 13:20:46 GMT
accept-ranges: bytes
content-length: 256505
date: Tue, 10 Jun 2025 11:11:10 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdfe/pdp-modules/1.4.4/pc-mod.css
90.84.160.25200 OK 137 kB URL GET g.lazcdn.com/g/lzdfe/pdp-modules/1.4.4/pc-mod.css
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type ASCII text, with very long lines (65532), with CRLF line terminators
Size 137 kB (136794 bytes)
Hash 1952aa6fb1be87726e9458038df98843
f60be3d75a74da45d09d70fb822cb77cbfefd27a
0c84e192095dee0121011bea0c0b0f674bd0621edd7317e92022a827f520856a
GET /g/lzdfe/pdp-modules/1.4.4/pc-mod.css HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: text/css
content-length: 35194
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6842B6933E8FB437336BD7F0
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14096634822127312349
x-oss-storage-class: Standard
content-md5: Ok34KZAvp1FnHsMo9bNckQ==
x-oss-server-time: 32
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fda717492025790253859e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE2[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE10[5],EU-FRA-paris-GLOBAL1-CACHE26[3,TCP_MISS,4],cache19.l2fr1[1139,1139,200-0,M], cache21.l2fr1[1141,0], ens-cache18.fr6[0,0,200-0,H], ens-cache8.fr6[1,0]
ali-swift-global-savetime: 1749202580
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 06 Jun 2025 09:36:20 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9c17495482083596136e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 0fa09fd732984d4e1cb4dc945e5b7026
nginx-hit: 1
age: 5662
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lazada-search-fe/lzd-searchbox/0.4.11/index.css
90.84.160.25200 OK 8.9 kB URL GET g.lazcdn.com/g/lazada-search-fe/lzd-searchbox/0.4.11/index.css
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type ASCII text, with very long lines (8849), with CRLF line terminators
Hash f23672268cc87f40b08144ae6977a9b7
b4fdcc07372060da24b4f605f677bc957f6f98a9
5d3641ce34fc23d609ca95b002b0b03f652685a7a0043ffe7330546468996629
GET /g/lazada-search-fe/lzd-searchbox/0.4.11/index.css HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: text/css
content-length: 2776
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 684168AE2651A832355C27C2
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8400074587530186081
x-oss-storage-class: Standard
content-md5: BNKEEPEDNd5YwGEYwAWrzA==
x-oss-server-time: 24
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fdb217491171016421620e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[3],EU-FRA-marseille-EDGE1-CACHE2[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE3[14],EU-FRA-paris-GLOBAL1-CACHE1[10,TCP_MISS,13],cache16.l2fr1[576,575,200-0,M], cache23.l2fr1[577,0], ens-cache27.fr6[0,0,200-0,H], ens-cache5.fr6[1,0]
ali-swift-global-savetime: 1749117102
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 09:51:42 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9917495491335954544e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 0075b01233f40dd37cf5a0cf5721b231
nginx-hit: 1
age: 4737
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i2/O1CN01ENOAXK1UR05CB9iwA_!!6000000002513-2-tps-96-70.png
172.67.189.152200 OK 7.1 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i2/O1CN01ENOAXK1UR05CB9iwA_!!6000000002513-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash 7e44fb65f568f4664de0b40c407d7956
f253a79f0042f85bb301d8e8ebdb40121fcaa9a7
34b8804296d8073ac8158e2454e97b39977344498ff18fdc591878d4a0acf4ec
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i2/O1CN01ENOAXK1UR05CB9iwA_!!6000000002513-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 7098
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "1bba-62041e71340ab"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=FatCpc5sZDoex7I9govfEXMrXb98BM9KTYkOLkT8E1nlqK9I3KD%2BdpcCgjUsXEzQ5o8QnYGbGFVUPoQn5%2BrbNz59ugq7s7AM5wutYR%2Fv"}]}
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d287b53569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdfe/static/0.0.44/iconfont-hp.woff
90.84.160.25200 OK 10 kB URL GET g.lazcdn.com/g/lzdfe/static/0.0.44/iconfont-hp.woff
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type Web Open Font Format, TrueType, length 10376, version 1.0
Hash 0eace0677309ca4896ff5e2bf56efe6c
c1982d2df0551f8b2293d6c025a2379cd893cd18
72035184dc490d665f8bb7295ce6d6a8fb65e7e0ab370820708b24d54f9f5e51
GET /g/lzdfe/static/0.0.44/iconfont-hp.woff HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:11:13 GMT
content-type: font/woff
content-length: 10376
server: openresty
x-oss-request-id: 6841A2376E38A13738E9AAA8
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 131960460927145503
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: DqzgZ3MJykiW/14r9W7+bA==
x-oss-server-time: 40
x-source-scheme: https
eagleeye-traceid: a3b5fd9817491318297563339e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE3[2],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE4[2],EU-FRA-paris-GLOBAL1-CACHE10[0,TCP_HIT,1],cache19.l2fr1[2287,2287,200-0,M], cache22.l2fr1[2288,0], ens-cache19.fr6[0,0,200-0,H], ens-cache7.fr6[1,0]
ali-swift-global-savetime: 1749131832
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 13:57:12 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9b17495498558442697e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 7b11fb4a35b31eba2987bb326e7e575a
nginx-hit: 1
age: 543
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
GET goodimg.io/images/2025/03/04/link-alternatif.webp
104.21.7.144200 OK 2.1 kB URL GET goodimg.io/images/2025/03/04/link-alternatif.webp
IP 104.21.7.144:443
Certificate IssuerGoogle Trust Services
Subjectgoodimg.io
Fingerprint46:94:A0:99:09:20:6D:68:41:F9:D8:FB:F4:B5:7E:8F:03:DD:41:24
ValidityThu, 17 Apr 2025 12:37:03 GMT - Wed, 16 Jul 2025 13:35:17 GMT
File type RIFF (little-endian) data, Web/P image
Hash 8c9dcbdce2395d28e0adeada4f766f17
ce624a0fb31d5978b7bd5e1791e0ec1050f71daf
0ccf5dd49fe09c936a1dca343cada7ecb713e116c8ba7d49bf5041f5745145ab
GET /images/2025/03/04/link-alternatif.webp HTTP/1.1
Host: goodimg.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-length: 2052
server: cloudflare
last-modified: Tue, 04 Mar 2025 15:47:51 GMT
etag: "804-62f8631ff4fa8"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hf54T9tXwlwlx%2B4WHJJPze7fT%2Br2VmoGVUUhUjmBtHc%2BbAiaEDsloRHj8u%2Fne%2Bwym3b1oMPDWkbSzHL3sASkP2oEQPhm6ODH"}]}
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d29dbc10b65-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.alicdn.com/secdev/sufei_data/3.9.14/index.js
163.181.253.194200 OK 18 kB URL GET g.alicdn.com/secdev/sufei_data/3.9.14/index.js
IP 163.181.253.194:443
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
FingerprintDA:3A:AA:7B:92:DB:F4:10:34:34:38:95:9D:FD:3C:A4:2B:74:29:F5
ValidityThu, 06 Mar 2025 10:12:19 GMT - Mon, 21 Jul 2025 09:06:01 GMT
File type JavaScript source, ASCII text, with very long lines (17754), with no line terminators
Hash b9a5a9592db7e29feb4cc5e8814dea21
7efbde36c1131ebd7b51ae536eb087a8cebdbb7e
f4425a89ec24254262bc3d81a838890e5c9740428e28cd96e520c5bf8ddffa4c
GET /secdev/sufei_data/3.9.14/index.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 7398
date: Fri, 11 Oct 2024 12:53:56 GMT
x-oss-request-id: 67091FE410A93F37380980FD
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12593839585633272550
x-oss-storage-class: Standard
content-encoding: gzip
cache-control: max-age=99999999
content-md5: mYdC0z0rPw0pY52mKJdpuQ==
x-oss-server-time: 27
access-control-allow-origin: *
x-bucket-code: 3
via: cache24.l2fr1[0,0,200-0,H], cache32.l2fr1[0,0], cache32.l2fr1[1,0], ens-cache2.fr6[0,0,200-0,H], ens-cache31.fr6[1,0]
age: 20902638
ali-swift-global-savetime: 1728651236
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 00:18:21 GMT
x-swift-cachetime: 79136534
timing-allow-origin: *
eagleid: a3b5fdb317495538746812136e
X-Firefox-Spdy: h2
GET dewi1001.com/assets/daftar.gif
66.29.132.60200 OK 52 kB URL GET dewi1001.com/assets/daftar.gif
IP 66.29.132.60:443
Certificate IssuerSectigo Limited
Subjectdewi1001.com
FingerprintB3:27:96:68:65:65:B2:9C:4F:0D:A7:F9:3C:BB:AD:B2:7B:00:4D:D1
ValidityMon, 09 Jun 2025 00:00:00 GMT - Tue, 09 Jun 2026 23:59:59 GMT
File type GIF image data, version 89a, 500 x 200
Hash f9aeb538c4f2e021f731c8d47fd5663a
edf6fad64dc41f79dcefcdd255fd2e1875e5f260
85cdb5e5665da58f899486add98c93fc45f3c04bcbaac5cc87f95903ae33ebbb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/daftar.gif HTTP/1.1
Host: dewi1001.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 17 Jun 2025 11:11:10 GMT
content-type: image/gif
last-modified: Mon, 09 Jun 2025 13:20:46 GMT
accept-ranges: bytes
content-length: 52487
date: Tue, 10 Jun 2025 11:11:10 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
GET gj.mmstat.com/eg.js?t=1749553873424
47.246.136.160200 OK 91 B URL GET gj.mmstat.com/eg.js?t=1749553873424
IP 47.246.136.160:443
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subject*.mmstat.com
Fingerprint73:BF:BA:7F:66:D6:A0:89:45:65:C0:C5:EA:71:A5:B1:ED:05:ED:E1
ValidityMon, 17 Mar 2025 11:27:01 GMT - Thu, 04 Sep 2025 00:00:00 GMT
File type ASCII text, with no line terminators
Hash ebcce1373677743883e52f814e87828b
fc28dbab8536fc5e322b7fa0e67fb11d1ee48d3c
e489cb5b4c83952be62a8c5201ce0e657db600a4aaa93892ced93362ff5c0465
GET /eg.js?t=1749553873424 HTTP/1.1
Host: gj.mmstat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 10 Jun 2025 11:11:14 GMT
content-type: application/javascript
content-length: 91
etag: "0gDPIL4mzDgCAVtaKpqHQcEh"
stag: 2
set-cookie: cna=0gDPIL4mzDgCAVtaKpqHQcEh; expires=Fri, 08-Jun-35 11:11:14 GMT; path=/; domain=.mmstat.com;
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
GET member.lazada.co.id/user/api/getUser
47.246.167.130200 OK 624 B URL GET member.lazada.co.id/user/api/getUser
IP 47.246.167.130:443
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subject*.lazada.com
Fingerprint61:4D:35:B9:D8:80:5D:BA:58:94:7F:E1:09:FB:CF:89:DB:3F:69:AD
ValidityFri, 06 Jun 2025 06:02:01 GMT - Wed, 08 Jul 2026 05:56:01 GMT
File type HTML document, ASCII text, with CRLF line terminators
Hash 08344003aabfc22ff846735d0348417b
aaf9f4e0bad7769d54963f7613afd183810e3f84
6f92de54f5581509381b9155c64e6100cc836f8f3194e3533b2b4dbca68b1c68
GET /user/api/getUser HTTP/1.1
Host: member.lazada.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-CSRF-TOKEN: eb3380311eeee
X-Requested-With: XMLHttpRequest
Content-Type: application/json;charset=UTF-8
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:14 GMT
content-type: text/html;charset=UTF-8
vary: Accept-Encoding
cache-control: no-store
access-control-allow-credentials: true
access-control-allow-origin: https://dewi1001.com
bxpunish: 1
server: Tengine/Aserver
eagleeye-traceid: 214101e417495538743348174ef86c
strict-transport-security: max-age=31536000
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01D6oQr31GPG1ONK9jd_!!6000000000614-2-tps-34-34.png
172.67.189.152200 OK 466 B URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01D6oQr31GPG1ONK9jd_!!6000000000614-2-tps-34-34.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
Hash 36139dcc95bc03041783afc5b8fe13e2
968a2961def725ced068e82d4c7bd8ab8c46e6f0
1e2f353551fb6fe07ca35850dbe5075a6bf0568ac138f3e007c9b4b721557958
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01D6oQr31GPG1ONK9jd_!!6000000000614-2-tps-34-34.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 466
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "1d2-62041e713dceb"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=gXAqk%2FxHXaK2EBuYrUmmvDPhazJWY5jl3ZM0aOp7HBK6%2Fbr2sWPg7FuZEJSmsdqC0JHQelT0rRnPHpB2%2FKe9pz4fkTBcBm8l4F4jRI0E"}]}
cf-ray: 94d86d28ab9c569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
104.16.80.73200 OK 20 kB URL GET static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
IP 104.16.80.73:443
Certificate IssuerGoogle Trust Services
Subjectcloudflareinsights.com
FingerprintEA:C7:0D:68:3A:45:CB:AD:C5:33:41:B6:DF:F1:60:64:E1:0F:52:6A
ValiditySun, 27 Apr 2025 18:18:02 GMT - Sat, 26 Jul 2025 19:17:55 GMT
File type JavaScript source, ASCII text, with very long lines (19948), with no line terminators
Hash ec18af6d41f6f278b6aed3bdabffa7bc
62c9e2cab76b888829f3c5335e91c320b22329ae
8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f
GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2024.6.1"
last-modified: Thu, 06 Jun 2024 15:52:56 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 94d86d2a0d157127-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.178.35200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP 142.250.178.35:443
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC
ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Jun 2025 08:13:08 GMT
expires: Sat, 06 Jun 2026 08:13:08 GMT
cache-control: public, max-age=31536000
age: 356284
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdfe/pdp-modules/1.4.4/pc-mod.js
90.84.160.25200 OK 811 kB URL GET g.lazcdn.com/g/lzdfe/pdp-modules/1.4.4/pc-mod.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 811 kB (810700 bytes)
Hash 2dc6575bc96ca2ba3f25e4d4882178f2
a6fe61638e3dd7d71a4c00e1b87e5e6d1b80e474
295424257477b4cdb96b2b990bc42060434eff8b4e038655ee48903cd0ac3779
GET /g/lzdfe/pdp-modules/1.4.4/pc-mod.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 270523
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6842B8A1152769383882E1E0
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4681579850532549158
x-oss-storage-class: Standard
content-md5: LcZXW8lsoro/JeTUiCF48g==
x-oss-server-time: 30
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fd9917492031045097754e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE8[6],EU-FRA-paris-GLOBAL1-CACHE4[3,TCP_MISS,5],cache12.l2fr1[1163,1164,200-0,M], cache32.l2fr1[1166,0], ens-cache23.fr6[0,0,200-0,H], ens-cache3.fr6[1,0]
ali-swift-global-savetime: 1749203105
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 06 Jun 2025 09:45:05 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9717495487195324708e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 0a67149762ff915947592fe178df6951
nginx-hit: 1
age: 5151
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN011Ya3Kg1OSw3sg81tm_!!6000000001705-2-tps-96-70.png
172.67.189.152200 OK 6.0 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN011Ya3Kg1OSw3sg81tm_!!6000000001705-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash 05a0832064e6d46eafea10e5ac9f96cf
d28077383314ee082499d493cf889e1809b4a72e
1c7dc518bff241df97f82393487d5bca438a2983073ea7607c75f3d10a7c9095
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN011Ya3Kg1OSw3sg81tm_!!6000000001705-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 5990
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "1766-62041e713504b"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=CNebdMIVCDxwK6ovn2Wt0T56IAyqk30LS6THRUt0rwUcZcWwlIJxQz7dUp%2FEfizgJRND7tk0usWal%2FYwRPL14jms624Oa8C%2Fq0j%2F%2BXYX"}]}
cf-ray: 94d86d288b6b569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN011gka8L1E0PIZlHK7e_!!6000000000289-2-tps-34-34.png
172.67.189.152200 OK 1.9 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN011gka8L1E0PIZlHK7e_!!6000000000289-2-tps-34-34.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
Hash 1247b00414a4c921c17e520f81b9aee4
f6ceb3c012dd4c758a4e700c8ec2500ab1d52749
d8a77cdf2b32f27183512a5d20d99d5d708433cf6fb45d3ef0beb8aec61fa9e7
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN011gka8L1E0PIZlHK7e_!!6000000000289-2-tps-34-34.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 1892
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "764-62041e713dceb"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cK0Zdp454F8LEvcuV21i0omY8AFNeKYw7uYXwNx7zJ%2FXNHiGIBXO%2BUTgPzElcOIoVCrlS%2BMSpTiibuC%2FX6FI%2FPbK2EZtSHf7aUC6pmkD"}]}
cf-ray: 94d86d28bba4569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.178.35200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP 142.250.178.35:443
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC
ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Jun 2025 08:13:08 GMT
expires: Sat, 06 Jun 2026 08:13:08 GMT
cache-control: public, max-age=31536000
age: 356284
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fourier.taobao.com/ts?url=&token=BPj4Fo105BN8ZwiX8ItOlG3yyq-KYVzrutCVtjJpRDPmTZg32nEsew57A919BhTD&cna=0gDPIL4mzDgCAVtaKpqHQcEh&ext=1
124.239.14.250200 OK 0 B URL GET fourier.taobao.com/ts?url=&token=BPj4Fo105BN8ZwiX8ItOlG3yyq-KYVzrutCVtjJpRDPmTZg32nEsew57A919BhTD&cna=0gDPIL4mzDgCAVtaKpqHQcEh&ext=1
IP 124.239.14.250:443
Certificate IssuerGlobalSign nv-sa
Subjecttfe.alibaba.com
Fingerprint2A:E7:3A:AD:21:93:AF:7D:07:7B:ED:C0:D4:25:1B:59:27:BF:EA:34
ValidityWed, 19 Mar 2025 08:54:01 GMT - Mon, 05 Jan 2026 02:01:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ts?url=&token=BPj4Fo105BN8ZwiX8ItOlG3yyq-KYVzrutCVtjJpRDPmTZg32nEsew57A919BhTD&cna=0gDPIL4mzDgCAVtaKpqHQcEh&ext=1 HTTP/1.1
Host: fourier.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:15 GMT
content-type: image/gif
content-length: 0
server: Tengine
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/laz-img-cdn.alicdn.com/images/ims-web/TB1b43RtrvpK1RjSZFqXXcXUVXa.png
172.67.189.152200 OK 19 kB URL GET cdn.lazadapro.co/lazada/laz-img-cdn.alicdn.com/images/ims-web/TB1b43RtrvpK1RjSZFqXXcXUVXa.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Hash ea19428365bcd34d1bd8f3141a85a873
03439c89d831bcabc262d385445d4260304ccd63
44b879ed47dcd5b43719b2b529fcd3ba868fe20ee38b0f0b277cdbce801227b2
GET /lazada/laz-img-cdn.alicdn.com/images/ims-web/TB1b43RtrvpK1RjSZFqXXcXUVXa.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 19149
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "4acd-62041e71311cb"
accept-ranges: bytes
access-control-allow-origin: *
age: 655
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1w4T6csSbIMHEn8Cqcu5IS4mfMGWj%2Ff0whreXQ1r2k34Lpu0iO%2BStPSW4u5jp5RMtUnL0ItPsk%2FdRZ%2BTY1PMC7jA3zfrB%2Bhx70hsw0ll"}]}
cf-ray: 94d86d27da7e569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i2/O1CN01b9cK511pjsP40xyAX_!!6000000005397-2-tps-34-34.png
172.67.189.152200 OK 590 B URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i2/O1CN01b9cK511pjsP40xyAX_!!6000000005397-2-tps-34-34.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
Hash 2f1eecdd317c2a880392ad9fdc2ac832
48320603f6f647322e50ba4753093a95fcc5ed58
1c5ee33a75c5dcf1762c990271036927804c334533fbaa0bef7fc50c4da49ca4
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i2/O1CN01b9cK511pjsP40xyAX_!!6000000005397-2-tps-34-34.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 590
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "24e-62041e713504b"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=qlD1k35fnGs78CB7tCKwBC6sOJ%2FL%2B8lJFd9p%2Fx0RtK58GgpilcLRW%2BpSFjNJMwJ3uAP2eTwZecj3box2m0NxmvDzuyG1YzxSFJ0IfsAA"}]}
cf-ray: 94d86d28aba0569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/alilog/??s/8.15.24/plugin/aplus_client.js,aplus_cplugin/0.7.12/toolkit.js,aplus_cplugin/0.7.12/monitor.js,s/8.15.24/plugin/aplus_ae.js,s/8.15.24/aplus_int.js,s/8.15.24/plugin/aplus_spmact.js?v=20250522191903
90.84.160.25200 OK 151 kB URL GET g.lazcdn.com/g/alilog/??s/8.15.24/plugin/aplus_client.js,aplus_cplugin/0.7.12/toolkit.js,aplus_cplugin/0.7.12/monitor.js,s/8.15.24/plugin/aplus_ae.js,s/8.15.24/aplus_int.js,s/8.15.24/plugin/aplus_spmact.js?v=20250522191903
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (32049)
Size 151 kB (151288 bytes)
Hash 57cb9a84a208e79f0d4b08ea01662a46
c4053a86522ff0a088e031a4a470007849b4b3c1
9b5e14b74851e89c066712339d63051a72d8994999c09e5e1e4417a6a16b5c16
GET /g/alilog/??s/8.15.24/plugin/aplus_client.js,aplus_cplugin/0.7.12/toolkit.js,aplus_cplugin/0.7.12/monitor.js,s/8.15.24/plugin/aplus_ae.js,s/8.15.24/aplus_int.js,s/8.15.24/plugin/aplus_spmact.js?v=20250522191903 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://dewi1001.com/
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: application/javascript
content-length: 69964
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 682F1233AC2DC23330161273
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 3470171396434443909
x-oss-storage-class: Standard
content-md5: cKQnVZzrbdoWy47gjJNnrA==
x-oss-server-time: 4
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6319617479153149056280e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE1[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE19[3],EU-FRA-paris-GLOBAL1-CACHE19[0,TCP_HIT,2],cache26.l2fr1[996,996,200-0,M], cache26.l2fr1[997,0], ens-cache5.fr5[1016,1015,200-0,M], ens-cache2.fr5[1019,0]
ali-swift-global-savetime: 1747915315
x-cache: MISS TCP_MISS dirn:-2:-2
x-swift-savetime: Thu, 22 May 2025 12:01:55 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: 2ff6319617479153149056280e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 497a37d90c6eb3b621f8ac4958aa77d8
nginx-hit: 1
age: 1633354
cache-control: max-age=31104000,s-maxage=31104000
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01Y8JAuA1pB4EhCiF0K_!!6000000005321-2-tps-96-70.png
172.67.189.152200 OK 7.8 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01Y8JAuA1pB4EhCiF0K_!!6000000005321-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash f87442c995a605164dcff8b32c7bac9e
cc6c778e82111ae03773caef53241a16151d2075
ca437af32df2c4d2419cacb3b959fc506bc9aa42c514ed5c25093105983fdff6
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01Y8JAuA1pB4EhCiF0K_!!6000000005321-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 7843
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "1ea3-62041e71340ab"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=l2oMDLonaLVRhjtasYVTwxMT%2BB0%2BVBedG8Lw4K3XR8LlL%2BimONq%2FjqR3V2VYcn9%2FKZpaSLHnPFs8viyreQsdD97m%2B%2BFEGjYYUcP%2BKFnf"}]}
age: 7156
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d286b34569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01Wdetn224xMIRNihao_!!6000000007457-2-tps-34-34.png
172.67.189.152200 OK 476 B URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01Wdetn224xMIRNihao_!!6000000007457-2-tps-34-34.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
Hash d9a89a501e57d0cbac81ea4a054dcfb2
6b8079fecc67d2ac01c0574bc6f7db479be07cb5
79224ccc77d1f0025f05756e8d5635604018ffea20be8f1568e4ed421c5f567a
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01Wdetn224xMIRNihao_!!6000000007457-2-tps-34-34.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 476
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "1dc-62041e713504b"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ghDTnD0PjVa7iO8mbwwWfXGWpyzn%2FibXDhmmUlGzJRv8QPHWgNy1NvR%2ByaV%2F8UNgbpGpKVb%2FYHO4aLDqsCPz8n6TVoGsdLhivi3Ao1eL"}]}
cf-ray: 94d86d28ab9b569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.alicdn.com/AWSC/AWSC/awsc.js
163.181.253.194200 OK 9.2 kB URL GET g.alicdn.com/AWSC/AWSC/awsc.js
IP 163.181.253.194:443
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
FingerprintDA:3A:AA:7B:92:DB:F4:10:34:34:38:95:9D:FD:3C:A4:2B:74:29:F5
ValidityThu, 06 Mar 2025 10:12:19 GMT - Mon, 21 Jul 2025 09:06:01 GMT
File type JavaScript source, ASCII text, with very long lines (9179), with no line terminators
Hash aa9e1d499d73b13ccfc62cea1132de82
577c8db2b04aa557a61e20bfbbeb1ebe289af8ef
b308cd4752b02e05202023560bac5d9aea721e78bab3e496f570bb9c27b2f0ca
GET /AWSC/AWSC/awsc.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 3282
date: Tue, 10 Jun 2025 10:13:24 GMT
vary: Accept-Encoding
x-oss-request-id: 6848054473EA4137338C274D
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17605140350330895498
x-oss-storage-class: Standard
cache-control: max-age=7200,s-maxage=3600
content-md5: qp4dSZ1zsTzPxizqETLegg==
x-oss-server-time: 6
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
via: cache32.l2fr1[45,21,200-0,C], cache22.l2fr1[22,0], cache22.l2fr1[24,0], ens-cache21.fr6[0,0,200-0,H], ens-cache31.fr6[2,0]
age: 3470
ali-swift-global-savetime: 1749550404
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 10:13:24 GMT
x-swift-cachetime: 3600
timing-allow-origin: *
eagleid: a3b5fdb317495538746992152e
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/retcode/cloud-sdk/bl.js
90.84.160.25200 OK 42 kB URL GET g.lazcdn.com/g/retcode/cloud-sdk/bl.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, ASCII text, with very long lines (41828), with no line terminators
Hash e31ead706e55b7c4c100d87a5928f099
5acc29a266fd91e1bb438bc2b7851d97468a5617
caa17208ba4e8fc27121fb29036b6f39ae9d31778a453df5ed9f32cba2bf3197
GET /g/retcode/cloud-sdk/bl.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 19244
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 68419557E4FB083838E0C8BB
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 7956181089051082725
x-oss-storage-class: Standard
content-md5: 4x6tcG5Vt8TBANh6WSjwmQ==
x-oss-server-time: 17
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fda417491285343125602e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE3[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE4[2],EU-FRA-paris-GLOBAL1-CACHE3[0,TCP_HIT,1],cache26.l2fr1[1122,1122,200-0,M], cache26.l2fr1[1123,0], ens-cache9.fr6[0,0,200-0,H], ens-cache19.fr6[1,0]
ali-swift-global-savetime: 1749128535
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 13:02:15 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fda717495538202308348e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 3bd28bc60f10affb6928b19d0696bb44
nginx-hit: 1
age: 13
cache-control: max-age=86400,s-maxage=60
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET dewi1001.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
66.29.132.60404 Not Found 1.3 kB URL GET dewi1001.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
IP 66.29.132.60:443
Certificate IssuerSectigo Limited
Subjectdewi1001.com
FingerprintB3:27:96:68:65:65:B2:9C:4F:0D:A7:F9:3C:BB:AD:B2:7B:00:4D:D1
ValidityMon, 09 Jun 2025 00:00:00 GMT - Tue, 09 Jun 2026 23:59:59 GMT
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: dewi1001.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Tue, 10 Jun 2025 11:11:12 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
GET dewi1001.com/assets/favicon.png
66.29.132.60200 OK 406 kB URL GET dewi1001.com/assets/favicon.png
IP 66.29.132.60:443
Certificate IssuerSectigo Limited
Subjectdewi1001.com
FingerprintB3:27:96:68:65:65:B2:9C:4F:0D:A7:F9:3C:BB:AD:B2:7B:00:4D:D1
ValidityMon, 09 Jun 2025 00:00:00 GMT - Tue, 09 Jun 2026 23:59:59 GMT
File type PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Size 406 kB (405983 bytes)
Hash 954bcc2e0b745e5883c1cfeb2dc344f9
078d275b5af141519ae46cdf0ad62f0a0a4e6372
a1d343847afa50836a5e2af7bee48f391118a085aaa63a95415b41265d53bb68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/favicon.png HTTP/1.1
Host: dewi1001.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Cookie: _uab_collina=174955387282252117478151
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 17 Jun 2025 11:11:13 GMT
content-type: image/png
last-modified: Mon, 09 Jun 2025 13:20:47 GMT
accept-ranges: bytes
content-length: 405983
date: Tue, 10 Jun 2025 11:11:13 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
GET o.alicdn.com/lzdfe/lzd-h5-itrace/index.js
47.246.50.176200 OK 82 kB URL GET o.alicdn.com/lzdfe/lzd-h5-itrace/index.js
IP 47.246.50.176:443
ASN #24429 Zhejiang Taobao Network Co.,Ltd
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
FingerprintDA:3A:AA:7B:92:DB:F4:10:34:34:38:95:9D:FD:3C:A4:2B:74:29:F5
ValidityThu, 06 Mar 2025 10:12:19 GMT - Mon, 21 Jul 2025 09:06:01 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65222), with no line terminators
Hash b472ac23e3ad416cb57678a19df09b98
329170c70a106196de92089f370ea309238dfe80
dae2e38dbb96887a69b92a04c7ad61acc305617448131a1f3f8661d08bed47f7
GET /lzdfe/lzd-h5-itrace/index.js HTTP/1.1
Host: o.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
date: Tue, 10 Jun 2025 11:02:36 GMT
x-oss-request-id: 684810CC07554BEC7E777D22
x-oss-cdn-auth: success
x-oss-object-type: Normal
x-oss-storage-class: Standard
cache-control: max-age=300,s-maxage=600
content-md5: tHKsI+OtQWy1dnihnfCbmA==
x-oss-server-time: 3
via: ens-cache9.l2de3[279,279,304-0,H], ens-cache2.l2de3[281,0], ens-cache12.fr4[0,0,200-0,H], ens-cache1.fr4[1,0], ens-cache7.fr4[6,0]
etag: W/"B472AC23E3AD416CB57678A19DF09B98"
last-modified: Tue, 10 Jun 2025 02:42:26 GMT
x-oss-hash-crc64ecma: 11394080436813138701
age: 517
ali-swift-global-savetime: 1749553356
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 11:02:36 GMT
x-swift-cachetime: 600
x-assets-grey: false
x-assets-path: /lzdfe/lzd-h5-itrace/index.js
access-control-allow-origin: *
x-er-version: 0.0.6
x-assets-pt: pt0
timing-allow-origin: *
eagleid: 2ff6329b17495538734822284e
content-encoding: gzip
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/woodpeckerx/jssdk??wpkReporter.js,plugins/flow.js,plugins/interface.js,plugins/blank.js
90.84.160.25200 OK 62 kB URL GET g.lazcdn.com/g/woodpeckerx/jssdk??wpkReporter.js,plugins/flow.js,plugins/interface.js,plugins/blank.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (61349), with no line terminators
Hash 313fce95ea9fc889a2f8853921915657
06a74499752f47966db61127958a9700f8db5818
ec8b30600526cd5a830095f016c5eb1016272c154c83a406be845aec0745f2d3
GET /g/woodpeckerx/jssdk??wpkReporter.js,plugins/flow.js,plugins/interface.js,plugins/blank.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 25615
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 68419E7CD7740530397D20DD
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 14095781032472792066
x-oss-storage-class: Standard
content-md5: NcCmRbKpke0jCzHXWwyfjg==
x-oss-server-time: 1
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fd9817491308752208802e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[3],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE8[2],EU-FRA-paris-GLOBAL1-CACHE26[0,TCP_HIT,2],cache20.l2fr1[1232,1233,200-0,M], cache28.l2fr1[1234,0], ens-cache15.fr6[0,0,200-0,H], ens-cache1.fr6[1,0]
ali-swift-global-savetime: 1749130876
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 13:41:16 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fd9517495534662087829e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 12719dc57c3c47390ae98f600c33aed7
nginx-hit: 1
age: 85
cache-control: max-age=86400,s-maxage=600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto/latin.woff2
90.84.160.25200 OK 11 kB URL GET g.lazcdn.com/g/lzdfe/static/0.0.29/Roboto/latin.woff2
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type Web Open Font Format (Version 2), TrueType, length 10748, version 1.0
Hash ece6673e477b4d7aca12f04dace5ed60
f8ff7fbe231448a58d3989d84803dd66851b9988
4352380f92ce7f9a4a4a23306b992bed10055dbfffe90987cc72083e583fc280
GET /g/lzdfe/static/0.0.29/Roboto/latin.woff2 HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:11:14 GMT
content-type: font/woff2
content-length: 10748
server: openresty
x-oss-request-id: 68419662D86EC1383952D02F
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 15489323926058991130
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: 7OZnPkd7TXrKEvBNrOXtYA==
x-oss-server-time: 15
x-source-scheme: https
eagleeye-traceid: a3b5319a17491288017433620e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE3[3],EU-FRA-marseille-EDGE1-CACHE3[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE18[6],EU-FRA-paris-GLOBAL1-CACHE22[3,TCP_MISS,5],cache9.l2fr1[0,0,200-0,H], cache29.l2fr1[1,0], ens-cache9.fr6[0,0,200-0,H], ens-cache25.fr6[1,0]
ali-swift-global-savetime: 1749128802
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 13:06:45 GMT
x-swift-cachetime: 604797
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdad17495514818117723e
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 19fc40511790c93a1c3db8101d79d5c7
nginx-hit: 1
age: 2393
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
GET g.lazcdn.com/g/lzd/assets/1.2.13/??babel-polyfill/6.26.0/polyfill.min.js,react/16.8.0/react.production.min.js,react-dom/16.8.0/react-dom.production.min.js
90.84.160.25200 OK 224 kB URL GET g.lazcdn.com/g/lzd/assets/1.2.13/??babel-polyfill/6.26.0/polyfill.min.js,react/16.8.0/react.production.min.js,react-dom/16.8.0/react-dom.production.min.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (31999), with LF, NEL line terminators
Size 224 kB (223515 bytes)
Hash ea0f33ae2ec68514fd2183b8fb1c8d25
7b15588636f37d0733179ce083dc57668979fa25
e8f29a92260f28617f602e0236a96a120558028ad188fe201cd13f56effcc76b
GET /g/lzd/assets/1.2.13/??babel-polyfill/6.26.0/polyfill.min.js,react/16.8.0/react.production.min.js,react-dom/16.8.0/react-dom.production.min.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 89840
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6842B98A0796FF38356D0EA8
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 1740928884983200401
x-oss-storage-class: Standard
content-md5: iYPg55sIv8S2Ar4z+67mCA==
x-oss-server-time: 9
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fd9917492033381284628e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[4],EU-FRA-marseille-EDGE1-CACHE2[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE30[6],EU-FRA-paris-GLOBAL1-CACHE25[1,TCP_MISS,5],cache6.l2fr1[1016,1016,200-0,M], cache40.l2fr1[1018,0], ens-cache11.fr6[0,0,200-0,H], ens-cache16.fr6[1,0]
ali-swift-global-savetime: 1749203339
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 06 Jun 2025 09:48:59 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fda417495489547165870e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 695af5235b010d044af98ea8123942f2
nginx-hit: 1
age: 4916
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET laz-g-cdn.alicdn.com/lzdfe/static/0.0.48/iconfont-hp.woff
90.84.161.25200 OK 11 kB URL GET laz-g-cdn.alicdn.com/lzdfe/static/0.0.48/iconfont-hp.woff
IP 90.84.161.25:443
Certificate IssuerGlobalSign nv-sa
Subjectlaz-g-cdn.alicdn.com
FingerprintA5:45:B9:D4:07:B7:25:BF:8B:2F:B5:D1:76:4B:72:0B:04:FD:10:91
ValidityTue, 22 Apr 2025 02:21:08 GMT - Sun, 24 May 2026 02:21:07 GMT
File type Web Open Font Format, TrueType, length 10800, version 1.0
Hash e7efeb5a44735dbc279376552cd36f0c
6fbf95afd6bd4b5ceaa90e0a988ee379b0ce1536
4c4d8e923e008e615f10407b2992418005e89555259fc3c048d7424a058584ba
GET /lzdfe/static/0.0.48/iconfont-hp.woff HTTP/1.1
Host: laz-g-cdn.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: font/woff
content-length: 10800
server: openresty
x-oss-request-id: 6819D1700835C33631BF797A
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 11084093574867788336
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: 5+/rWkRzXbwnk3ZVLNNvDA==
x-oss-server-time: 25
x-source-scheme: https
via: EU-GER-frankfurt-EDGE5-CACHE2[5],EU-GER-frankfurt-EDGE5-CACHE2[0,TCP_HIT,2],EU-FRA-paris-GLOBAL1-CACHE3[2],EU-FRA-paris-GLOBAL1-CACHE8[0,TCP_HIT,2],ens-cache25.l2nu20-20[0,0,200-0,H], ens-cache57.l2nu20-20[1,0], ens-cache2.l2hk11[0,0,200-0,H], ens-cache28.l2hk11[1,0], cache25.l2fr1[0,0,200-0,H], cache16.l2fr1[1,0], ens-cache35.fr6[0,0,200-0,H], ens-cache26.fr6[2,0]
ali-swift-global-savetime: 1746522480
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 06 May 2025 09:10:46 GMT
x-swift-cachetime: 3434
timing-allow-origin: *
eagleid: a3b5fdae17465231431605103e
x-ccdn-expires: 2153077
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 51e185ea6bb119fc09f22af373491e52
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
age: 438923
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
GET gj.mmstat.com/v.gif?logtype=1&title=DEWI1001%3A%20Link%20Join%20Layanan%20Resmi%20Situs&pre=&scr=1280x1024&_p_url=https%3A%2F%2Fdewi1001.com%2F&cna=0gDPIL4mzDgCAVtaKpqHQcEh&spm-cnt=0.0.0.0.51cd680b78ay9c&clog=o&aplus&sidx=aplusSidx&ckx=aplusCkx&p=1&o=linux&b=firefox96&s=1280x1024&w=gecko&ism=other&cache=66191f&lver=8.15.24&jsver=aplus_int&pver=0.7.12&tag=0&stag=2&lstag=0&_slog=0
47.246.136.160200 OK 43 B URL GET gj.mmstat.com/v.gif?logtype=1&title=DEWI1001%3A%20Link%20Join%20Layanan%20Resmi%20Situs&pre=&scr=1280x1024&_p_url=https%3A%2F%2Fdewi1001.com%2F&cna=0gDPIL4mzDgCAVtaKpqHQcEh&spm-cnt=0.0.0.0.51cd680b78ay9c&clog=o&aplus&sidx=aplusSidx&ckx=aplusCkx&p=1&o=linux&b=firefox96&s=1280x1024&w=gecko&ism=other&cache=66191f&lver=8.15.24&jsver=aplus_int&pver=0.7.12&tag=0&stag=2&lstag=0&_slog=0
IP 47.246.136.160:443
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subject*.mmstat.com
Fingerprint73:BF:BA:7F:66:D6:A0:89:45:65:C0:C5:EA:71:A5:B1:ED:05:ED:E1
ValidityMon, 17 Mar 2025 11:27:01 GMT - Thu, 04 Sep 2025 00:00:00 GMT
File type GIF image data, version 89a, 1 x 1
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /v.gif?logtype=1&title=DEWI1001%3A%20Link%20Join%20Layanan%20Resmi%20Situs&pre=&scr=1280x1024&_p_url=https%3A%2F%2Fdewi1001.com%2F&cna=0gDPIL4mzDgCAVtaKpqHQcEh&spm-cnt=0.0.0.0.51cd680b78ay9c&clog=o&aplus&sidx=aplusSidx&ckx=aplusCkx&p=1&o=linux&b=firefox96&s=1280x1024&w=gecko&ism=other&cache=66191f&lver=8.15.24&jsver=aplus_int&pver=0.7.12&tag=0&stag=2&lstag=0&_slog=0 HTTP/1.1
Host: gj.mmstat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 10 Jun 2025 11:11:14 GMT
content-type: image/gif
content-length: 43
p3p: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"
cross-origin-resource-policy: cross-origin
set-cookie: cna=0gDPIL4mzDgCAVtaKpqHQcEh; expires=Fri, 08-Jun-35 11:11:14 GMT; path=/; domain=.mmstat.com;
sca=4786ff8a; path=/; domain=.mmstat.com
atpsida=0cbc0350caa59aa4ee494c31_1749553874_1; path=/; domain=.mmstat.com
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
pragma: no-cache
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN019tUhkL1abQnOURPrd_!!6000000003348-2-tps-96-70.png
172.67.189.152200 OK 4.3 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN019tUhkL1abQnOURPrd_!!6000000003348-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash fdc2018fbe00ad6e19532c80102001d7
f1e8e27bb35e2765a0e705d0e8bbcbcdf8609dad
2e5551d5b65b23e629b9b510cd5796475f98e91e65cb02b647b978864b7755b4
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN019tUhkL1abQnOURPrd_!!6000000003348-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 4287
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "10bf-62041e713310b"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=TmQyHUH9keMr1B8VQ3noNLnyPgW7tL%2B7neH%2FadAEId8uhoXfcpL3EDaOaj4ziK9wZ%2BWTKdofqyhmcwf9LAElZnm39IYmwZVQ%2FdqtMxab"}]}
cf-ray: 94d86d28ab98569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01zt1zOu1zsFnzoIWje_!!6000000006769-2-tps-34-34.png
172.67.189.152200 OK 314 B URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01zt1zOu1zsFnzoIWje_!!6000000006769-2-tps-34-34.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 34 x 34, 8-bit colormap, non-interlaced
Hash 86f51bd9177d52c5f2e6425e98d95cf0
30b0520aed734b206f0f421b241e7168fac215d4
4810ae2a6d9cfc4603201912516cc79e41b5470319925b428ab8daaae7daa82c
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01zt1zOu1zsFnzoIWje_!!6000000006769-2-tps-34-34.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 314
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "13a-62041e7142b0b"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=l3%2BtY1723XN9ZCR5kVl20lrsSYmxPWcZaWfu9A4FzEDtSWbqQZLYHCz4Wh6XwrGZaPa2F4QTHNlwwFTUI%2FHQFMNdP42rgTWOH0vazYdB"}]}
cf-ray: 94d86d28ab9f569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/i.gyazo.com/7b17449b7b047a1f1a859a29ec996e97.png
172.67.189.152200 OK 445 B URL GET cdn.lazadapro.co/lazada/i.gyazo.com/7b17449b7b047a1f1a859a29ec996e97.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 30 x 30, 8-bit colormap, non-interlaced
Hash 7b17449b7b047a1f1a859a29ec996e97
a28237a603e659bef0d1cee483afcfd7407bd26b
446511f4b5d743bbca5bf59a103dea39a9106bcafa82d804846b121426113f7e
GET /lazada/i.gyazo.com/7b17449b7b047a1f1a859a29ec996e97.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 445
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "1bd-62041e712f28b"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=wXngxOl7O%2F1u%2BksFziesdTzkVEoq%2BFa%2BKl5B6dvmFdoeGiRCGPb5BA6y3HJJ1pLexAQ5VCWnHjnb8LRiNLHpItERz0v%2Bh0oNxPlOdKl7"}]}
age: 655
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d286b23569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01uOZizA1UOFhot1z5u_!!6000000002507-2-tps-96-70.png
172.67.189.152200 OK 11 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01uOZizA1UOFhot1z5u_!!6000000002507-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash 7d00202d7766c61acf99433e2a99bc6e
819a071137728d5d9d39c9a6bd7e9a63d3747133
67f535f6ea005ed45055bca2126b8421d3b32ec55aed99528d71c71b4d53b3ec
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01uOZizA1UOFhot1z5u_!!6000000002507-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 11068
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "2b3c-62041e7142b0b"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=P05w29FnNUZALNZv49vNdu3CJufCkZElU9AMYcmYbiZukZHPrJVbAuOVX%2BU8BPeMLGAiuSg2URU2VMarvD1zmZs5eGDcGysq%2F6R7iJU2"}]}
cf-ray: 94d86d28ab99569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.alicdn.com/AWSC/et/1.83.8/et_f.js
163.181.253.194200 OK 262 kB URL GET g.alicdn.com/AWSC/et/1.83.8/et_f.js
IP 163.181.253.194:443
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
FingerprintDA:3A:AA:7B:92:DB:F4:10:34:34:38:95:9D:FD:3C:A4:2B:74:29:F5
ValidityThu, 06 Mar 2025 10:12:19 GMT - Mon, 21 Jul 2025 09:06:01 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 262 kB (262136 bytes)
Hash fdc8d3c63a356d45a6af4495199742dd
b03b109bc585dc4e8e29982cde4195dbacb3af2e
0ab55e76a88a3662447e678025d70e9367eb0c0a5d14948440013c3670ad545d
GET /AWSC/et/1.83.8/et_f.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 91020
date: Tue, 10 Jun 2025 10:39:33 GMT
x-oss-request-id: 68480B6562E483313073EC31
accept-ranges: bytes
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 12424508067849186430
x-oss-storage-class: Standard
content-encoding: gzip
cache-control: max-age=2592000,s-maxage=86400
content-md5: EMxYD13f00uUcyuVOeMQDA==
x-oss-server-time: 3
access-control-allow-origin: *
x-bucket-code: 3
via: cache8.l2fr1[25,24,200-0,M], cache22.l2fr1[25,0], cache22.l2fr1[27,0], ens-cache7.fr6[0,0,200-0,H], ens-cache4.fr6[1,0]
age: 1901
ali-swift-global-savetime: 1749551973
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 10:39:33 GMT
x-swift-cachetime: 86400
timing-allow-origin: *
eagleid: a3b5fd9817495538749694503e
X-Firefox-Spdy: h2
66.29.132.60200 OK 626 kB IP 66.29.132.60:443
Certificate IssuerSectigo Limited
Subjectdewi1001.com
FingerprintB3:27:96:68:65:65:B2:9C:4F:0D:A7:F9:3C:BB:AD:B2:7B:00:4D:D1
ValidityMon, 09 Jun 2025 00:00:00 GMT - Tue, 09 Jun 2026 23:59:59 GMT
File type HTML document, ASCII text, with CRLF line terminators
Size 626 kB (625879 bytes)
Hash 53e5b130ab351071182370684f16a549
25d8787fe41930c25307cfd3c14302c94d67142c
4ab791d53c550a30c9366f0a2368bbba952b20c9770ad362d49f97a2a15649b2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET / HTTP/1.1
Host: dewi1001.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-powered-by: PHP/8.3.21
content-type: text/html; charset=UTF-8
content-encoding: br
vary: Accept-Encoding
date: Tue, 10 Jun 2025 11:11:09 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzd/assets/0.0.5/next/0.19.21/next.min.js
90.84.160.25200 OK 932 kB URL GET g.lazcdn.com/g/lzd/assets/0.0.5/next/0.19.21/next.min.js
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (32077)
Size 932 kB (931662 bytes)
Hash e89190474b7dc4b988edbb405ff0cd32
e9f418799d20cd8bcdb5eab3ef9c562b2e39da2c
07aef6cb37f4d696f2dc269aea4e6646c8514c999105855a16d5199834d172b0
GET /g/lzd/assets/0.0.5/next/0.19.21/next.min.js HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: application/javascript
content-length: 270573
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6842509F91C30D37367A1B56
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 13953652536235100702
x-oss-storage-class: Standard
content-md5: 6JGQR0t9xLmI7btAX/DNMg==
x-oss-server-time: 8
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6319c17491764785322108e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[2],EU-FRA-marseille-EDGE1-CACHE3[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE15[4],EU-FRA-paris-GLOBAL1-CACHE21[0,TCP_HIT,3],cache21.l2fr1[0,0,200-0,H], cache5.l2fr1[1,0], ens-cache9.fr6[0,0,200-0,H], ens-cache24.fr6[1,0]
ali-swift-global-savetime: 1749176479
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Fri, 06 Jun 2025 04:21:34 GMT
x-swift-cachetime: 597585
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdac17495514898506550e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 7121a46a46066df52c3e1bea063deeee
nginx-hit: 1
age: 670
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01mFypLB1jt8eRUFBC0_!!6000000004605-2-tps-96-70.png
172.67.189.152200 OK 8.4 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01mFypLB1jt8eRUFBC0_!!6000000004605-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash 83aeec0f1dba3faf7ef3025a29ec7dc5
a513b681989acda9d22cfcf585acbdb930c2e5ca
dd01e976e33293fc04ce0ebe4aeaf7cbb5da3cc0d71ef82f551f4d38b38c63a4
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i4/O1CN01mFypLB1jt8eRUFBC0_!!6000000004605-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 8434
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "20f2-62041e7142b0b"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0lT1MMrLQ2hg7moVVUaQXC%2FEmBc%2FFh6VbbqfFZSWcEJGNJ7HlUuRM%2F9Hb7lKN3PgoQq1dq%2B2Md%2BElvHVbr0w8T6osFkohq%2FHlHTVttE0"}]}
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d288b67569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01EShTwh1uKIMLn9AjA_!!6000000006018-0-tps-34-34.jpg
172.67.189.152200 OK 1.8 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01EShTwh1uKIMLn9AjA_!!6000000006018-0-tps-34-34.jpg
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 34x34, components 3
Hash 6320ec10cc79b38edb763c78bb14d7f4
d2385a492bd42380877440c4d22727354d39752b
2154242b64002d6eab40f5bfed7cc45d24abd0d209d70be52cfa9a976d23a793
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01EShTwh1uKIMLn9AjA_!!6000000006018-0-tps-34-34.jpg HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/jpeg
content-length: 1797
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "705-62041e71340ab"
accept-ranges: bytes
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
access-control-allow-origin: *
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=9aT4XvgD5ZFX8IDuYgteeMVR9zX4YVnSqgtrG2T4yTe5x0Pn1%2F%2BAWYhdBv%2FmRKX%2FayBroNuQgC9DBQUNXDm6CI8M0w6TX1L1%2FwrXPbGZ"}]}
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
vary: accept-encoding
cf-ray: 94d86d28cbb9569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdmod/??site-nav-pc/5.2.43/pc/index.css,site-menu-nav-pc/5.0.83/pc/index.css,site-menu-pc/5.0.51/pc/index.css
90.84.160.25200 OK 39 kB URL GET g.lazcdn.com/g/lzdmod/??site-nav-pc/5.2.43/pc/index.css,site-menu-nav-pc/5.0.83/pc/index.css,site-menu-pc/5.0.51/pc/index.css
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type ASCII text, with very long lines (39435), with CRLF line terminators
Hash 4860926722ff0e0db37ce1d83f273764
b87d39c6fcdcaac124295f9be89d9df97a1d60e3
c49104f9d604c252ba5569ca38580bc4c1d4588672ebfbeddb41742dc3470f6b
GET /g/lzdmod/??site-nav-pc/5.2.43/pc/index.css,site-menu-nav-pc/5.0.83/pc/index.css,site-menu-pc/5.0.51/pc/index.css HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: text/css
content-length: 9319
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 6846AD515BF0FD3131194422
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2241752031559070708
x-oss-storage-class: Standard
content-md5: z0H7TvnGDNUVj8l9Q2XCNQ==
x-oss-server-time: 18
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: a3b5fdb517494623523684215e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[3],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,0],EU-FRA-paris-GLOBAL1-CACHE18[4],EU-FRA-paris-GLOBAL1-CACHE4[0,TCP_HIT,2],cache30.l2fr1[1024,1030,200-0,M], cache32.l2fr1[1031,0], ens-cache10.fr6[0,0,200-0,H], ens-cache32.fr6[2,0]
ali-swift-global-savetime: 1749462353
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Mon, 09 Jun 2025 09:45:53 GMT
x-swift-cachetime: 604800
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdb417495487588266478e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 3049b48847664c784ff68dc4738fad31
nginx-hit: 1
age: 5112
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
142.250.178.35200 OK 40 kB URL GET fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2
IP 142.250.178.35:443
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint41:FF:72:9C:74:6F:D4:D1:3B:A8:03:EB:55:D2:D2:09:7E:7A:44:DC
ValidityMon, 12 May 2025 08:44:01 GMT - Mon, 04 Aug 2025 08:44:00 GMT
File type Web Open Font Format (Version 2), TrueType, length 40128, version 1.0
Hash 9a01b69183a9604ab3a439e388b30501
8ed1d59003d0dbe6360481017b44665153665fbe
20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Jun 2025 08:13:08 GMT
expires: Sat, 06 Jun 2026 08:13:08 GMT
cache-control: public, max-age=31536000
age: 356284
last-modified: Thu, 29 May 2025 23:30:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET g.lazcdn.com/g/lzdmod/desktop-footer/6.1.1/??pc/index.css
90.84.160.25200 OK 7.3 kB URL GET g.lazcdn.com/g/lzdmod/desktop-footer/6.1.1/??pc/index.css
IP 90.84.160.25:443
Certificate IssuerGlobalSign nv-sa
Subject*.lazcdn.com
FingerprintAE:2E:75:59:AE:FB:C4:C5:41:46:5A:5C:78:88:47:54:62:6E:66:FA
ValidityFri, 27 Dec 2024 07:01:06 GMT - Wed, 28 Jan 2026 07:01:05 GMT
File type ASCII text, with very long lines (7252), with CRLF line terminators
Hash 006001ba402d502f054f7e4bafb9a44e
ae1963e915e14e333300261885e1c46b0c07fefa
90566aed73a2035c2f72f2fbfcba62d0cf31270bb81853e441cb8d84bad7b8bd
GET /g/lzdmod/desktop-footer/6.1.1/??pc/index.css HTTP/1.1
Host: g.lazcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: text/css
content-length: 2185
server: openresty
vary: Accept-Encoding, Accept-Encoding, Accept-Encoding
x-oss-request-id: 683F6CD35DF31935370FA9ED
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 9594161757221752562
x-oss-storage-class: Standard
content-md5: Zg5+ADmfoZe7+kyAM11Qfg==
x-oss-server-time: 30
access-control-allow-origin: *
x-source-scheme: https
eagleeye-traceid: 2ff6319c17489870907742038e
strict-transport-security: max-age=360000; includeSubDomains
timing-allow-origin: *
via: EU-FRA-marseille-EDGE1-CACHE4[5],EU-FRA-marseille-EDGE1-CACHE4[0,TCP_HIT,1],EU-FRA-paris-GLOBAL1-CACHE2[5],EU-FRA-paris-GLOBAL1-CACHE9[2,TCP_MISS,4],cache10.l2fr1[0,0,200-0,H], cache22.l2fr1[0,0], ens-cache37.fr6[0,0,200-0,H], ens-cache37.fr6[1,0]
ali-swift-global-savetime: 1748987091
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Thu, 05 Jun 2025 09:37:16 GMT
x-swift-cachetime: 475655
access-control-allow-methods: GET,HEAD
alt-svc: h3=":443"; ma=2592000
eagleid: a3b5fdb917495482419632104e
content-encoding: br
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 2ab7587c039342304242b52e3727ab4a
nginx-hit: 1
age: 5629
cache-control: max-age=2592000,s-maxage=86400
accept-ranges: bytes
cdn-type: hwc
x-content-type-options: nosniff
content-security-policy: frame-ancestors pages.lazada.sg pages.lazada.vn pages.lazada.co.id pages.lazada.co.th pages.lazada.com.ph pages.lazada.com.my pages.daraz.com.bd pages.daraz.lk pages.shop.com.mm pages.daraz.com.np pages.daraz.pk
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01DGonqR1H5qmpBI2hf_!!6000000000707-2-tps-96-70.png
172.67.189.152200 OK 8.9 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01DGonqR1H5qmpBI2hf_!!6000000000707-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash 3a7c8800aa21df1416ca309341d0c4b7
cf72ac3a1dfb31d5ac92032b888dc47d98774df1
f832556bf78ff9accfed3397e84ca5f850b544599beeb4db5086a447d29e2ed5
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i3/O1CN01DGonqR1H5qmpBI2hf_!!6000000000707-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 8912
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "22d0-62041e713504b"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=aufybGf0l05zEYIUqitqEiYcnBfbmmsU34woEdgjzLKKtT58v1Md0o6WZLxlVAAu89q3XA7WMWIe5gN54cv9P3os4HpnLU6C1Glwk7sF"}]}
cf-ray: 94d86d287b37569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET g.alicdn.com/sd/baxia/2.5.31/baxiaCommon.js
163.181.253.194200 OK 37 kB URL GET g.alicdn.com/sd/baxia/2.5.31/baxiaCommon.js
IP 163.181.253.194:443
Certificate IssuerGlobalSign nv-sa
Subject*.tbcdn.cn
FingerprintDA:3A:AA:7B:92:DB:F4:10:34:34:38:95:9D:FD:3C:A4:2B:74:29:F5
ValidityThu, 06 Mar 2025 10:12:19 GMT - Mon, 21 Jul 2025 09:06:01 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (37062)
Hash d92f78ccaaa2616aa3eb54e89d7032e5
1291a7d5ec73b551114f5175cfd05c747b827928
cc219d27d7e2ab0b6416fd4a1475fdedcd5b710123506903a526f72a4d208156
GET /sd/baxia/2.5.31/baxiaCommon.js HTTP/1.1
Host: g.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 12005
date: Tue, 10 Jun 2025 10:09:10 GMT
vary: Accept-Encoding
x-oss-request-id: 68480446223925343914E926
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 8518556844306691727
x-oss-storage-class: Standard
cache-control: max-age=2592000,s-maxage=86400
content-md5: 2S94zKqiYWqj61TonXAy5Q==
x-oss-server-time: 3
content-encoding: gzip
access-control-allow-origin: *
x-bucket-code: 3
via: cache7.l2fr1[46,45,200-0,M], cache35.l2fr1[47,0], cache35.l2fr1[47,0], ens-cache15.fr6[0,0,200-0,H], ens-cache31.fr6[1,0]
age: 3724
ali-swift-global-savetime: 1749550150
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 10 Jun 2025 10:09:10 GMT
x-swift-cachetime: 86400
timing-allow-origin: *
eagleid: a3b5fdb317495538747202188e
X-Firefox-Spdy: h2
GET dewi1001.com/assets/favicon.png
66.29.132.60200 OK 406 kB URL GET dewi1001.com/assets/favicon.png
IP 66.29.132.60:443
Certificate IssuerSectigo Limited
Subjectdewi1001.com
FingerprintB3:27:96:68:65:65:B2:9C:4F:0D:A7:F9:3C:BB:AD:B2:7B:00:4D:D1
ValidityMon, 09 Jun 2025 00:00:00 GMT - Tue, 09 Jun 2026 23:59:59 GMT
File type PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced
Size 406 kB (405983 bytes)
Hash 954bcc2e0b745e5883c1cfeb2dc344f9
078d275b5af141519ae46cdf0ad62f0a0a4e6372
a1d343847afa50836a5e2af7bee48f391118a085aaa63a95415b41265d53bb68
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /assets/favicon.png HTTP/1.1
Host: dewi1001.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: public, max-age=604800
expires: Tue, 17 Jun 2025 11:11:10 GMT
content-type: image/png
last-modified: Mon, 09 Jun 2025 13:20:47 GMT
accept-ranges: bytes
content-length: 405983
date: Tue, 10 Jun 2025 11:11:10 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
POST dewi1001.com/cdn-cgi/rum?
66.29.132.60404 Not Found 1.3 kB URL POST dewi1001.com/cdn-cgi/rum?
IP 66.29.132.60:443
Certificate IssuerSectigo Limited
Subjectdewi1001.com
FingerprintB3:27:96:68:65:65:B2:9C:4F:0D:A7:F9:3C:BB:AD:B2:7B:00:4D:D1
ValidityMon, 09 Jun 2025 00:00:00 GMT - Tue, 09 Jun 2026 23:59:59 GMT
File type HTML document, ASCII text, with CRLF, LF line terminators
Hash 8150f458ed6fb9b1db4e5cfa57a1a281
6e5726854d28687b560d7fdcb5c782c425c7dfb9
4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /cdn-cgi/rum? HTTP/1.1
Host: dewi1001.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1035
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Cookie: _uab_collina=174955387282252117478151; _bl_uid=zzmvbb52qv0fCI7zzcLyew0lL2aC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1251
date: Tue, 10 Jun 2025 11:11:13 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2
GET fourier.alibaba.com/ts?url=&token=g_zyojw4ehLf54D-qrge3QE47Qo-R2W64yMItWVnNYDlp_ph8XGnKbVheJzEn4mLVvMSL2PLQuW15NN8w2hhCO__BYkvL2HhR2jjoNbTUS615NNuw23hCOaQJ0MspX0HZvchgqcZZ2votJDmmfc6E223KsPmHX0nKJ0hgSDv_lU3rElKq6HFIzXAfbnrI7D28pUqi0-8Zx8H-r8s4Azs3eY3ubnrI7D2owDgX-q0qlRklDgx3Ymg81t-gk2z8fzl9HsPMph0CAaL4pxnqeGqCs52Xd12Cjk1gs-pvmcxgA1lZHKKqjhqCs52vHnmMjk1Z_f..&cna=0gDPIL4mzDgCAVtaKpqHQcEh&ext=1
47.246.165.65200 OK 0 B URL GET fourier.alibaba.com/ts?url=&token=g_zyojw4ehLf54D-qrge3QE47Qo-R2W64yMItWVnNYDlp_ph8XGnKbVheJzEn4mLVvMSL2PLQuW15NN8w2hhCO__BYkvL2HhR2jjoNbTUS615NNuw23hCOaQJ0MspX0HZvchgqcZZ2votJDmmfc6E223KsPmHX0nKJ0hgSDv_lU3rElKq6HFIzXAfbnrI7D28pUqi0-8Zx8H-r8s4Azs3eY3ubnrI7D2owDgX-q0qlRklDgx3Ymg81t-gk2z8fzl9HsPMph0CAaL4pxnqeGqCs52Xd12Cjk1gs-pvmcxgA1lZHKKqjhqCs52vHnmMjk1Z_f..&cna=0gDPIL4mzDgCAVtaKpqHQcEh&ext=1
IP 47.246.165.65:443
ASN #45102 Alibaba US Technology Co., Ltd.
Certificate IssuerGlobalSign nv-sa
Subject*.alibaba.com
Fingerprint5D:34:66:EE:A8:8C:B2:D4:AF:90:98:90:65:36:B3:C7:5F:E8:4D:5B
ValidityTue, 11 Mar 2025 05:07:02 GMT - Sun, 12 Apr 2026 05:01:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ts?url=&token=g_zyojw4ehLf54D-qrge3QE47Qo-R2W64yMItWVnNYDlp_ph8XGnKbVheJzEn4mLVvMSL2PLQuW15NN8w2hhCO__BYkvL2HhR2jjoNbTUS615NNuw23hCOaQJ0MspX0HZvchgqcZZ2votJDmmfc6E223KsPmHX0nKJ0hgSDv_lU3rElKq6HFIzXAfbnrI7D28pUqi0-8Zx8H-r8s4Azs3eY3ubnrI7D2owDgX-q0qlRklDgx3Ymg81t-gk2z8fzl9HsPMph0CAaL4pxnqeGqCs52Xd12Cjk1gs-pvmcxgA1lZHKKqjhqCs52vHnmMjk1Z_f..&cna=0gDPIL4mzDgCAVtaKpqHQcEh&ext=1 HTTP/1.1
Host: fourier.alibaba.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:17 GMT
content-type: image/gif
content-length: 0
server: Tengine/Aserver
eagleeye-traceid: 210104e217495538775873984e42e2
strict-transport-security: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2
GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01qvF2hw1lWoZrnGZev_!!6000000004827-2-tps-96-70.png
172.67.189.152200 OK 9.9 kB URL GET cdn.lazadapro.co/lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01qvF2hw1lWoZrnGZev_!!6000000004827-2-tps-96-70.png
IP 172.67.189.152:443
Certificate IssuerGoogle Trust Services
Subjectlazadapro.co
Fingerprint41:9C:71:35:4E:0B:5C:CE:E8:80:C6:AD:AA:1D:DC:CB:11:DB:BC:9C
ValidityThu, 15 May 2025 10:22:06 GMT - Wed, 13 Aug 2025 11:19:35 GMT
File type PNG image data, 96 x 70, 8-bit/color RGBA, non-interlaced
Hash 2025ccc5c1080f0a0a4d2768ac63e1bf
a4f180053433648878829f7499247a5b6725110f
352048753e300041b1f4a748cde42beb808d76c42d634490ee9f8a902bcf38d8
GET /lazada/lzd-img-global.slatic.net/g/tps/imgextra/i1/O1CN01qvF2hw1lWoZrnGZev_!!6000000004827-2-tps-96-70.png HTTP/1.1
Host: cdn.lazadapro.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:10 GMT
content-type: image/png
content-length: 9860
server: cloudflare
last-modified: Thu, 22 Aug 2024 09:01:22 GMT
etag: "2684-62041e71340ab"
accept-ranges: bytes
access-control-allow-origin: *
age: 7142
cache-control: max-age=14400
cf-cache-status: HIT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RC%2BJouXreqbYFfuQ2XoHhw6eWWnorbjdL1W6JbJDcXVrHQfCfswmTummxKtFi7KkAJq7Ypn8fb0dP73Rm2soZW%2FfmI582%2FUoyFrJTnhE"}]}
cf-ray: 94d86d286b36569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET laz-g-cdn.alicdn.com/lzdfe/static/0.0.37/iconfont-hp.woff
90.84.161.25200 OK 9.9 kB URL GET laz-g-cdn.alicdn.com/lzdfe/static/0.0.37/iconfont-hp.woff
IP 90.84.161.25:443
Certificate IssuerGlobalSign nv-sa
Subjectlaz-g-cdn.alicdn.com
FingerprintA5:45:B9:D4:07:B7:25:BF:8B:2F:B5:D1:76:4B:72:0B:04:FD:10:91
ValidityTue, 22 Apr 2025 02:21:08 GMT - Sun, 24 May 2026 02:21:07 GMT
File type Web Open Font Format, TrueType, length 9904, version 1.0
Hash d20883c6726bfde9255665ea51c33f67
ce37f7e211df8667755b92bffe55e32105f7c171
1fe8f44a5484673e59c667febe3b6ed1cacbff991e45a146748e5886aa9e6a21
GET /lzdfe/static/0.0.37/iconfont-hp.woff HTTP/1.1
Host: laz-g-cdn.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dewi1001.com
DNT: 1
Connection: keep-alive
Referer: https://g.lazcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:12 GMT
content-type: font/woff
content-length: 9904
server: openresty
x-oss-request-id: 6819D09327A147393988328E
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17242847704197017710
x-oss-storage-class: Standard
access-control-allow-origin: *
content-md5: 0giDxnJr/eklVmXqUcM/Zw==
x-oss-server-time: 13
x-source-scheme: https
via: EU-GER-frankfurt-EDGE5-CACHE6[3],EU-GER-frankfurt-EDGE5-CACHE6[0,TCP_HIT,2],EU-FRA-paris-GLOBAL1-CACHE8[4],EU-FRA-paris-GLOBAL1-CACHE11[0,TCP_HIT,2],ens-cache28.l2nu20-20[0,0,200-0,H], ens-cache25.l2nu20-20[1,0], ens-cache20.l2hk11[0,0,200-0,H], ens-cache27.l2hk11[1,0], cache10.l2fr1[235,235,200-0,M], cache27.l2fr1[236,0], ens-cache14.fr6[0,0,200-0,H], ens-cache11.fr6[2,0]
ali-swift-global-savetime: 1746522259
x-cache: HIT TCP_MEM_HIT dirn:-2:-2
x-swift-savetime: Tue, 06 May 2025 09:04:20 GMT
x-swift-cachetime: 3599
timing-allow-origin: *
eagleid: a3b5fd9f17465228870465853e
x-ccdn-expires: 2152921
x-hcs-proxy-type: 1
x-ccdn-cachettl: 2592000
x-ccdn-req-id-46b1: 23b9c6282c2b38a4038bea691b79d5aa
alt-svc: h3=":443"; ma=2592000
nginx-hit: 1
age: 439079
cache-control: max-age=2592000,s-maxage=3600
accept-ranges: bytes
X-Firefox-Spdy: h2
GET fourier.taobao.com/rp?ext=51&data=jm_0gDPIL4mzDgCAVtaKpqHQcEh&random=828625064494928&href=https%3A%2F%2Fdewi1001.com%2F&protocol=https:&callback=jsonpCallback
124.239.14.250200 OK 1.4 kB URL GET fourier.taobao.com/rp?ext=51&data=jm_0gDPIL4mzDgCAVtaKpqHQcEh&random=828625064494928&href=https%3A%2F%2Fdewi1001.com%2F&protocol=https:&callback=jsonpCallback
IP 124.239.14.250:443
Certificate IssuerGlobalSign nv-sa
Subjecttfe.alibaba.com
Fingerprint2A:E7:3A:AD:21:93:AF:7D:07:7B:ED:C0:D4:25:1B:59:27:BF:EA:34
ValidityWed, 19 Mar 2025 08:54:01 GMT - Mon, 05 Jan 2026 02:01:01 GMT
File type JavaScript source, ASCII text, with very long lines (1441), with no line terminators
Hash 8af8a0f23331af9be132b12dd8d9626d
874603d29b0664147d9d19262587f5cf0bfa7bc2
29b7217acb615f118fba97483fb6909f81af614d76294e7e1a4bc1d3d2506c9a
GET /rp?ext=51&data=jm_0gDPIL4mzDgCAVtaKpqHQcEh&random=828625064494928&href=https%3A%2F%2Fdewi1001.com%2F&protocol=https:&callback=jsonpCallback HTTP/1.1
Host: fourier.taobao.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dewi1001.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 10 Jun 2025 11:11:15 GMT
content-type: application/javascript;charset=UTF-8
vary: Accept-Encoding
server: Tengine
cache-control: no-store
access-control-allow-credentials: true
use-raw: true
bxuuid: {"login-token":"6bae66c5ba53da0117e60ff77e6f958f___273523___c319e0070b87e5dcffe5c45ed698376b"}
bxpunish: 1
x5-punish-cache: miss
content-encoding: gzip
X-Firefox-Spdy: h2