{"report_id":"e38fb5f4-9f3b-44bc-b2cd-e51fb0c59b91","version":0,"status":"done","tags":[],"date":"2026-06-08T02:53:28Z","url":{"schema":"https","addr":"formidnxz-dnacostmer.frusciante.my.id/","fqdn":"formidnxz-dnacostmer.frusciante.my.id","domain":"frusciante.my.id","tld":"my.id"},"ip":{"addr":"172.67.207.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"formidnxz-dnacostmer.frusciante.my.id/","fqdn":"formidnxz-dnacostmer.frusciante.my.id","domain":"frusciante.my.id","tld":"my.id"},"title":"𝗗𝗔𝗡𝗔 | 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗖𝗮𝗿𝗲 𝗗𝗔𝗡𝗔","dom":{"size":20109,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4768)","md5":"c8e21a1ffe125dc0c10f49b59e98e77d","sha1":"31076bc2041e2b7739825f2106fdb6b245e653ee","sha256":"b2f251a236fd2ffbaed2f1e10ea1bbf2bc9c7038b14a464ab0ea545cde4922dc","sha512":"420cc5c1bec31012dcd5d8d5dce02a750dc3cdf23c21e9c319c07a64cfa9ae6474ef8db55e4ceb5bd08f5c281b20435aad498fe2be2927fbcfacf99c1c5d54e3","ssdeep":"384:DxFr/Oa9Gvjxa0SESrOAG22FGFmFsFJo5ENgOJcKxX:dl0tYOAG22FGFmFsFJ8qg1KxX","tlshash":"4892759399421017241684d93767ab4a3587e1078e2ac8957fcc439abfde6e09cfb3cd","dom_hash":"domhashd672d70aff33c456b6ffe02cfd3b8542","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"formidnxz-dnacostmer.frusciante.my.id/","fqdn":"formidnxz-dnacostmer.frusciante.my.id","domain":"frusciante.my.id","tld":"my.id"},"ip":{"addr":"172.67.207.25","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-06-11T02:53:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"formidnxz-dnacostmer.frusciante.my.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"formidnxz-dnacostmer.frusciante.my.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"formidnxz-dnacostmer.frusciante.my.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"formidnxz-dnacostmer.frusciante.my.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":1,"received_data":6877,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.dana.id","ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2017-07-14","domain_rank":103065,"first_seen":"2018-07-06T01:48:16Z","last_seen":"2026-06-02T12:27:07.559626Z","alert_count":0,"request_count":1,"received_data":102057,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"encrypted-tbn0.gstatic.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-31T02:32:18Z","last_seen":"2026-06-04T03:30:37.331665Z","alert_count":0,"request_count":1,"received_data":12355,"sent_data":623,"comment":"","tags":null,"fingerprints":null},{"fqdn":"e-formulir.mwebs.id","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":0,"first_seen":"2023-08-26T17:19:56Z","last_seen":"2026-06-06T23:40:09.084936Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":594,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-06-07T22:40:26.930816Z","alert_count":0,"request_count":1,"received_data":90468,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.ionicframework.com","ip":{"addr":"104.26.6.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-02","domain_rank":164865,"first_seen":"2014-02-05T17:09:16Z","last_seen":"2026-06-05T12:12:14.664676Z","alert_count":0,"request_count":1,"received_data":52629,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"formidnxz-dnacostmer.frusciante.my.id","ip":{"addr":"172.67.207.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":1,"received_data":15356,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:3.3.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":1,"received_data":19540,"sent_data":614,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telegra.ph","ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":2920,"first_seen":"2016-03-03T04:27:14Z","last_seen":"2026-06-08T02:09:00.52099Z","alert_count":0,"request_count":13,"received_data":485504,"sent_data":7488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-06-01T07:30:26.606028Z","alert_count":0,"request_count":1,"received_data":123459,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-07T22:44:32.204356Z","alert_count":0,"request_count":6,"received_data":253573,"sent_data":3395,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-17T15:36:59.212176Z","times_seen":260968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-17T15:39:51.550238Z","times_seen":107243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formidnxz-dnacostmer.frusciante.my.id/","fqdn":"formidnxz-dnacostmer.frusciante.my.id","domain":"frusciante.my.id","tld":"my.id"},"ip":{"addr":"172.67.207.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e0330a91f898f8dca2d25621beb7291","sha1":"92c4a38c3da7de8ee9e746c682941543afca83af","sha256":"52ee5f3479345c5c490da435b10185d78bc6556a97570cd102df341b4da6bf03","sha512":"b0aa0178bad425c434c32b548d022f4167352b1aa5781d93f37f852129699d7d095e43415c760857d4f2a5157a8c8bbf3c93a06dec4c00336c9b201f5e41538e","ssdeep":"","tlshash":"51d09b1b60ad6031093774045fbfb4045f677807140db9e47a4c17944f1d3196023544","size":210,"data":"","first_seen":"2026-06-08T01:51:52.830632Z","last_seen":"2026-07-17T08:41:06.282386Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formidnxz-dnacostmer.frusciante.my.id/","fqdn":"formidnxz-dnacostmer.frusciante.my.id","domain":"frusciante.my.id","tld":"my.id"},"ip":{"addr":"172.67.207.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f58a0e20e265bb08d8b4ca9fc23ff51","sha1":"7ed758fdd8a7b1f9f4624679ae980ba3162961b5","sha256":"3a0b2ccdd5ebda1d532208925b8939dd6723bca2f998367c72dbdbf8406ee298","sha512":"ba9516c9c70da83492db5b653724047ab8285def2fddc3fd39eb4bb30456318c5f54c83b994951964cc6dade6c723737964f3700f7253cb2c71206f934c4a643","ssdeep":"","tlshash":"93c02bc630f121014cb6197359f2118c307901752c4cdb806e24d5226f1031fb5a7ac0","size":139,"data":"","first_seen":"2026-06-08T01:51:52.831528Z","last_seen":"2026-07-17T08:41:06.283246Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formidnxz-dnacostmer.frusciante.my.id/","fqdn":"formidnxz-dnacostmer.frusciante.my.id","domain":"frusciante.my.id","tld":"my.id"},"ip":{"addr":"172.67.207.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e0330a91f898f8dca2d25621beb7291","sha1":"92c4a38c3da7de8ee9e746c682941543afca83af","sha256":"52ee5f3479345c5c490da435b10185d78bc6556a97570cd102df341b4da6bf03","sha512":"b0aa0178bad425c434c32b548d022f4167352b1aa5781d93f37f852129699d7d095e43415c760857d4f2a5157a8c8bbf3c93a06dec4c00336c9b201f5e41538e","ssdeep":"","tlshash":"51d09b1b60ad6031093774045fbfb4045f677807140db9e47a4c17944f1d3196023544","size":210,"data":"","first_seen":"2026-06-08T01:51:52.830632Z","last_seen":"2026-07-17T08:41:06.282386Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formidnxz-dnacostmer.frusciante.my.id/","fqdn":"formidnxz-dnacostmer.frusciante.my.id","domain":"frusciante.my.id","tld":"my.id"},"ip":{"addr":"172.67.207.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f58a0e20e265bb08d8b4ca9fc23ff51","sha1":"7ed758fdd8a7b1f9f4624679ae980ba3162961b5","sha256":"3a0b2ccdd5ebda1d532208925b8939dd6723bca2f998367c72dbdbf8406ee298","sha512":"ba9516c9c70da83492db5b653724047ab8285def2fddc3fd39eb4bb30456318c5f54c83b994951964cc6dade6c723737964f3700f7253cb2c71206f934c4a643","ssdeep":"","tlshash":"93c02bc630f121014cb6197359f2118c307901752c4cdb806e24d5226f1031fb5a7ac0","size":139,"data":"","first_seen":"2026-06-08T01:51:52.831528Z","last_seen":"2026-07-17T08:41:06.283246Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"e-formulir.mwebs.id/BotikaTTS%20_5_.mp3","fqdn":"e-formulir.mwebs.id","domain":"mwebs.id","tld":"id"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:01.039Z","timestamp":1780887181039,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /BotikaTTS%20_5_.mp3 HTTP/1.1\r\nHost: e-formulir.mwebs.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T15:40:28.095252Z","times_seen":17318195,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:07.574Z","timestamp":1780887187574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://formidnxz-dnacostmer.frusciante.my.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18728\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 07 Jun 2026 10:17:34 GMT\r\nexpires: Mon, 07 Jun 2027 10:17:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 59733\r\nlast-modified: Mon, 15 Sep 2025 16:29:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18728,"size_decoded":19540,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18728, version 1.0","md5":"a6f0123a9439d11d2bd8f404f620bfca","sha1":"e50a2af45400cb2f6fd8c89711cb4b4ef481002c","sha256":"fcb3290e95d43c9427acb996e3c1243c44f003eae5104707b3f5ed65fba7d452","sha512":"3882dae2392e9d4347952072e52e86ee1f2136f29629eb19df2178b09b768c8b6ed638e4da57c46470515558075252ca550516dda5ebddd11e326a4f47c9e9a8","ssdeep":"384:6gLJuh+PG7AeiBHvp6MQ8jvy3xse1253sADWsMGGRQp2d:6nUB7HJtyueADWVGGRQp2d","tlshash":"4682d09788e9aa41e6c4f76232e92bf57ccf351b3065d2ee14505dc92892b63200bf2d","first_seen":"2025-09-20T15:52:41.695948Z","last_seen":"2026-07-17T14:18:52.709753Z","times_seen":1172,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":2,"connect":45,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/f214ca8c116e23a945567.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.977Z","timestamp":1780887180977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/f214ca8c116e23a945567.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68792\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"8a479848450c822dbc87dff62a11663499ec68e2\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70504,"size_decoded":69169,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"fda3ca154c19eb648b3108a76b57b2f1","sha1":"bbf3c849ae2cf321321e5cedfc450d59589f3678","sha256":"58aadf1b3132da1d9d941fb9d7690aef3560196ca5743d5700b00137cdb6d581","sha512":"7377d60a42f4d624bc9bbcd45b40154369763951ce3a059051100bde78f530b096564c59a239a3034100d7fe22990e9709558ba314296203460b4e83cb158c82","ssdeep":"1536:KkPwMrxkciBon5neOZ68Od1OSZ17YWzcxM:nPwMrxkjhD8mNZ1hF","tlshash":"c563027e46b9f916c00f44f3bdd92736bb06c51861428b5d194dada0af4031dbfb896c","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.271706Z","times_seen":144,"resource_available":false,"data":null}},"time_used":6734,"timings":{"blocked":6623,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.952Z","timestamp":1780887180952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /bootstrap/3.3.5/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 08 Jun 2026 02:53:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"5d5357cb3704e1f43a1f5bfed2aebf42\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 07/03/2025 14:49:11\r\ncdn-proxyver: 1.31\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 93a677859cccc76a96b51ca410f5a0d4\r\ncdn-cache: HIT\r\nage: 4498692\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a0849a912da50b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122540,"size_decoded":21260,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"5d5357cb3704e1f43a1f5bfed2aebf42","sha1":"08df9a96752852f2cbd310c30facd934e348c2c5","sha256":"31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87","sha512":"7537e07bfce0a0c6293fb41b1f2e2058c106b1bb1d65e097cfb8ab22d8dc0b7b0f505b5fd24b856c3cff8b11bb02b4f19838cb5c399ecc7b9b78d8a4c8a195c9","ssdeep":"768:ayPGxw/jc/QWlJxtQZIuiHlncmzI4I8OAduFKbv2ctm2Bm8JP+eckOvS1Fs:Uw/o1wIuiHlncm28lDbzzPux","tlshash":"d2c3d7a0f11031ea7323c55a71d0ed872259a153e56a4eb7f22f25d88f886cb1773f1a","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-07-17T14:01:17.182211Z","times_seen":14395,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.954Z","timestamp":1780887180954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick-theme.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 866\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"c49-gaQ0+U8rESTzIyu4bylE+C+yOsA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220086-FRA, cache-bma-essb1270065-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 2314043\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWKY%2BcRlQYykFhdL92OdcMOREweQMPkItL9ko8j6KjjlDktYDnB1Of9X%2BgJDl6Zr0w6tJa7DBa%2BuSxNskrIzrIdJsZ8DvUIU0auJMIOKcLepj4Zbh1lVkDNphx07jtK7Whw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0849aba2e335693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3145,"size_decoded":2021,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"f9faba678c4d6dcfdde69e5b11b37a2e","sha1":"81a434f94f2b1124f3232bb86f2944f82fb23ac0","sha256":"7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a","sha512":"ea52d475e439ba178c15b5a6dc23f6ef5975e11b17d71b71f89e71db27880e49220697954cd853aa28cc13b1a044a2a2ea10aaa2fc02a014e5441102db433c32","ssdeep":"","tlshash":"cb51e19856b3a746101694903be7472477cb70131629d8acff95638dcfcd0d8ead934e","first_seen":"2023-04-05T09:38:24Z","last_seen":"2026-07-17T15:34:24.511285Z","times_seen":27782,"resource_available":false,"data":null}},"time_used":6592,"timings":{"blocked":-1,"dns":1,"connect":10,"send":0,"wait":7,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.958Z","timestamp":1780887180958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 08 Jun 2026 02:53:01 GMT\r\ndate: Mon, 08 Jun 2026 02:53:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":2263,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ff25af4a310d8225bb745489c6fea2c9","sha1":"37d95e7efa18a621c062487bd04c66fa5fc667a9","sha256":"81855a9223fb532772ef58644e2f4930030d54863ee16f3482e4ea5f098432ef","sha512":"bbd062f72df8499a3b585b88687d17ed07e09d459a5f9cbcded7c93fa42a61b49947a6386d2fa758b232d57a27bae7940a1a4012b86560b4e0d3d5a7b5f5b211","ssdeep":"96:ZOXbalJOXbasFZ8OXba7kOXbadYOXba5OXbaly+aZjzBrWOXba7ubqGIFuV4UOXl:xlhrwd4RlqS6bqGIwV40Cd3Z","tlshash":"0bd131a000179450ab475ce327cebe34ee1fa2656040c07aabfd478aeedbd65637931d","first_seen":"2025-09-17T02:40:21.094619Z","last_seen":"2026-07-17T08:41:06.2556Z","times_seen":643,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.963Z","timestamp":1780887180963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 08 Jun 2026 02:53:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 204563\r\nexpires: Sat, 29 May 2027 02:53:00 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PToq8qWlRzP%2F1V6Z3Bs4vXTWqNphu2GAtuvoDIPAIotSHs99aBPcY0WRXwVScN%2F3Rt9O4KicdBR8lVcOOLDf%2FcTk0Po%2Bpr4uH2vyYVwFLy5UoyoziGBP7dHhsffowdcJluV5%2BgKv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a0849a912e0a56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":28950,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-17T15:36:59.212176Z","times_seen":260968,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.964Z","timestamp":1780887180964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 08 Jun 2026 02:53:01 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10910\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230136-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 4309572\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZjNAf2oPYZ7uY58T3ESm1C8XYSWY6PIY8SrcRwI30qYLEPaf5Lt4JpJquYv4RV29alXTMh%2BFVRjNUj%2Fl5ahqzC2xApX3Eh81kNVTTGnyb3t0oA36tg%2BOL%2Bv2eVHWq5%2Fwm8%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0849a9138b649c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42863,"size_decoded":12029,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-17T15:39:51.550238Z","times_seen":107243,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":1,"connect":5,"send":0,"wait":4,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/2f6ceb2e5a1a2fc7ed4ca.png","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.974Z","timestamp":1780887180974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/2f6ceb2e5a1a2fc7ed4ca.png HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 12780\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"eb509dca9eb4a6cd3dda6ee7328b94a297483694\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12786,"size_decoded":13156,"mime_type":"image/png","magic":"PNG image data, 382 x 112, 8-bit/color RGBA, interlaced","md5":"6fd5a7d18a8f7c04bc5effcdc5235987","sha1":"c4852c577f44fcdf78fb439a30ea2c6c6983b140","sha256":"c67e5431f9c00bb690ea8b8add63d5ca9250bf2925f2c2a691eeee498ac75853","sha512":"13e05a6f89b8110f1867efbbc6a7bf216471ff5cad3739ac3c34e30aaed670844ed8de5b220eb449b174a272bcabef07a96f13f936a34aedd754e6a8ed3cc991","ssdeep":"192:olyA9pk9pGYsPVMm80Y0xf43FmSqf6x0LUYMTo2OZ9:olyA9pk9kYaV+0t43Tqf6KU/82Of","tlshash":"2642cf03f9de13005f6a367eaa2500be41aadd795a8905a2666c6c2ec177700ff988c9","first_seen":"2023-06-26T01:49:46Z","last_seen":"2026-07-17T08:41:06.242004Z","times_seen":3586,"resource_available":false,"data":null}},"time_used":6662,"timings":{"blocked":6624,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/df54e3f92fa6e1a99fd82.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.989Z","timestamp":1780887180989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/df54e3f92fa6e1a99fd82.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60310\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"520e6b0e7f20db88a2815d99da0ee087e2b47d2c\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61380,"size_decoded":60687,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"39e68bf37020490b5c541782726b9adf","sha1":"819bd8309ea32f5224694dfcb7c6f15bdc2fad1b","sha256":"a87d5d63f8f86283daff34bd01361ef78ff6a69405b9d364720663be2807b8f9","sha512":"a479e1309ea00f30b909321a4de9171f27bbb0a463cc1c596f273b997122ed20dbe76ab2289129aadb428390e4590d8cb7554e08f73b3d549b4d9799d8405b04","ssdeep":"1536:r2vMVwO69w88cDyHyefahdHmIgk3IBrEtWCwC:QUwOM8LH7fAyi8rAQC","tlshash":"4a53f208631de691ec6a147c4ad1b319ad17b92f1f828701748728748df32e5eac4ba0","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.249965Z","times_seen":144,"resource_available":false,"data":null}},"time_used":6708,"timings":{"blocked":6541,"dns":1,"connect":24,"send":0,"wait":79,"receive":10,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css","fqdn":"code.ionicframework.com","domain":"ionicframework.com","tld":"com"},"ip":{"addr":"104.26.6.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.949Z","timestamp":1780887180949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ionicframework.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 18:00:31 GMT","end":"Wed, 22 Jul 2026 19:00:10 GMT"},"fingerprint":{"sha1":"2F:1E:B6:40:05:D1:2E:67:54:4E:A8:5D:09:44:89:1C:88:45:AE:FA","sha256":"47:35:CC:0A:C3:42:E6:69:B8:49:C3:00:32:9E:EF:82:C4:23:A7:A3:87:52:A9:87:A5:DF:8E:4F:E2:C3:7D:E7"}}},"request":{"raw":"GET /ionicons/2.0.1/css/ionicons.min.css HTTP/1.1\r\nHost: code.ionicframework.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 08 Jun 2026 02:53:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 8313\r\ncontent-security-policy: default-src 'self'; script-src 'self' *.ionicframework.com ionicframework.com; style-src 'self' *.ionicframework.com ionicframework.com;\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 15 Oct 2025 14:38:53 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"68efb1fd-c854\"\r\nexpires: Fri, 29 May 2026 02:01:38 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4742:1C6B08:B1F50:C631A:69C48981\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 434470\r\nx-served-by: cache-bma-essb1270041-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1775745588.430885,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 81570def1b433ceed36ca80d3ae6cadc3dcc4675\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Epw8TJwb1Y%2F6MuRH4fnzCFo8sqZl1gXHmJFIRtRVWdIHZNBFVVrUrfUHegk3E0KVJ7bGCYAmpIkPqIL8E8cbb1ipaFMcZzM4fNOmINKFhH7XarmTBhr11J7rhRF9k3u7MezKM4HCXa5t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0849a912c83c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51284,"size_decoded":9658,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (50802)","md5":"aed7997754b0bd942995126653dfc81d","sha1":"89568702c732f4c0b629e068f56bc3812cf5f5a2","sha256":"95d37d2b4f6dc57aca2141a52aafe6e34fb6cac97983f8205c7befd824c62d42","sha512":"e79677cd4bed1609de5ad33c5a6e09e223f33e0d1835e300416382bdcea7e984cfe0c28ac268d41cb311b2ed0717747e4e98740b98e0c21e5f409e3652238541","ssdeep":"384:R48wBhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:R4jhhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"ef33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-04-07T10:41:49.428708Z","last_seen":"2026-07-17T16:32:23.73671Z","times_seen":5650,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":8,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/ef49956cd9d6444e24f41.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.985Z","timestamp":1780887180985,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/ef49956cd9d6444e24f41.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28295\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"7be79daacc3eb422bba49c020ec24c70d9567e22\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29964,"size_decoded":28672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 643x259, components 3","md5":"6d50bcb334150b5fae2f7e9a143e3ded","sha1":"40d976b19912ed3adf511f25dd550f1316851618","sha256":"cc3e389bfa43d9cb4d2ce67743f358c798088e2dd208cf5c035976895e09fd36","sha512":"d03c667634f2d5bf017ccebf0e1cb9a7c8c2e38a13c35ef4cbc0dde8cffc368791106c6ba875ca74a8f282efb16c8f0f791d98aaddb2b953721b218d68d7b6c6","ssdeep":"384:k9iw2bNLbynbXMCUhn+e1Gr00ElhjPrzF1cjhymqiYwi9xe76yk/jwfcTUATxnzj:mzMCy15zFaTqiYRe76RqCJu5XnY","tlshash":"1dd2d0513ab41ae5c87d1ef4e3cd9b0770a7b69e92ecec8351a4bd1809ca89027d453f","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.269311Z","times_seen":135,"resource_available":false,"data":null}},"time_used":6724,"timings":{"blocked":6624,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/73cfd241e126f3ff53304.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.993Z","timestamp":1780887180993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/73cfd241e126f3ff53304.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24335\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"fbe678dace539f5db95a1cbe6a8a3d71e1a9b7e8\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26527,"size_decoded":24712,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1200x360, components 3","md5":"7f21b4087f3b5c4ee2298f00c5de1f02","sha1":"14bb4cd75a80ac6f2c093b04d649fe5845003189","sha256":"0cfc8f9f23bb792197d73d89d23d74b1bb3e7003342e7ad379a062981ce6a240","sha512":"431d981adb2c1dfe7599a0e34b27f2424e46a5e348dc0b2d50ec6835bf34c581310a9e312cc2f7ef76e1eb28202657d29d3c1c7b33bdf0c572c1bd343c3d31af","ssdeep":"768:bJVR8Rrqg0xn/gW3R0YtQTUtkneaCzZCHcQl4MXS:9Vu5qgBW3NtQTUtkPuCHb6","tlshash":"18c2d026be4437d9c0228eb50aef3ab5fc721c271b43b13d62859a693274cb3191c5e6","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.265462Z","times_seen":141,"resource_available":false,"data":null}},"time_used":6733,"timings":{"blocked":6527,"dns":1,"connect":26,"send":0,"wait":121,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dana.id/favicon.ico","fqdn":"www.dana.id","domain":"dana.id","tld":"id"},"ip":{"addr":"23.36.77.57","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:07.129Z","timestamp":1780887187129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dana.id","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 26 Feb 2026 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:ED:91:2F:F6:34:69:BB:CF:66:8E:63:5D:69:16:87:82:99:AE:A4","sha256":"16:17:3A:E7:2F:7B:EB:4C:69:22:7D:50:49:62:BE:03:6D:BD:16:91:F7:66:A3:34:B3:D7:A9:8F:A4:22:5B:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.dana.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 11 Apr 2023 09:54:24 GMT\r\netag: \"64352e50-18c5f\"\r\nx-ua-compatible: IE=Edge\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\ncontent-length: 4296\r\ncache-control: public, no-transform, max-age=7390619\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=2, ak_p; desc=\"1780887187545_388255036_380628422_156_15496_1_14_21\";dur=1\r\nalt-svc: h3=\":443\"; ma=93600\r\nakamai-grn: 0.3c4d2417.1780887187.16afedc6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101471,"size_decoded":4882,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"8f1bac7ae69451bdf9c44b09577cf28c","sha1":"4fe47a2d13f8b8bdf5966dc6c4e9e245b00e91c1","sha256":"8cd0ee2909907b3b0f78d1fd1e7223e2ecc90069261768d98c4b8c7cbee0f9f5","sha512":"7a33d5879926c4bc7e69f66eebca9e0e5a1ba1dc04d5fb4b058acf0ae20e2f18693c423fb9b3f19433a940cd3180d2eecaed4ae1bb60e84ca5e0383bfc6a1a9a","ssdeep":"384:wsa0333K///bggnggnggnggPgg/gg/gg/gg3HabzXDbHG7FHWJ:wX0333K///THabjGpHi","tlshash":"74a36192f109c25ee17c5471be00c2e4f1a2fc67e855cc2eb8da772e5db1e88ca25617","first_seen":"2023-05-23T04:54:26Z","last_seen":"2026-07-17T08:41:06.236619Z","times_seen":1512,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":411,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/fonts/slick.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:07.645Z","timestamp":1780887187645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/fonts/slick.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://formidnxz-dnacostmer.frusciante.my.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: font/woff\r\ncontent-length: 1380\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"564-r5HBLw9Aak+AGus7OYdo/kHY+GQ\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220113-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 2155058\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YglK5bomRg%2B7clE3WmG6GpAavWP3konwuKaCdLd4OtjSA99ioa7KY7qCKAHc%2FxppvsZc9ilf0gDZYfY5R5SKGQcS7RQL1%2BReiZ9NpTIauvfBlLsN4L4C3s9z4QRF23Bvwws%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0849abace725693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1380,"size_decoded":2468,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-07-17T14:55:26.314939Z","times_seen":24977,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/ajax-loader.gif","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:07.650Z","timestamp":1780887187650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/ajax-loader.gif HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4178\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"1052-ehqkNhQ5Y4K7FeX95XTZzc0haY8\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230113-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i\r\nage: 2306766\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWaJAVmnAFSD342S0gIvmDRh8ZkDopvhiOsLV9lQwLw%2Fb%2B19btAx8vvJcq%2F%2Fi7Fn997kcl63%2FdSFPzKMJRvECN%2FxGx4hOQWa%2FdXhGb%2B7r5Oo6BkDD%2Bpw0LsVH3sCdw%2BGsg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a0849abade795693-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4178,"size_decoded":5278,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-07-17T14:55:26.329594Z","times_seen":44554,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/be0c88ba14ca044776e1c.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.975Z","timestamp":1780887180975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/be0c88ba14ca044776e1c.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35862\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"0eaeb478858ca529e1bcc7b41201a60565cb5259\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37724,"size_decoded":36239,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 669x286, components 3","md5":"41b022c125311aab691ffc19ccfc3286","sha1":"f73662c40dce4b9917037e9981c56cc0c9abc6fc","sha256":"543191cf2c750cd2a358f15ed391e3912f55a40cc81e04ea78e7719b02210f54","sha512":"029ea90159047e0b526c81ff1d10b9606aa4a23ec24924655f8553750af65e6c59d50a0df4209651c7ce4529421a702d5dd4b14a87ff87c5be1e7fe5bee71053","ssdeep":"768:0bGmGE46bzvxcjqF47e8PLx9J8XeB6WGb9OBJ5Mtv16KxOvq:0mN6bzJYqt8TbJ8XeB6WGZAJ5MFE6","tlshash":"fd03f14105e0c216eb9756be12a89b82d732747b25cf5bd88118bcbc0bb46e270dc9fc","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.245514Z","times_seen":141,"resource_available":false,"data":null}},"time_used":6723,"timings":{"blocked":6623,"dns":0,"connect":0,"send":0,"wait":86,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/ff817316449f76e14fb2c.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.984Z","timestamp":1780887180984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/ff817316449f76e14fb2c.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31095\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"4dddc8e58f78918954ab00811adbd7b9e435738f\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32297,"size_decoded":31472,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 767x400, components 3","md5":"dbbdbc43caf6711d00d7ac9928c59d9b","sha1":"11df2b0495a13f3ddfccc1b1ef99a5d4d6208293","sha256":"ddcdeb52e267f261ad7ca437499a9ea6d79787b9ee3626853a62ec45b404f28b","sha512":"a077ab75674407b35fb857b8558da4c5fa67c639d00ca58f4b8548ac90e9e2212bb581509476c5af7a2845a60ee70d9507d06dc76e0b9228f8e197e5843537b9","ssdeep":"768:amrbOo+hnSm7RgEGtsswziGBXrVxTcIgO3Ib4meFVy:amrp+JfaDtsswuGBXxxgQ3kxe7y","tlshash":"14e2d021cfadc3a6c197a63270c12dc4f7047d29d3f6d74a32a46a7123992f1c52a6db","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.246458Z","times_seen":138,"resource_available":false,"data":null}},"time_used":6684,"timings":{"blocked":6623,"dns":0,"connect":0,"send":0,"wait":52,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"formidnxz-dnacostmer.frusciante.my.id/","fqdn":"formidnxz-dnacostmer.frusciante.my.id","domain":"frusciante.my.id","tld":"my.id"},"ip":{"addr":"172.67.207.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T02:52:55.992Z","timestamp":1780887175992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frusciante.my.id","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 07 May 2026 13:34:32 GMT","end":"Wed, 05 Aug 2026 13:34:31 GMT"},"fingerprint":{"sha1":"A5:14:66:69:D6:DB:93:07:E0:E3:40:E9:39:B4:44:48:CA:C5:D6:7E","sha256":"B3:78:50:0D:FA:F2:5D:36:D2:1D:6F:03:0B:FC:54:A4:05:EE:4C:3F:E2:39:52:0A:C3:5C:7E:02:51:77:FD:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: formidnxz-dnacostmer.frusciante.my.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 08 Jun 2026 02:53:00 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 28 May 2026 15:10:19 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IW58uZYn7Ys7lGx2dH5VQ%2FVO7XEZoaioIjbTeuiPB6YFmHId3aVchj%2BPHO7JF1jQmF0fhKIqjTGGgf2VC62XbNl9W7xxgvKkIzwQP8ZBSm8xnEY11gnzf%2BRCdFLv7Y2s3FENTEIrLSeao0evXR%2FakBQ2lRplsFvF\"}]}\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a0849a722b7adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:3.3.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":14710,"size_decoded":4659,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (467)","md5":"628dc6b8d0fca785c6852ebc51b1c8f4","sha1":"2737ae78838c9ae378f111def4f3f6d94c778c9f","sha256":"284a8bacdb8917cff57fbe0980ae2a534be54cf0355f8aad4ec26709a9fb2595","sha512":"76618be87e49220900abd17266ab1fb2c66054985c8082f6512fb7c845038a1fbd9d0d78f7bfdbe4be1a6d12c2d1fbeca008a5fe0b81fdb6cd02cbebd5e6dea3","ssdeep":"384:DxFr/Ob9Gvjxa0W4OeLt2FGFmFsFJo5V3GcKxH:gl0W4OeLt2FGFmFsFJK9KxH","tlshash":"df629397698750067412c1ad3ba73b4d729791074a0eccb5ffcd9289ef892e489b23cd","first_seen":"2026-02-04T02:55:05.236051Z","last_seen":"2026-06-08T02:53:33.557225Z","times_seen":11,"resource_available":true,"data":null}},"time_used":4572,"timings":{"blocked":-1,"dns":15,"connect":15,"send":0,"wait":4541,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"formidnxz-dnacostmer.frusciante.my.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"formidnxz-dnacostmer.frusciante.my.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"formidnxz-dnacostmer.frusciante.my.id","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"formidnxz-dnacostmer.frusciante.my.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.953Z","timestamp":1780887180953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 08 Jun 2026 02:53:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 533\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230121-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2329769\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4s9%2F7yEtBJcAfekjImdI4A2iI5uTuWLwdM1Z9yt0m46zcZ6zMQ6YwRm8G1gi0NWkkxgOy5V%2FK0FwihL%2FmeSiCK8%2FDOXHjweorpV8kvG0W5kgRhCs9wDDhEzcah2tehvkqaE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0849a9128aa49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1776,"size_decoded":1633,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-17T15:34:24.593248Z","times_seen":71083,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":5,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/08d026a96c972a8c29acf.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.986Z","timestamp":1780887180986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/08d026a96c972a8c29acf.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47463\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"05afce711a5e840134c5a528c68f735befde2342\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49847,"size_decoded":47840,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"40af6ab1ffeb7242b07fd40aa4face2b","sha1":"7dc8a44a889f90eba9818e9b71af05239f502035","sha256":"4a6eb4fe97b203347d9ce38a21bfd704141488a075e8a17e57e3e0ab53be929a","sha512":"e43d82291e12dfe3f6ba88dac064bb1db8ef1d6ea3c6d9d38a8123dfdf2c950aa2c21a0385e5d6e75a772cde31e489a5b904df34b6115c63e86ecd88581c6e71","ssdeep":"1536:/pUjK7ao+4ZOV4rU7WVKPlsOqPGF1C4f7WPK+:xayPrqKOqZ4fKK+","tlshash":"bd23e0e5864d8ebdf179af7f49e24216e6713c90a79308f762c010390370fa25cd26ab","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.272798Z","times_seen":137,"resource_available":false,"data":null}},"time_used":6757,"timings":{"blocked":6542,"dns":1,"connect":25,"send":0,"wait":123,"receive":10,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/1e68929082b536f5df374.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.988Z","timestamp":1780887180988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/1e68929082b536f5df374.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40080\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"757e68f6e0c362633fea9247dcd945c41c3b70ce\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43086,"size_decoded":40457,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x315, components 3","md5":"52611566a906577a6f8df09242879dbc","sha1":"986393aa1ea93c947b8c7d932f820fb8880146ee","sha256":"0e9a605f74d29c6a55ed02a9b75611757be80005d3833198a933d8040f3fe17a","sha512":"6a3f03bd3eba46fb45573b5451157c22b0907bfb5cf7409ed4e9f77162c3295b34fdffc59c028f4dc2be1ff9d27d83e35b48ec5da3116428a459adb660c52fc2","ssdeep":"768:V6Xkx8LgLN/GWXLKWsguOQGoGisZfD1jBgoVSUUJMNfRtY1v+5:9GAN/7RQG6slFB3DAMNnY1+","tlshash":"cc13e07855c14b04e47b0ab315ca7316f9647380c0b792db65da2f2742b69b31feb226","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.257899Z","times_seen":143,"resource_available":false,"data":null}},"time_used":6747,"timings":{"blocked":6541,"dns":1,"connect":25,"send":0,"wait":121,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:07.127Z","timestamp":1780887187127,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 11540\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 08 Jun 2026 01:47:34 GMT\r\nexpires: Tue, 08 Jun 2027 01:47:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 3933\r\nlast-modified: Sun, 15 Sep 2019 17:10:09 GMT\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11540,"size_decoded":12355,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"45525a4e10b53535c2f0a134aec2d0fe","sha1":"8689b23fb445fab7c8f3f92f91eb8606a5a51959","sha256":"0546f98f9019a3d2afbe9372ba08aba895e2aa716bd0fec8e78ff5879162f134","sha512":"9065c80f6d41caf354ab957f724ab2e3102fb1bedddfa9503d76f2c19c418695ecfbcba1d54be82359b2341b242d746510241fa6910b1dd4f20c727b63845311","ssdeep":"192:I1PWG4+OxCPAq2CWPfxoZ3s3G2fJOz3PZ8IrfD45R:IlF/OxCP/2BFtwrR8Ir745R","tlshash":"c6326b6bff43a122cd08d336ddeb56183b3355ad815c0582d78d426094ab7a7eeae4c0","first_seen":"2023-07-12T15:04:13Z","last_seen":"2026-07-17T08:41:06.281642Z","times_seen":2125,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":411,"dns":1,"connect":16,"send":0,"wait":17,"receive":4,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.956Z","timestamp":1780887180956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://formidnxz-dnacostmer.frusciante.my.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 08 Jun 2026 02:53:01 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 28778\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.2.0-beta1\r\nx-jsd-version-type: version\r\netag: W/\"2f3f9-YnOsGiPXmhIvAi9qh8W3XCz6/Do\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220064-FRA, cache-rtm-ehrd2290037-RTM\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2232626\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vdRaIklzZ7Tn0l1aTlUhAfDFpisjFzjW0KDO41CDa2mwh7aR1%2FHPLUjfAJfS%2FX%2BCbPgb3IYrF39T9qSqIIpLJk7oSmIfusH47403sRHLakUMnkMlROMo9YOfLQj8g7Keyfs%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0849a926b3b723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193529,"size_decoded":29918,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"6d9c6fda1e7087224431cc8068bb998f","sha1":"6273ac1a23d79a122f022f6a87c5b75c2cfafc3a","sha256":"fb1763b59f9f5764294b5af9fa5250835ae608282fe6f2f2213a5952aacf1fbf","sha512":"a3f321a113d52c4c71663085541b26d7b3e4ced9339a1ec3a7c93bff726bb4d087874010e3cf64c297c0ddd3d21f32837bc602b848715eadd8ef579bfe8e9a9a","ssdeep":"1536:xtGMGH2K5wlP7WIgHf73Z6LsKkVkpz600I4lp:xtGMZvkVkpz600I4lp","tlshash":"be1482d6f190303d98a7c2499591fefd866fa585d7024aaaf0137b6847ca7c30963ecc","first_seen":"2023-04-06T08:38:45Z","last_seen":"2026-07-17T09:00:28.903343Z","times_seen":4727,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":6,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/1214de4228752b76ef775.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.987Z","timestamp":1780887180987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/1214de4228752b76ef775.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64817\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"ee42d4d145995737ba8d48b4ae492854ac14db19\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65956,"size_decoded":65194,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"779bd4ecaa34e87b57fd3a28511abfe7","sha1":"fba85f301b4f22473e205f07aff557e0d553db39","sha256":"99b4ce7a8d73432d6752093fde14d3b43a954a4c217b9925143c1905e5dbd9e3","sha512":"4f372bb44c434addcc03560038a6e9406c985d8029866ade8d1133d5ec55d57001059c66215867ab568ab2dd79788531fa6d2c5508eb4366565d38d59a943792","ssdeep":"1536:MaYM3y5JGV3evNq64rg6Tq/9ttBSthnRB0U1Amv2W2QTCzdyx05saLWt:Mabyeeg2LmBVam3m/ql","tlshash":"3853028bcbcb8c46e85923b960f775d4ddbdb3ba0474c0582a40ca22fe166470a77e57","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-07-17T08:41:06.2481Z","times_seen":138,"resource_available":false,"data":null}},"time_used":6757,"timings":{"blocked":6541,"dns":1,"connect":25,"send":0,"wait":123,"receive":10,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/074af7b0b495f2a210721.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.990Z","timestamp":1780887180990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/074af7b0b495f2a210721.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27616\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"626dcd409f13e33bad4e306e8104550168bb9b8a\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30914,"size_decoded":27993,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x600, components 3","md5":"e3792eb908f79a34238999adc2a46688","sha1":"20ca96b1d2b4b0b4961bc658c4f4ce2500cd422e","sha256":"b34d40ec1fd3b90153a2bb45c2a68803f295510c42c7479e73daecde9d0aaf0b","sha512":"8176af9119c41119fb29e3d1530405100dc439a0127bb8ca918c05b7b0ae337affec39eaafc8c0bba83404db2cce36a1d219f6c4d8053308fefb927af6c997fe","ssdeep":"384:k9eTCkvSRHbo6xfGkXp+4SVAUzXGQNHj9mZtYtXnlGJSwPBpc475Y/gU3cXZBS9w:Af/xZM4SV/9j9NBoJZBf74eLpP5","tlshash":"d0d2e1c9457892cfc8390b71d8e727c1d7e236623cedba0783a90047ab1661ae16ded5","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-07-17T08:41:06.262853Z","times_seen":142,"resource_available":false,"data":null}},"time_used":6747,"timings":{"blocked":6541,"dns":1,"connect":24,"send":0,"wait":109,"receive":14,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/79d4ec49c06faed353dcf.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.991Z","timestamp":1780887180991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/79d4ec49c06faed353dcf.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7888\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"9a8cf0178db5efe135a7c1c6632d264bec334883\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8427,"size_decoded":8264,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 369x137, components 3","md5":"ec464111bf1b76e00a8a5c6449bf6605","sha1":"8fd735e8d37804ff2bf5dd51c6bb91ba1216cbac","sha256":"1f72c44d8d91d016c3b15db423cd0d155d68c22a3aa1d57cb674d61f792ff83a","sha512":"d7668b595f416dcfbdb3ba2de4ea79b179edda992e0b041d71b1da64ca98d785dc31e7ee75808ce3514f0e710bb42db7787968d0c3b4cf5bc8d908e5606d72c0","ssdeep":"192:kjRFllasoyzwJnQB4V/J2baWmUWkOX4Eru/GYz/W+x2ovmZ6:k9dasoGwWB4R8uWmU8jGLtw4","tlshash":"65029faa4b659b07e4705cb589ec0a02f3073f35a2579152c362570cab5ade64aad0ca","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-17T08:41:06.280088Z","times_seen":144,"resource_available":false,"data":null}},"time_used":6723,"timings":{"blocked":6623,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/6851b7eed19e0048a18b9.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://formidnxz-dnacostmer.frusciante.my.id/","date":"2026-06-08T02:53:00.994Z","timestamp":1780887180994,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/6851b7eed19e0048a18b9.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://formidnxz-dnacostmer.frusciante.my.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Mon, 08 Jun 2026 02:53:07 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10463\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Mon, 08 Jun 2026 05:53:07 GMT\r\netag: \"a0035bab37369d0098be047e8f4f77fb5a125d3d\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11193,"size_decoded":10840,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x138, components 3","md5":"67b95924413ffeb603127fa60fda5980","sha1":"f28340953ec6245692d3b12f3bf164db9e913a88","sha256":"936085de6da0b583376394b821a6ce7bf86baff72711ad8a020d32f92a78e48e","sha512":"9f9575c876c4394a0888172c213d5edb415bb0c1e552fa89ebe3c9203fce47a3a9c0eaf37d6c317b9490d84679447b75e1ec861e75d8368c6db9b45ca991de0b","ssdeep":"192:kjREeGvdVWYpCpCpGZl8tSFRlQ0lqKPEZTWCrjAGXK7WWK5kqDWj:k9EeGvdoYpCpCpg/XCTWC2qOqDWj","tlshash":"36329eb09734dfa1cc06893b60ed40fccd747b739acad867f94422a42bd315826754d9","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-07-17T08:41:06.267576Z","times_seen":144,"resource_available":false,"data":null}},"time_used":6718,"timings":{"blocked":6609,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}