{"report_id":"eff93ade-2d6c-4c6e-86b7-4d5ae855a15d","version":6,"status":"done","tags":["microsoft","phishing","tycoon","aitm"],"date":"2025-12-15T19:26:04Z","url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"104.21.89.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"title":"​","dom":{"size":1558661,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"067ab2627317e84ec3140347a8e793f3","sha1":"973627ec332957ad91d050dcf506ceaac52d7b42","sha256":"e98ee599e84534cec097e7f3af39d48e9c623213a6d243f407e655b535bc7f25","sha512":"69460268466f8272124877ce6fe359c1ad5679c56a2501d2f644734b42da26d832bb7d415ae054fa9e4dda0ab395d7cff9663fca91fa914b12886d9728d1ea41","ssdeep":"24576:3lqDu2NNmJcPW+B1v/VkDE4XBMej30138yQP7sx9Wu1GVYsnfq4MC3:1LcB1vaDE0BZwxGg9YVuC3","tlshash":"577523b03897bc3b158b4b9990fa172f7ee58657c88661d653f883ed1ec2d40ce27528","dom_hash":"domhashdddaacbb890788722d348cbf4188b5a4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"104.21.89.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-19T19:26:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":3,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]},"summary":[{"fqdn":"candy.stafretotoocoo.qpon","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-11","domain_rank":0,"first_seen":"2025-12-15T19:26:06.699142Z","last_seen":"2025-12-15T19:26:06.699142Z","alert_count":1,"request_count":1,"received_data":580,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-14T22:20:12.666465Z","alert_count":0,"request_count":2,"received_data":82347,"sent_data":907,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.shopify.com","ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"domain_registered":"2005-03-11","domain_rank":3587,"first_seen":"2012-06-22T18:37:14Z","last_seen":"2025-12-15T00:19:38.111275Z","alert_count":0,"request_count":1,"received_data":94089,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flagpedia.net","ip":{"addr":"104.26.5.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2008-04-02","domain_rank":225394,"first_seen":"2012-10-30T23:27:34Z","last_seen":"2025-12-10T07:54:01.837082Z","alert_count":0,"request_count":1,"received_data":967,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.vecteezy.com","ip":{"addr":"104.18.35.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-04-27","domain_rank":196654,"first_seen":"2012-10-01T18:25:29Z","last_seen":"2025-12-09T04:34:38.682581Z","alert_count":0,"request_count":1,"received_data":17750,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"image.petmd.com","ip":{"addr":"23.36.77.201","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"1998-01-17","domain_rank":1463568,"first_seen":"2022-07-09T21:17:49Z","last_seen":"2025-12-14T03:43:45.15099Z","alert_count":0,"request_count":1,"received_data":45865,"sent_data":497,"comment":"","tags":null,"fingerprints":null},{"fqdn":"hips.hearstapps.com","ip":{"addr":"151.101.128.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2016-03-04","domain_rank":77737,"first_seen":"2017-01-29T15:55:50Z","last_seen":"2025-12-09T12:01:47.111207Z","alert_count":0,"request_count":1,"received_data":453057,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"thumb.photo-ac.com","ip":{"addr":"54.240.174.26","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-09-08","domain_rank":3983578,"first_seen":"2022-08-30T10:13:14Z","last_seen":"2025-12-14T03:43:45.150326Z","alert_count":0,"request_count":1,"received_data":24776,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ajax.aspnetcdn.com","ip":{"addr":"23.36.77.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-10-12","domain_rank":21241,"first_seen":"2012-05-24T13:35:31Z","last_seen":"2025-12-15T03:18:52.554906Z","alert_count":0,"request_count":1,"received_data":89985,"sent_data":444,"comment":"","tags":null,"fingerprints":null},{"fqdn":"midi.traipeapu.biz.id","ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-19","domain_rank":0,"first_seen":"2025-12-15T15:22:00.026291Z","last_seen":"2025-12-15T15:22:00.026291Z","alert_count":36,"request_count":27,"received_data":1901513,"sent_data":35860,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.pexels.com","ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-05-15","domain_rank":246953,"first_seen":"2016-11-15T16:49:09Z","last_seen":"2025-12-10T13:57:25.317305Z","alert_count":0,"request_count":1,"received_data":17975,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.socket.io","ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2010-04-18","domain_rank":199187,"first_seen":"2015-03-23T22:14:03Z","last_seen":"2025-12-09T17:34:47.33414Z","alert_count":0,"request_count":1,"received_data":46534,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T17:45:51.644253Z","times_seen":594231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2049cd77adaf62e23bed28520f625c1e","sha1":"da845aca7a43ca9ca1f883cb7b3dd0c7b1bc3431","sha256":"072db476bf009b9bcab177d87fbf927e9c16ec6a7ab1a7ab6a6c57688a380fde","sha512":"4686c875d53d6155f7369e83c6de61a7875c8f93ca01542294bfeed10611a489c9c6e4d7fe3fe4aca3555a6a01650fd021f9f32b0180214b53bd91c6d2d91058","ssdeep":"768:r6zoB0uzlWA3F1fdMXtRyFhrxNqQsS0n4npZ4agzOA/YgU+7mZ:B1zl3jfO2rxI045GjCmZ","tlshash":"b303f1f4237a31ad144531ab280b95c8b6a15f4d71414accbda1f8fccb3d5ca982f66a","size":39894,"data":"","first_seen":"2025-12-15T19:26:10.426627Z","last_seen":"2025-12-15T19:26:10.426627Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"4d9d1b458ed712fed6adf2cf8fa4bc3d","sha1":"d657229255213d7bb7fd978eaf37f11a4c40c153","sha256":"0207cc8d6139fe8610392191aaba8fa31a3d1ef5b77783ce6131aac462a4ce28","sha512":"d2ecfa1f0ad825eef0b3772b00316c090c6cd8b7021dc4b7ad9a0ad78f75692caceb365a2a4f1c2aa462d2709571ce68482bfa281e8ca298c224f98ec2b63daf","ssdeep":"","tlshash":"c361126ef5122075973273f9ab6e6204ff378137408186247eec40503ff62925691edc","size":3441,"data":"","first_seen":"2025-12-15T19:26:10.428112Z","last_seen":"2025-12-15T19:26:10.428112Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5654c2be973a95c1ca8268ef68321acf","sha1":"3ed483137bd6eec3bd14225c6674b6b83831e64a","sha256":"bf22ee3b54b855e09908be72ff87d2f6a8ad3f18f0486d55082de4a6068eada1","sha512":"2dddb00b6d04f2521992c50c1899fef601a71f4d508f04d146516390f65cd804129120ee1060f2d955ab0fb3cb75b1756c19634626e3b19a828c4347edf302f1","ssdeep":"12288:g+HHcKf0nE54OPWmh7VTVSpi2whljfxil9mPf2KeptC+4LVLZQ:VcCicx4pwh5/2KepU5Vi","tlshash":"5cf4e0058b845f95cfe89a01e07e5a1e12b0cb8f984664cdd733bf4bab6ae0c535709d","size":748230,"data":"","first_seen":"2025-12-15T19:26:10.429515Z","last_seen":"2025-12-15T19:26:10.429515Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eedf8343fcd7a3342a7b1e8e5d21341e","sha1":"1efe523d7b21a91e460e472da445eece1ad37d18","sha256":"a799537fa674296bd3e35d785a0c9de1a91e78894fedf00e7d35cedfec556670","sha512":"4aa13d0a8b98dcf3157df5b7295e4b55ea1e13f50e535bf52e8feb8067d0ee741d634f08720f369ad7e372d91acdbcb9bd3a2e0b42775a4c115d65e3f8132ef5","ssdeep":"24576:tlqDu2NNmJcPW+B1v/VkDE4XBMej30138yQP7q:7LcB1vaDE0BZwxGe","tlshash":"b22523809ef6745e3fe84f0ce4efa75b67b48f74808564d75b82548362d6f0aa633209","size":998985,"data":"","first_seen":"2025-12-15T19:26:10.430906Z","last_seen":"2025-12-15T19:26:10.430906Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T17:45:51.644253Z","times_seen":594231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-04-04T16:10:07.865529Z","times_seen":29356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"042ddd30ba267351113348b6b02a8215","sha1":"28651f646028f6a6392811a384d66b808cd8ea8a","sha256":"4c6fdbecd64e4bb421671c3e7d50d229796e93a060da09fed155183762b7039b","sha512":"50cfdac55d3f77ebab8b4e1ed5c6c6589a2d70b73911d43f81e2a8848d57c803297f72a30438e68382526dc2b01b7150c71eae553a323da858577c422472dd0f","ssdeep":"384:3cAGY4VuizRbHLCLJvTHCEdEpsMk93j88vogvFBVrhjNCd+wbfylatmCVwqEa7t1:MrY4VuitgRTHC4EW593j8CHGLUifUyqU","tlshash":"add2142989f9d27e87fa626936b66b04f306834b61105437b5bc87c67f65b8000e5f8f","size":28860,"data":"","first_seen":"2025-12-15T19:26:10.432531Z","last_seen":"2025-12-15T19:26:10.432531Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba71509d3d22075f3a57e7b80b6483c3","sha1":"2f6aebc8c9a0327363dcbce7df6a8b58421ec513","sha256":"29b85d55ea8c1c3858535c5960a658a40a3dac8cde0e1ae619cfaf381de3831c","sha512":"e19f171791f6b3a80b575c63568ade18e4a151dd3ed180a8fa9a288a097a9ada8cd1f6aad9e99f8989cfe4bf3d46dd7089dee11d539413a3037674663f5d2504","ssdeep":"","tlshash":"4651423376290472ca1671ea662f21f57e325684b794f98248ec8401947cde2e5ffaec","size":2697,"data":"","first_seen":"2025-12-15T19:26:10.450878Z","last_seen":"2025-12-15T19:26:10.450878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6e0abea014d179891910db7497f879df","sha1":"3175fe205a9567c72b7603f1d8f902bb0523be59","sha256":"de397733b3d087510368534b27e5e14e334d2535e5ed571ccb7f7cdbecbd58e5","sha512":"5e8d004fc1f9e87d64c21ba71375698a9266e2464564b72f5a72fa8f37cedf835ae4e0ecac542aa2c62da2eb30ecfb036d654032072c57945f635f30baa18b05","ssdeep":"768:KaoUXtYTIxMzLD3N14qGjMqYHF1aDvC14qGjMqYHF1aDvy:KaoIthILD3YqGlXqGly","tlshash":"bdd23a2acc032e1d4720b57664ddc6e6ad3da3ce308100dd753eaac4dbb99466cd1add","size":30577,"data":"","first_seen":"2025-12-15T19:26:10.451757Z","last_seen":"2025-12-15T19:26:10.451757Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T17:45:51.644253Z","times_seen":594231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js","fqdn":"ajax.aspnetcdn.com","domain":"aspnetcdn.com","tld":"com"},"ip":{"addr":"23.36.77.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T17:41:44.090376Z","times_seen":444933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3c34898c00f3da7a3547431c5809898","sha1":"9aed9c283879177c8fb35c032ce1dbfb87c5d35d","sha256":"81bf8744184521a6c0de0225206380f0967e6d54a0e32c12e8569435258a9d27","sha512":"52da25afe65552b0ef8cdf3105fe87826327b5385ed946f106e46e34b6ffc83290f8d20e933ea0ddffcaca76eb800e3aaf827978b7736d759d4892ab3db8e256","ssdeep":"24576:hUmyd6CSTMKh3Jh6x5MiOWDg7j1uXsoUF2tqKGXWSTJlDDy83yn1W:BCuZWc7jMXGiMc1W","tlshash":"9355f22189c86fa9cfec5a1c90fe171d67e04a8a442a758eeb73bd07bfe754402071d9","size":1332165,"data":"","first_seen":"2025-12-15T19:26:10.452858Z","last_seen":"2025-12-15T19:26:10.452858Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/561r2fdy5cs1PBKrYE7G9LzPghulUcGcGw67740","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T17:41:44.090376Z","times_seen":444933,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"83987ec30911f34fe9b69c9089a562d1","sha1":"214d29479954b43ddfc1d4605a3533b990f05f10","sha256":"269d661f153967337848292aac910ad590bc4a361970c3f4623487e4fc886125","sha512":"310fe6fb5c70472af16d734a88b7d2cc4e4ad4e599c5322b125be7c79463a90b5000f732eb2ba26ffbd82dac22729721aebdedf4f43fe938767b477778841aea","ssdeep":"768:ejRqfy3rZ9rjJ5ZM1VwkXKZm5ZAZYcxJRzVvglDZ:eBI8m5WzhVvgld","tlshash":"4953b8c71de0280b13af0bbb3116a5c8f56a14aa7544c86fd25abd1d35a8362f7f35b0","size":63882,"data":"","first_seen":"2025-12-15T19:26:10.45392Z","last_seen":"2025-12-16T19:13:42.047417Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T17:45:51.644253Z","times_seen":594231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e7198de4254396a8e5cc955c3a3975e","sha1":"15feb5e8945179e8852fb0da8bde85e2d2359987","sha256":"5ed5fbf0aa0be847c88186a1d684082fb02eeee735803756d326d124672d7096","sha512":"3f6b2b39660d03225a8b0e42e466c6671e4d0ebbe9792df3d73c97cfb26b9485d1d4a2f5342d26c74dad1a05ff3c0e114943e5f905719fc828a8c1d7bdea7620","ssdeep":"96:j6aDM6/M4ci7M4CDuBYI0eiwECiRhmhSMMbIECiRhmhSMov:j6aDdkpiQfvI0iW1NWW1J","tlshash":"df91108a30168c9321e33418994b6638357782e76e4ec601750c689f2f7571e66bef9f","size":4455,"data":"","first_seen":"2025-12-15T19:26:10.45489Z","last_seen":"2025-12-15T19:26:10.45489Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6917fdd306dabc0dbeb8d4fcdd940e43","sha1":"0c3a6252a9d8889bacd3df5426fb38720464334e","sha256":"4637cd34705758c818fa02240740e5ad77342d9f237acfef981f6a68c0e34ad3","sha512":"a757edf541b0a8fbd537ad7347bf71c34dd50ac74fa590cc2cc8760b32f3748e455c5086e27f9969040b0c319811c876f5b2f1460da8caab06482bac84fec0fe","ssdeep":"","tlshash":"b021309a21ba633907846dc6a0eff29d86785239b344fcd0564c780486cf6b8c96f0f0","size":1180,"data":"","first_seen":"2025-12-15T19:26:10.455836Z","last_seen":"2025-12-15T19:26:10.455836Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"64d133a051b9d1f7391e8a952e5c19ef","sha1":"090f1ced0df0f34192a064aa2ec17fc1562a8c5d","sha256":"012a94bf97fa7785cafc96f8a3933b7d261f02a611b44e615db67400c5dd4910","sha512":"c99f5a52cb052d4122bc0277202e43bc285b7e3b5c918e0a65695e2e4a431aecb4c9e79e5ee2461134431b0a71b9c29df4f4c7cbdd9fab33e47bfb03e6da6a8a","ssdeep":"","tlshash":"c7e07d75b1e0a57041ca742cf2d5cee43f7764c81452d948241c8cb031accc81154d95","size":311,"data":"","first_seen":"2025-09-13T08:19:47.602528Z","last_seen":"2026-04-03T14:38:11.363629Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/list.js/2.3.1/list.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1cdff6a106c934639d63f03f0e781ef","sha1":"085b67a4fb85caff9574aba1e57427645b4f4181","sha256":"34456f18d306a85bece9a7462d98e6e6c2e072e5fdac64e0d70946b40d5feccf","sha512":"f77c18830ac814bf9bf8fdd1bd8c62fd65054575d40d22c24f625093dce15465ee4b69879766b18fa77e47aa4ffa0714e62b0c1d18f5bb4a1813f996cadfd18c","ssdeep":"384:Vse0oG1SOLMTLWyjI4L3PZE8HKT1YWDdW3wn6q4WM0Qtlu/4JJzGijQ9k2d+cfyN:bGbAU4t+f84UF9crVQ6KV","tlshash":"2f92959e7288762147f364794d1f324ab4b62a14b40a94d8d126c9d5ecb8dcf80bbf7c","size":19487,"data":"","first_seen":"2023-03-07T01:35:45Z","last_seen":"2026-04-02T23:11:40.354609Z","times_seen":1582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/rscM1KNg7HQJ77t6FBbBqglEYyVYf0LfC990csC688gfE0vKV0be1MH8HrAymIOFgndps2uQ78lEhswIS503KxzolkBfUX7iFdWu0VrjAayai2zoJYqUNQxwXhhrDXFKp8G8q2QyADZU7dhTop510","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4931a1f00ce50af995a4aac2ddc041e3","sha1":"bfc83ce6ac9e9d54d6f1a6e8ced457cd120bbb14","sha256":"2fbc43c9558fbe6c02837e0552942046e7f25e3feb623db7e544227c3953c69c","sha512":"0dab11edabe8a3478674147a27ac06fceb7d79d86bf4f7ae290ff9e91b52c21ab93bbc8c8417a21b1b8dc19daa02b4789cb93a1ed648380cb4b32b85c9fe5ee7","ssdeep":"3072:eaiBud2K6K7T+oqEZ2dVKMWpa34FmAENwR+g2wJbTGSL:eaPv+oqEDpY9AqgdTFL","tlshash":"08b312b818e95f11e79d3193852d2e207777996cb21846fe4bb568e84f23b8fd042c70","size":115701,"data":"","first_seen":"2025-12-15T19:26:10.411295Z","last_seen":"2025-12-16T19:13:42.003082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b307fe0b66bd752e6f11c9a0bafc46a","sha1":"6e3edf86640c688539d9c0e225668c3de2e204d2","sha256":"02b563005ff616d62b72b900c316536e1ba885c5621c95a8856eacd6f35af2be","sha512":"771e386ae59678625e121cde4d3942993ce5104bfab2ff0375be732870b61dd5688c987f82f2e141b66197230db54b5d4b2e978af78c1e4c6e7f0c75428995ee","ssdeep":"768:S/iqwPTOhTkNeAKlLq86GZYmuT680xR5Au7BTnjZcVqmJZdKS3XcBaV7EXFOIAw5:S6qjTkNPKMIS167xkYTnhghwIIipQ+cb","tlshash":"5453e00199443f78dff86b1492bb5d4e63b2deab0045c48de32b7d8a5b76fd01272684","size":65117,"data":"","first_seen":"2025-12-15T19:26:10.457769Z","last_seen":"2025-12-15T19:26:10.457769Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.6.0/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"80f5b8c6a9eeac15de93e5a112036a06","sha1":"f7174635137d37581b11937fc90e9cb325077bce","sha256":"0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542","sha512":"b976a5f02202439d94c6817d037c813fa1945c6bb93762284d97ff61718c5b833402f372562034663a467fdbaa46990de24cb1e356392340e64d034e4ba1b4e4","ssdeep":"384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2","tlshash":"1423a488f2a1b06187e37165443f110ba27a746964c9c18cf639d9f19eb8ece7123f79","size":45806,"data":"","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-04-03T09:57:49.448884Z","times_seen":39623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-04T17:45:51.644253Z","times_seen":594231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5b36a5fc51ab6cd699e450a4bc9c9762","sha1":"93ec749fd3a9500dfcf862a80124d23308c9bb21","sha256":"e51eb2d246466173875a8e80f7d74743f7e02a446008b43f4bdecde2b41a527b","sha512":"116d7305f8213b7db385d502f520189aa54d48c5228418e07d36a69db585fdde5aa5fc2547a874a00ece73c9e10380ce4d85d68025f9e3f07fcaeba404cfbedc","ssdeep":"1536:jtpxkRxvMHXRqHPoge/BFhdm06FgD8O05wJskZ0+Rc09dl8bBCU6ai10jlAqRE++:agQ5xk6+Rc0nlnlX","tlshash":"b283a4711bdc3ed1dd6ce904fbfa9a2a47496033542bc8ab824e5a4c35194ffe880d67","size":85190,"data":"","first_seen":"2025-12-15T19:26:10.459011Z","last_seen":"2025-12-16T19:13:42.038406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4be67e88201c837cdea9ac6753931dbc","sha1":"52f3f7fb7269b926723bc1118c9cad571a532157","sha256":"2cb3e3c12f5785cda161f86091be623c34e63d248c3b3a2933eb367304cbfed5","sha512":"ba5635ab50e52f26baf23619371b640e631d2213e77595b1af6a6466f9e4f7171f069c3d05f74755e23e155db4a0cd605e60100fe42447bf1be9011e8fc04349","ssdeep":"768:7YsTJd+dGYtDqYXLVH8/g/pAIFF9HmhZ4BxtvsYlYSFoo5ByfHMusoEOTe:7j+kKDqULVc4xAAGhKt3lY8oo6Fst","tlshash":"ac13f181ad1625684d8f46fcc772dbe2939229c8b370879521970772bccfe68d32578e","size":42186,"data":"","first_seen":"2025-12-15T19:26:10.460321Z","last_seen":"2025-12-15T19:26:10.460321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"6a6fdf72274ae26133c03461c3fbf874","sha1":"f37a4b871e2ca5f81da7e7b2bfa107edb4ef98d7","sha256":"492576b17397773c3941500bb627d076d99cfa433ad226995361ee75da4222b8","sha512":"79bd606e6a86d1d40bbdcd24910ac0c0b984ca7804a8ac8685150f1b676a608cd005a2acc4ed1a1b76fb2979673791dc65c289e8e0e6758e1fba6a065a5e6061","ssdeep":"768:k9NUIYsTJd+dGYtDqYXLVH8/g/pAIFF9HmhZ4BxtvsYlYSFoo5ByfHMusoEOTH:mUIj+kKDqULVc4xAAGhKt3lY8oo6FsK","tlshash":"c423d150ad05200c894bd1f5cbe2cb5d03389684f2735fae63961567fcceaa8932678e","size":48717,"data":"","first_seen":"2025-12-15T19:26:10.387772Z","last_seen":"2025-12-15T19:26:10.387772Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3c9b2e396c274c938d7b3509d94b78d8","sha1":"c1873c9398233b3e6d821394647392c580d05125","sha256":"dbe8369e01ea094d786cb30a7ca14f6560b070a1ef13d50180ceba059ec2abe0","sha512":"7388fceefe2ae81c5431cc79dcde4ca66738bb2352bdbfa6b5c00cf1b617de91378520383f9a6d9cb500a9acfcbf0369f257088a4f8800c47cbce776d7115b55","ssdeep":"96:uBT17pL2Ft7pSN2Ft7pgJ/owo+IhEsckMe3ZEsckMeC:uBTrbNRKwP","tlshash":"17a1f08a3409499212f23a64d9536638f83742f76e49c101750c689f2f7570ea6bafdf","size":4673,"data":"","first_seen":"2025-12-15T19:26:10.461503Z","last_seen":"2025-12-15T19:26:10.461503Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4afa4456a9e45a86e82fa476319550bd","sha1":"623e5ea4b63139508a401b67f76736d85d4623bd","sha256":"20beffadc4a8c45882dd545f348a43c28f7e48e832767ca80a448e27b84307bd","sha512":"1ed2d7d309e6febc3be8bc59775c535ab8c437d0a4ba543cd85cc5cb37859faf72942c0f748cebf6358ed8fb69be774f58b0935c92182ed3c77b2a9bf2af6342","ssdeep":"24576:AlqDu2NNmJcPW+B1v/VkDE4XBMej30138yQP7C:aLcB1vaDE0BZwxG+","tlshash":"f02523809ef6745e3fe84f0ce4efa75b67b48f74808564d75b82548362d6f0aa633209","size":999002,"data":"","first_seen":"2025-12-15T19:26:10.408433Z","last_seen":"2025-12-15T19:26:10.408433Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4e809541adc9adeeb71dc305e9279d70","sha1":"93eebdaac671271e456ff5f590c12dabe34ce232","sha256":"8f8d76655230f9c4d5335652ee68b0ec6974a2ce2e5f31671a22c2d0d53380d3","sha512":"0642fc4690f8086078129c6b73439807209d7a9a8b1f517e982dfa698b0bb04abeee4ef13bc9d016d6d9a7f1acae985fa750bd85ea6656e6fd8b678a978bbc49","ssdeep":"6144:pXHmxMEPYNsrSQYbmz8a8kA07mjfAeU67r2nvoE1+5lfVIVHn/GvSmyfTct5A1U2:pWxQ08Z07OtU1nqvVYswYfQpA9n4MCB","tlshash":"31c4e171348bbc3b014b46e691b5172f7dda854bcd46629a53fcc3ec1ec6c908e6a938","size":559602,"data":"","first_seen":"2025-12-15T19:26:10.46267Z","last_seen":"2025-12-15T19:26:10.46267Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:51.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"POST /0McFNjD!wR2CzxRsYSwDkgb/ HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nContent-Type: multipart/form-data; boundary=---------------------------16606375026632699833031951222\r\nContent-Length: 62\r\nOrigin: https://midi.traipeapu.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVxZzVEMW9iaTAybTltN0R0QU1tb2c9PSIsInZhbHVlIjoiZDNhbFdtK29HdmdNRzlRWG5rSzBWckVJWldsMEU1UEZEU01ZTGNxOXlsYTR2V0ZLTnJEbzlPemVCUnlwWGNiMWJXN3pvTENDMlJhaDdqcXBrRXNuSnV2dklDdFJyL1BmOEJYOCt3bHlseFIxZjEyV0d1S1ZiK3RDUWVKZkRPYWYiLCJtYWMiOiIzOTdhZmEzNTljNGY2Y2U0ZjAxZDdmNGU5ODg3N2NlNTlmMTMxZGY2ZGJiYmI2NGNmODcxNzg5YzAwODk0ZTdhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikt3bzNNT1h6dEdIMTdiYmFUU2xlNXc9PSIsInZhbHVlIjoiK09MWldKbGlrVUt3V3ZVK05mSnhrS2dURGxPMEYvZFFaVDl3TGUyd0xBdDJqdlJlbG11dndCZnhNTHBOL1dUQUN2ci93L0JXTmxvSVpoNFhBYkdoOWc1ZXJOOVZiOVc2WkpINUNtTThDWW1KTGZycnNLcTA5UVFmUGdiZmk3UmciLCJtYWMiOiJmMjEwOTNjY2I4NWQ4ZmZlNTA1NmMxZGMyM2Q0NTg1Zjk0MzJiMTk3MmNjYTc0Y2EzYzliNTU5MTQzOWZiOWVjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":62,"data":"-----------------------------16606375026632699833031951222--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:51 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mpk97D%2BXCFmEKpmizvwzrk%2ByJvqlQOqdHL8RwWs3vb6X3G26z9EmgQV3h2SOw7X0xGw22VsgQDUoRnpTGYYO9jzsKsbw2R9\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InVzdmtkSHRlU0M4MnpJb3REaEJMQmc9PSIsInZhbHVlIjoiQTRHUDEwajRFRW9aSTZYNTgzdUZIS0NQaTJmcmFxRUFOUmFnSkthemhoQVdMdU01SlpMbEV2ZmFlU1lQbnBwRC93T3JsMm02dDRxdHJJTFhnT1NSdjR5ZVV4aVo1RTJnMXFQc2xjayt1MHJNYlFYUTBEOWF0ajNwdTg2ckNSNCsiLCJtYWMiOiJjNDlmMWE2OTdlOTVlNWVlOGFkMDZiNTUzNWQ4ZjI0ZWRjZmM4OTk5NmYzNTg4NjZjOTEyMTRkOGVlN2U4YTIzIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:51 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6InlCNk9pbVdpYWNYRG9sd3FCRms1bXc9PSIsInZhbHVlIjoiQlJwN1R6bXVPa1oxYTliaXpSc1UwWFdRQVR5STYwV0JkRGtnejR2UnQ4TUlnNnJkTU1maFNLb2ZFbnRYVWNqMXRJWmdpbTZkWWRFRmhXOENLOE5tWlkrdjRuLzByeWRkZEI4WklkcmRjWENyMVV4R0JEajh2NTkxZnI1MVhtaXAiLCJtYWMiOiI3ZWE3ODZmNGZiYzg5ZjBjNmUzZWIxMjZlNTVkMzZlZmVhOTBjMWUzOTRjMjlmZmQwZDE0YzdmZDQ1OTA5Y2YzIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:51 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae8544d7fac56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48717,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (48717), with no line terminators","md5":"6a6fdf72274ae26133c03461c3fbf874","sha1":"f37a4b871e2ca5f81da7e7b2bfa107edb4ef98d7","sha256":"492576b17397773c3941500bb627d076d99cfa433ad226995361ee75da4222b8","sha512":"79bd606e6a86d1d40bbdcd24910ac0c0b984ca7804a8ac8685150f1b676a608cd005a2acc4ed1a1b76fb2979673791dc65c289e8e0e6758e1fba6a065a5e6061","ssdeep":"768:k9NUIYsTJd+dGYtDqYXLVH8/g/pAIFF9HmhZ4BxtvsYlYSFoo5ByfHMusoEOTH:mUIj+kKDqULVc4xAAGhKt3lY8oo6FsK","tlshash":"c423d150ad05200c894bd1f5cbe2cb5d03389684f2735fae63961567fcceaa8932678e","first_seen":"2025-12-15T19:26:10.387772Z","last_seen":"2025-12-15T19:26:10.387772Z","times_seen":1,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":264,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/GDSherpa-bold.woff","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /GDSherpa-bold.woff HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"GDSherpa-bold.woff\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:25:55 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLNHI%2B9XOwHdCAux2Lqtx2yGSvU0D3eppl9u01rIY%2BXGtfr%2FLXLqKikyOZ4rNUxCaW4tjyIB7gjtzkHd2DV1UadIoVqrtz%2BW12g%3D\"}]}\r\ncontent-length: 35970\r\ncf-ray: 9ae85460585256bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35970,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 35970, version 1.0","md5":"496b7bbde91c7dc7cf9bbabbb3921da8","sha1":"2bd3c406a715ab52dad84c803c55bf4a6e66a924","sha256":"ae40a04f95df12b0c364f26ab691dc0c391d394a28bcdb4aeacfaca325d0a798","sha512":"e02b40fea8f77292b379d7d792d9142b32dfcb887655a2d1781441227dd968589bfc5c00691b92e824f7edb47d11eba325ade67ad08a4af31a3b0ddf4bb8b967","ssdeep":"768:GJiLCleIZlcBvahjeheOQKskmCp9sE9gBkGgvU+7aAXDqWOtU:GJo9IgMKsQzJ9gBkZbuAXDqWV","tlshash":"a4f2d09831594c2aacbd58232b71d9df21e38f61ba42029ba193e4cd9c4714dbb1e47f","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-04-03T14:38:11.334972Z","times_seen":90449,"resource_available":false,"data":null}},"time_used":656,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":523,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/apX9BDdjL5tKQZ3wa9RJI0LUnNdPR2Tqt8s1ztycAZiURVyaI0kQiQEf1el","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"POST /apX9BDdjL5tKQZ3wa9RJI0LUnNdPR2Tqt8s1ztycAZiURVyaI0kQiQEf1el HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 768\r\nOrigin: https://midi.traipeapu.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":768,"data":"MDEwMTEwMDEgMDEwMDExMDAgMDExMTAwMTAgMDExMDAxMDAgMDEwMTEwMDEgMDEwMDExMDAgMDExMTEwMDEgMDEwMDAwMDEgMDEwMDExMDEgMDExMDAwMDEgMDExMDExMTAgMDExMDAxMDEgMDEwMDEwMTEgMDEwMDEwMDEgMDExMDExMDAgMDEwMTEwMDEgMDExMTAwMDEgMDEwMTAwMTAgMDExMTAxMDAgMDAxMTAxMDEgMDExMDAxMTEgMDEwMTAxMTEgMDEwMDAwMTAgMDExMDExMTAgMDExMTAxMTAgMDExMDExMDEgMDAxMTAxMDEgMDAxMTAxMDAgMDAxMTAwMTAgMDEwMTAwMDEgMDEwMTAxMDAgMDEwMTAwMTEgMDEwMDAwMTAgMDEwMDEwMDEgMDExMDAwMDEgMDEwMTAwMTAgMDEwMDExMDAgMDAxMTEwMDAgMDAxMTAwMTEgMDExMDEwMTAgMDExMDEwMTEgMDEwMTAwMDEgMDExMDExMTEgMDExMDAwMDEgMDEwMTAxMDEgMDEwMTEwMDEgMDExMTAwMTAgMDEwMTAxMTAgMDAxMDExMTEgMDExMDExMTAgMDExMDAxMDAgMDExMTEwMTAgMDEwMDExMDAgMDEwMDEwMTEgMDExMTEwMDAgMDEwMTAxMDAgMDExMTAwMDEgMDAxMTAxMDEgMDExMDAwMTAgMDAxMDEwMTEgMDAxMTAxMTEgMDExMTEwMTAgMDEwMDExMTEgMDExMTAwMTE="}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUqjyVgaDb6QpcOGBYzkYjIHJspv0ohPSLXd9q%2Fwg5hWxHGs5m5cbXQv90YLNbBm%2FRTfnF%2BASzuA8cHqEifOcykKLpG5b9sx\"}]}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik0waHV3dmhLanhrSmZuUXZnOWJFZ2c9PSIsInZhbHVlIjoiT1lEWEZDeDZJa2ZlbGFKd3lLT2M5TkltdFplNlZpa291Y2s0dzViQk5GSzhROWIzQUs4cWNEeGZHWHVxM3AzUEpSVnJaOFBZanhxbVNDbHlvTzlSaFhqZUZJSUNGclI2TWFKaGFkZmorKzJVN3MrbjZQKzhsQzlDUnpIMzlER3IiLCJtYWMiOiJhNmJhOGJiYzU5N2M0ZTBiMzI0YjVjZjg2ZDdlZTMyNmQ4OTEwNWM1ZmU4Y2JhNGIzMDhlNDViNTVkZDk3N2EzIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:55 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImFoTXZ4dVAwVmlxdHc2NGNuQTRIYVE9PSIsInZhbHVlIjoiN29iZGczenhuWG1NMG9Ta2ViSjBIMjZrY2I4TEpqK09wd1RSeTd6WEdZNEpydXAyRUFBUjB2dmdDTUJMeXBDTDRmS1F1U0xHWmlBMzJDSysyVU8zTWhtMU9CR1pUSkh3SXI2SW45bHQ5NjhaUm9ZaS9xaVA1YVVDMDBzUzU5bWoiLCJtYWMiOiJhOGQ0NGRmZTZjYzI4Nzc2OGRiY2I1MDM0MzZkMTY5NzJjNzBiYzVkY2Y0NzRkM2ExYmJlNDJiN2M0N2NlZDA5IiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:55 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nvary: accept-encoding\r\ncf-ray: 9ae85462486d56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15077,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"09f58f31caf79398417c9162a56014b1","sha1":"9bc125420060ba951e1714db07db55f3ac5fb882","sha256":"4d4dcb434cba44d32d6a5fe95d7f8bab66cf8b591b9245bfa2b410e3cd956a64","sha512":"243a9fdae40e1fa02972c20ca3c448f06914c64dc2d5b0ede49aa321533fb302c2554df0555a68845484412d6c2cb5ca11ce19ad89e07700a46d35f04620efbf","ssdeep":"384:8oTJ76KchKxxGoCQxFBf4xfnYXRqIVppP1qnlO6bjGVIhtP5dMSZVDRKWkDrwhLD:TJOhhKxUHQxFBf4xfnsR7ppP1qnlO6b5","tlshash":"a662e9464e422de1a7f09f01f1eda9da441c53cf29904c5ecb7dbfcf90296946ac05ad","first_seen":"2025-11-06T11:58:11.469282Z","last_seen":"2026-01-21T12:50:53.920464Z","times_seen":58,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"static.vecteezy.com/system/resources/thumbnails/050/393/628/small/cute-curious-gray-and-white-kitten-in-a-long-shot-photo.jpg","fqdn":"static.vecteezy.com","domain":"vecteezy.com","tld":"com"},"ip":{"addr":"104.18.35.32","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:40.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vecteezy.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Nov 2025 01:09:55 GMT","end":"Wed, 18 Feb 2026 02:09:54 GMT"},"fingerprint":{"sha1":"F0:70:76:0B:5A:A0:A6:B2:7D:EC:8A:91:F5:1A:16:D6:13:71:D9:E6","sha256":"09:CC:F2:3C:84:5A:67:A5:CB:D4:14:A8:BA:9A:65:2D:DF:59:8A:C8:E8:98:4F:AD:D7:1E:63:ED:DC:8D:F0:8F"}}},"request":{"raw":"GET /system/resources/thumbnails/050/393/628/small/cute-curious-gray-and-white-kitten-in-a-long-shot-photo.jpg HTTP/1.1\r\nHost: static.vecteezy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16352\r\nserver: cloudflare\r\ncf-ray: 9ae8540a1af556c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 648\r\ncache-control: public, max-age=31536000\r\netag: \"aab0aff1ddab82ef12b0e4e6c52c0446\"\r\nexpires: Tue, 15 Dec 2026 19:25:40 GMT\r\nlast-modified: Tue, 07 Oct 2025 20:56:51 GMT\r\nstrict-transport-security: max-age=15552000; preload\r\nvia: 1.1 d0b1b17498c1678f6186279daddd31d2.cloudfront.net (CloudFront)\r\ncf-bgj: imgq:100,h2pri\r\ncf-placement: remote-IAD\r\ncf-polished: origSize=20520\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-action: rw\r\nx-amz-cf-id: BufIgVt-BcHCvjr4SulZ-tL5A5z4bxyxbtuLN7UZlJp-v6-BobotDA==\r\nx-amz-cf-pop: IAD61-P10\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: qR4F50SvQaAZvoY5JNvOOJBlfD0zepMb\r\nx-cache: Miss from cloudfront\r\nset-cookie: __cf_bm=.Bris9cNiX74w2xWePVUrC9nvXrWXLSzcUnVK3_uD.o-1765826740-1.0.1.1-LqFB72pkYzh3kOcQxOl9ypGH3PTppAu977RQiGRTASiOwD.E4IMitk0kjaJW6V0r6uVsc5A5SmNvRhsVT6BsbumZlAwgxXqApFb93NWRAxw; path=/; expires=Mon, 15-Dec-25 19:55:40 GMT; domain=.vecteezy.com; HttpOnly; Secure; SameSite=None\n_cfuvid=TAY6NKSnDWCvXULeetRBLPEC.2WY1R.j20IqZGSLqMc-1765826740971-0.0.1.1-604800000; path=/; domain=.vecteezy.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":16352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 700x350, components 3","md5":"9261c74358e944294ea7fd2da0f31c95","sha1":"03f2b9232624f3468ba0b50da35e3cf210e0f408","sha256":"51b7ca43c83f84c6a02d4d95c7c3a750aa4eb3f0d7eeb3757f3374528a8e478e","sha512":"0c27516e44105c3a1f270edc5cc9ba1f990e69936760453930223d8298d85fbb91db9850f19d6f7bd56d30fd744aef51f680985a94a06225d5e99f935cd77c1b","ssdeep":"384:y7XGW3QwhaFc5Bs4gTcaKOeBLmb+XrT4dt8tyXDuuVZHyme3iK:aX9qct2uPIdyGZHyme3v","tlshash":"7672c0c5d8376d93d71f28f48950f28964e09e3465c8783b118a356c1a24efcded6c7a","first_seen":"2025-12-14T03:43:46.998307Z","last_seen":"2025-12-17T22:01:56.675443Z","times_seen":46,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":162,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"image.petmd.com/files/styles/863x625/public/2024-09/how-to-keep-dogs-off-couch.jpg","fqdn":"image.petmd.com","domain":"petmd.com","tld":"com"},"ip":{"addr":"23.36.77.201","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:40.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.petmd.com","organization":"Chewy, Inc."},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 18 May 2025 00:00:00 GMT","end":"Tue, 19 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:D4:99:06:80:41:58:E7:EA:0E:DC:69:94:2F:42:E9:D9:68:EB:4D","sha256":"CD:58:BB:A6:29:82:D6:3B:3C:07:02:95:D0:1A:41:B2:E2:C7:3D:2A:42:D2:E4:A5:C0:58:16:48:F1:CE:39:C4"}}},"request":{"raw":"GET /files/styles/863x625/public/2024-09/how-to-keep-dogs-off-couch.jpg HTTP/1.1\r\nHost: image.petmd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"974498de69ee1b21a315e9a6f2f1ff84\"\r\nlast-modified: Sat, 13 Dec 2025 16:37:25 GMT\r\nserver: Akamai Image Manager\r\ncontent-length: 45386\r\ncontent-type: image/avif\r\ncache-control: private, no-transform, max-age=43200\r\nexpires: Tue, 16 Dec 2025 07:25:40 GMT\r\ndate: Mon, 15 Dec 2025 19:25:40 GMT\r\nset-cookie: akaalb_petmd_image_prd_ALB=1765826800~op=~rv=51~m=~os=~id=398f070dc62d6b1b9f2a71684be0c983; path=/; HttpOnly; Secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":45386,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"86594c141035601a56fe08eb79902b9c","sha1":"8bc9b971a0f298660391dbbd56962eabcafdc939","sha256":"2d1a35205ee1cfadc996e2d5dc466fa25fb116a38642ea491f896f0c2d1b338b","sha512":"0e759b28e6dfe72953d63d7f0c891a74998c91b0030b0cb2a9e0ad21924c0cecb1ac507345ca8075381f48f79a5405c319de2f66e96f9c5f74f762d8a1ec3d2e","ssdeep":"768:hCoGoxHLCGfSKpnZaflrCPJjeYTcJXmTcU1yAmoI8917B28AqiJlspV8XoAiZAV5:hoCuqLArCRoicU1Xwu1748tirXoAfGUl","tlshash":"1613f1e487ec941bbb3a7620569f03cec30641ee7c4e8d8ef94e7482c5116999cf5ac9","first_seen":"2025-12-14T03:43:47.003074Z","last_seen":"2025-12-17T22:01:56.674302Z","times_seen":46,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":66,"dns":33,"connect":1,"send":0,"wait":42,"receive":2,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/faZ3ANbwbW7c0zF7yZtrRdbuBnibsGY7Glw","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:51.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"POST /faZ3ANbwbW7c0zF7yZtrRdbuBnibsGY7Glw HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nContent-Type: multipart/form-data; boundary=---------------------------31808899812057380801182512371\r\nContent-Length: 324\r\nOrigin: https://midi.traipeapu.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6ImxXZ0J4MUNuUVlNSHhjNEd3R0ZLOXc9PSIsInZhbHVlIjoia1lsTGdjMEhrWWNRY0lrWXRsQk1QUHJyVHdjSU5md2tseWdSSU9oUlU4WHFrZXpsY0lXQ2FNN050RlNNVks0T1VacWVBMlhRZGVlejRrNlpIaFA3TnFCYW83T3pPWWR0amJwaGtFUTZjL0JWVHY2MzEyQ3piQmRTUGpTcEtERU4iLCJtYWMiOiI1MTUwYWI5ZmQ2YTZjZDFmZjY3MTExNGEzYzE3MzZlZjk1ZDJjN2MyODkxY2UyZWZmZjc5ZGQwYjY0NTZjZDgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhCcEVFaStEWWFVWE8xUDlLcFlZNGc9PSIsInZhbHVlIjoicXBFelltQksxWklkOVk0SW9BS0RFUkdvZ3pNS3Z4V0hFdFFOTkwzLzFWSjVUS1VuOHd2dGJJM0cvMUJ3d3ZmMnQ5ZUxwczZPWGp6cXRvSEtLTStJZzd2ME1lbFg0OUt6YnROZTk0V2xhTnhaWE1udXN0RWdWcmJ1TkEwNEhjdmwiLCJtYWMiOiJmMmZmYWIyNzJkNmZhMjNlYWUxM2I5NGYyM2M1OWMzZWEwYTgxYzIxNjIxMzIzMWE4ZDU4MDc2MjMzZDIyYmVjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":324,"data":"-----------------------------31808899812057380801182512371\r\nContent-Disposition: form-data; name=\"bltpg\"\r\n\r\neBGv\r\n-----------------------------31808899812057380801182512371\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\n08qlkNF2Ue9BDY5hYWxVZXvv8xy1vXqHpXGBHO5b\r\n-----------------------------31808899812057380801182512371--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:51 GMT\r\nserver: cloudflare\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jm6bkYvo5un3qKgqcGOWqXQXPuhUIbOEFbuzouIbdzMAhk0KyupC%2Bof2bCg%2FGNrp%2BXIF2fmTe%2B%2F37UDFaRAITQoGaAg6Cq1u\"}]}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InR3RXh3TUlGZEh2OWgwMVRXdm8wUFE9PSIsInZhbHVlIjoiR1JQSWhGQ1dnU2Y3ZytHbnFyTVVXQmZQdDMwUHdoWXF4MyszeVdTdGRqSU1sY1Nmd2JYY3FJT21TaWVKVHNnbnNnN2QzdTlyVHpKY3E1aHJEVFh5N0xLZDVwTldTREd4anR5cWR1QnIvUzFLMWlNeW9sZVNGZEt6YU5zWnlkVVEiLCJtYWMiOiJmNTRjZTMwMzQwMzE1Yzg0NWVmZmYyOWUwNWI3NGM1M2IyZWE0M2Q3NzBiMTc1OGQ4NjRmMzk5YTYzYjUyZjJlIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:51 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IllkeEtreThnanhjVWpzQ2c3REFVcWc9PSIsInZhbHVlIjoiWUptZ0xLU0RBdGttQkVXU1laMXc5Q3ZkYThmQVYxWXdKWWhCZVhXbFIrcjJMNGN1UGxUQ05BRFU5cVA3dUpJRW15dCtENUNVWk5vcUlOaHh1L2ZQaEVnZmlneDR3YWRZL200WEZyakV2QXJLUTZxQUY0R3U4Yjd4cHUvU3R2M3ciLCJtYWMiOiJlODU3ZjdjMmE2OTA2NTU5MjRkZGI2OTNhZWQ5ZDZkMzVhMDYxZmUxNzE5ZjVhZWM0NTQyMDQwNjU1ODU0MDdhIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:51 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nvary: accept-encoding\r\ncf-ray: 9ae8544a9f8156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5820854f62a6eb3d38ba7ba0d1b3ea75","sha1":"639df0b84fe699b4a290a713fd6b9a94bd4deb95","sha256":"912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d","sha512":"4452c0a26fa81357f95bf6160c3f5d35ff39f62e03d5faa1e69eb9dfdcb2c83eda4235463ee4065dceb534cc497891a05535467337ad84693e5fa48c317dbbbb","ssdeep":"","tlshash":"f67000020000208008803c0000000a203ae00aa0822a00c0802c00288e08088f08a000","first_seen":"2023-03-13T15:21:35Z","last_seen":"2026-04-04T17:38:09.752684Z","times_seen":88381,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/favicon.ico","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:52.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6InViMmlCamVFS0RySE53NklDNkxUY0E9PSIsInZhbHVlIjoiZDY5dWVabnNKTGE5c05IWnF2UzRBMGRRZmFXcmVvQU1YNWxSYThvSk5aend5Y2pVWkgxc0I4ZG5nNUVWNEVud2wvQmhRMjk1K3orcVZ5eTZ5TTYxZXBDYVdQTXJiTVZLU0xyVXNlNHhJMnh0M0JubElTdUZPWDhFYUtTU2RkeFMiLCJtYWMiOiIwMmFhM2IwOWJiYzYyMjQ0M2Q2ODJjN2I5MDI2MDk3MThiZWYzMWI2YTgxMjg4NDRhOGE4MmFjNDNiMzE1YWI4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRYcWxCVW81aHo2TjEwWThKbVBZSlE9PSIsInZhbHVlIjoiQkhnelEvcUZzWDI1aTdVc2haREN2aUwzRHpnVnpCTEpKWDZhcVRxZG9BRjBxYk5tcEExempOUDZiWmFONzdzQWF5emdkMWg4aTh6YnF3NVpPbTBXak5SNHhNNmpVbDZXaDNPakpCZkowZ0V3cXZqdXJJZFhnSi9vb3Vmc2F4ZjIiLCJtYWMiOiIyYWFiOWFjY2Q4ZTgyY2VmM2E1ZjU4ZDVkMjM0M2VjMjZkNDI5ZTZhYzhhYmZmMThkN2I2NDAxM2E0ODdhZmJmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:52 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iprs5bpGA8ZHkvHzhvCdzXX%2B6zIn7xrsmH%2FGhAS0XjWmMrYhOkjNJBUOMbgTAuxiYiiQyggNR727YTIxIPF688z%2BcTAE7HdaMes%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im9NUnV1VW5oRTJYU0NKeDRNWGs3Mnc9PSIsInZhbHVlIjoiUURUZ3FiRjBCanFtZDBRaUtoZW9VWmREeUpFTXNLck90Tkt0UHFwWmJIK002V0RJa3hWWncyQ3dhV0xseE5QNE9MZUZLQ3hGL0JnODFYa0xUcndhUVNWQ2dMSVM1MWdmeElQbFcvNnFzTXpaWWh6am8xV1hXVEtCWGFZYmhWeHYiLCJtYWMiOiJkMWI4ODIxZjNkNjUzZmM3NmMxYWE1N2E2MTkzYTg2YzcyYmI1YzgwNDFkOWMwMGU0MWVlZWQyMzkzMTQzMTBmIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:52 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjQyUVJuOFZ4dnNycVJIcGJZOSs3TEE9PSIsInZhbHVlIjoic29UVlFKRW9iOHNKVTRJUmFRR3RrNGJQN2dRR0hIUWpuUzZaVHZVUHFVS1Q0QTRTY1ZoLzRuUEpsTzdlVWVQWWRKb3hEbTdoN3VESUFVWExZZE5PbjdxUytoZ3Q0UUZvMVlCazJSZW92UjllOEJ1M0Roc2FIRjN3aVdQYnhqY0oiLCJtYWMiOiJlN2MyMTNlODc1Y2Y3MDlkMzM2ODZiODA1NjA3NTBiNmI5MjYzYTc2NTRlZDNlN2ZkY2RhYjQxMDE4ODIwODFmIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:52 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae854546fef56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10423,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387)","md5":"58a2067b843dc9dc4c3a0640e2bf4efc","sha1":"4c39aa8399a7a6667f87850e66e01912e6a2ae63","sha256":"57e10a4e3a99bbe2c4b6679f89452e7e1da6aa875aa5c7ecfce502b8012a9eca","sha512":"c0a7abb8bd29d86b0392e06821825fc2e6ddc8700f97ff8ffe29f0593b5d13b4e41cfee07ad4220867f5721f9bd8d2e38af8e17ebda27b205f11eb3cc12d4bd8","ssdeep":"192:fvNpgEthwoOIkfCjSuv5bkunaP3wV6xLbKXhsz23bSeH2Q4Uvdd5+JwnU:X7SRfyXKFoPRsaLvHV5+JwnU","tlshash":"0f22b4321060b0372963a5c6faa1234fb5f1e517dd270a54bafd52988fcbec1ce9b505","first_seen":"2025-10-31T22:38:13.409821Z","last_seen":"2026-02-17T03:30:40.122356Z","times_seen":4519,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/wx04NHKAKP0W2rnY2l0ZXKDnJ6qsGqEdd9vWmIox2ujv8z77Jvhx9WimHTestu8wPh0WuFwTUPHZQQm04T8taI5Q7K45J5TJYnhIM7pbjp8ZfSWXJ4NfDij504","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /wx04NHKAKP0W2rnY2l0ZXKDnJ6qsGqEdd9vWmIox2ujv8z77Jvhx9WimHTestu8wPh0WuFwTUPHZQQm04T8taI5Q7K45J5TJYnhIM7pbjp8ZfSWXJ4NfDij504 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: text/css;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"wx04NHKAKP0W2rnY2l0ZXKDnJ6qsGqEdd9vWmIox2ujv8z77Jvhx9WimHTestu8wPh0WuFwTUPHZQQm04T8taI5Q7K45J5TJYnhIM7pbjp8ZfSWXJ4NfDij504\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfrM9xNAOmf7YvibtOShzfw9No8EN6%2FPQxpbtc5RUr%2B%2BnBCvLFIdpj6qVILX9q0oRaa2EnOYNEY5zl7DZMVw4y2cqobh86Ca\"}]}\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ae85460685a56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49137,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"c0f779b7da6fe3130d9c47345672fd33","sha1":"6636bee4807ebcc77fc447c7caa8706509d9d169","sha256":"6d065222ff0aa8827bf2d70ae23906064605e0b0d30a5981c01f304fdfc37313","sha512":"1bfbeea1a3726adc9865a2d48dc45866c9cfc45961be315d3ef3449a41e5e8fbab00887d21c93087c7fba8a4260b85d04b40016c4c36de0bee1982281b67b81d","ssdeep":"384:xIoxL6Ck01qdmt/cNmmNVKRDpMp6ngQOSf3fmcByZpXvrvvvh+LMk8bjmt2cgH4r:CPg5WJwEa","tlshash":"fb239795ae0010486237cbf6a7e1830cdabd50939f021b79b6e865954ff618c47b3eed","first_seen":"2025-01-30T07:30:54.818826Z","last_seen":"2026-04-01T17:01:54.070765Z","times_seen":1293,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":505,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/Roboto-Medium.woff2","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:55.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /Roboto-Medium.woff2 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik0waHV3dmhLanhrSmZuUXZnOWJFZ2c9PSIsInZhbHVlIjoiT1lEWEZDeDZJa2ZlbGFKd3lLT2M5TkltdFplNlZpa291Y2s0dzViQk5GSzhROWIzQUs4cWNEeGZHWHVxM3AzUEpSVnJaOFBZanhxbVNDbHlvTzlSaFhqZUZJSUNGclI2TWFKaGFkZmorKzJVN3MrbjZQKzhsQzlDUnpIMzlER3IiLCJtYWMiOiJhNmJhOGJiYzU5N2M0ZTBiMzI0YjVjZjg2ZDdlZTMyNmQ4OTEwNWM1ZmU4Y2JhNGIzMDhlNDViNTVkZDk3N2EzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFoTXZ4dVAwVmlxdHc2NGNuQTRIYVE9PSIsInZhbHVlIjoiN29iZGczenhuWG1NMG9Ta2ViSjBIMjZrY2I4TEpqK09wd1RSeTd6WEdZNEpydXAyRUFBUjB2dmdDTUJMeXBDTDRmS1F1U0xHWmlBMzJDSysyVU8zTWhtMU9CR1pUSkh3SXI2SW45bHQ5NjhaUm9ZaS9xaVA1YVVDMDBzUzU5bWoiLCJtYWMiOiJhOGQ0NGRmZTZjYzI4Nzc2OGRiY2I1MDM0MzZkMTY5NzJjNzBiYzVkY2Y0NzRkM2ExYmJlNDJiN2M0N2NlZDA5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:56 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"Roboto-Medium.woff2\"\r\nage: 98\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:24:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BSqaJrEg%2BMejK%2FLSoLnEf%2B%2F1VZRKgIR2pTE6IR3l%2FwZeibP7F7ZromJNapoAGtu3yCcBbzB%2B7UnqjQWb2pyCCu8QFccj6mFhcOc%3D\"}]}\r\ncontent-length: 66792\r\ncf-ray: 9ae85464088156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 66792, version 1.0","md5":"50d01d3e6c994995bcaf829e63d53d1a","sha1":"c78884cb32e7b020971ffae746fe21d90502bcae","sha256":"998b049e731114e2fa35d65f23fc6e6e153249a4ef328912e3c7c49546e2d207","sha512":"9b8b97f7778e8a740de8be26d889fa93bf5984dc1e1dbc61bbe699f143186807da985e76f5352b9b13cd92b5c88aeeb344078e13f9e4b811ecc12f6ad5665c6f","ssdeep":"1536:Gx386A9UYEHdhGr1WuXc/ce3NV5rFE/2xEpmpFq8NVjd0yiPFsiQCqCaYl2G:GZ86qg4N947E2xIGZVpTEsOq/oz","tlshash":"2563023cf5c929a4c6d3215efe11f625b4d80af581518f0cdda90b096f7eec58b99413","first_seen":"2023-04-07T14:33:54Z","last_seen":"2026-04-04T17:22:09.267713Z","times_seen":3039,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1216,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/GoogleSans-Medium.woff2","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:55.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /GoogleSans-Medium.woff2 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik0waHV3dmhLanhrSmZuUXZnOWJFZ2c9PSIsInZhbHVlIjoiT1lEWEZDeDZJa2ZlbGFKd3lLT2M5TkltdFplNlZpa291Y2s0dzViQk5GSzhROWIzQUs4cWNEeGZHWHVxM3AzUEpSVnJaOFBZanhxbVNDbHlvTzlSaFhqZUZJSUNGclI2TWFKaGFkZmorKzJVN3MrbjZQKzhsQzlDUnpIMzlER3IiLCJtYWMiOiJhNmJhOGJiYzU5N2M0ZTBiMzI0YjVjZjg2ZDdlZTMyNmQ4OTEwNWM1ZmU4Y2JhNGIzMDhlNDViNTVkZDk3N2EzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFoTXZ4dVAwVmlxdHc2NGNuQTRIYVE9PSIsInZhbHVlIjoiN29iZGczenhuWG1NMG9Ta2ViSjBIMjZrY2I4TEpqK09wd1RSeTd6WEdZNEpydXAyRUFBUjB2dmdDTUJMeXBDTDRmS1F1U0xHWmlBMzJDSysyVU8zTWhtMU9CR1pUSkh3SXI2SW45bHQ5NjhaUm9ZaS9xaVA1YVVDMDBzUzU5bWoiLCJtYWMiOiJhOGQ0NGRmZTZjYzI4Nzc2OGRiY2I1MDM0MzZkMTY5NzJjNzBiYzVkY2Y0NzRkM2ExYmJlNDJiN2M0N2NlZDA5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:56 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"GoogleSans-Medium.woff2\"\r\nage: 98\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:24:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cVHQapvmVEyUBRfgXMf0OSJDHKqjuLucA9adirrWmqP8H6uVoL81fVNVD1MPUT6Gj51KOFb9Y6OnxU03oHy9MpiIJdm0Brdtokc%3D\"}]}\r\ncontent-length: 46764\r\ncf-ray: 9ae85464088256bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46764,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46764, version 1.0","md5":"00edbcf22188ce19b4f7b026955ea6bd","sha1":"6e35b69b1d07be8191d0ce94b749880b83449479","sha256":"8f9214c09a32b2ce68ae185c79e00f0af525949048c14562406c69b2e2c4eecb","sha512":"7083a296b56503f060895d7e2abb42916d6eac74261200b244dac30cd190d4c055495e56b5bb2d78a3944a83a58f8a01c65ce5d252a2070dd9c197a5722304b6","ssdeep":"768:9NcCO48l9sN5eK+n3fX86tksp3XMyNhbr1ESxjIbXhqXTCTPm1AitA45:9NjOF9s5oP8kkgXxhAhUTwm1Aith5","tlshash":"f723f1fe01904a6435d6b32a0c682edbca00f1d905c52a430a78e66797f7059f2f6f6f","first_seen":"2023-04-15T19:29:41Z","last_seen":"2026-04-01T20:31:28.820766Z","times_seen":1438,"resource_available":false,"data":null}},"time_used":1752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1523,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"hips.hearstapps.com/hmg-prod/images/p90149368-highres-the-new-bmw-m3-limou-1581363395.jpg","fqdn":"hips.hearstapps.com","domain":"hearstapps.com","tld":"com"},"ip":{"addr":"151.101.128.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:40.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bazaar.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 18 Jun 2025 20:01:23 GMT","end":"Mon, 20 Jul 2026 20:01:22 GMT"},"fingerprint":{"sha1":"E2:A8:2D:A0:DF:A5:A7:DE:F4:EF:82:1D:E1:0D:84:96:0C:5E:0A:02","sha256":"38:FF:24:D9:D9:96:B3:02:54:D1:9B:1A:E0:78:49:C2:0F:4A:32:8B:FC:73:10:D7:6B:4A:E0:4B:72:8C:9F:03"}}},"request":{"raw":"GET /hmg-prod/images/p90149368-highres-the-new-bmw-m3-limou-1581363395.jpg HTTP/1.1\r\nHost: hips.hearstapps.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: max-age=31536000, stale-while-revalidate=604800\r\ncontent-type: image/avif\r\netag: \"X33fRzlaSzMf9p69Gsvb2ADybb9LG5ikqjNfHWOvhvo\"\r\nfastly-io-info: ifsz=2009447 idim=4252x2830 ifmt=jpeg ofsz=452200 odim=4252x2830 ofmt=avif\r\nfastly-io-served-by: img23-us-east4\r\nfastly-io-stats: ifsz=2009447 ofsz=452200 ofmt=avif\r\nfastly-stats: io=1\r\nx-amz-id-2: 86VORPX6CvJX5qhO0ujLLU7mU2A25nD0Lvipdyi5ScSCJIoyxb96Pth02id9O4plUQFTFVHFxmDcuOqSk3dZnAUbW/bkhzro\r\nx-amz-request-id: E21VCD02HVYA2EC3\r\nx-amz-version-id: i0kDNscHUC.VpWIlG3sG2AJefm_p47ZG\r\nx-robots-tag: all\r\naccept-ranges: bytes\r\nage: 392871\r\ndate: Mon, 15 Dec 2025 19:25:40 GMT\r\nx-cache: HIT, HIT\r\nvary: Accept\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 452200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":452200,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"491632f957d9d74a412e47cdaf34b674","sha1":"44671cdd3baee3d84a0d3cd874f673ba512e2461","sha256":"91e435821c90ba9d24f0b616deb9162f2dd6cd48f33a301e6b1f1ee8c92518ec","sha512":"08ee699c59969b1fcca0d321903ee8aaa6815b818e58c8447c8b7194f9b0e07e1f98d96d13bd9f4300d0064cc2f8dc9b24d008e0a231aa7978953d3170897864","ssdeep":"12288:PMAGXQhHmpJXUYyEjiXIwy8uTjgGZyW6AO:UAGXQhOpyvtPGZyWI","tlshash":"79a4234e53e9ff03c9d8b60b8c359cb46df356d6562a928802089baf371750c9f9724d","first_seen":"2025-12-14T03:43:46.994513Z","last_seen":"2025-12-17T22:01:56.681332Z","times_seen":46,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":65,"dns":14,"connect":14,"send":0,"wait":16,"receive":56,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-15T19:25:49.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /0McFNjD!wR2CzxRsYSwDkgb/ HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ii81bUp5VmhmZFE0aS9FSzd1SmorMGc9PSIsInZhbHVlIjoiVXcrZTZDdHJGTE5teUY2U3Q1RkwwZUdXT3ZpenJDNmkrS1hDOFkzWUNmWGUwQWJ3WE1QNVFrczlUOEZNTEVUdll4WEVkaU5JNld6WmVEOWF2SWNzWHpVdjVmWFNqZGt4dTE2c2N1YStKam5DQjFhMmUxVGdIUnFQK2s2by8yb3MiLCJtYWMiOiI0OWFhMTlmNzc2MDFjODQ5Y2ZiZmE3MjU3MDMzNzQ0NTViY2FlMDc1Zjk2MWVmZTE0YjM4NmY4NWVkNmRjZjIwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InUvaXdlRk5wL1NsMVZ4Uy9RdWlNTnc9PSIsInZhbHVlIjoiMzkwWGtlS0Vid0FVSGlUM1k4ajNBaGNOZWdRTTdJTWp5eTZhOGZVWUVtU2xZYVBZT3FYbENOVHJhczR0WGxvOWU0MFZ3VmFoVnZsVnV3Nk52bkU3amZQT1dnMmczTGdvVHNLOHFweWJjd0lsdUQ5ZXAwMy9oUi9Zamg4Unh5S0oiLCJtYWMiOiIwNzAyNzE4YTU1N2JhODFjOTNlODg5NDllYzRjOWQzYjliYjE0NTlhYTVmMjYyNmFiOWQ2OGFiNzY3ZmRiNmZmIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:49 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XDgl96BX8BWHwUy5p9tOaA2TdFPUaIWRUBqYkUAHxVtrcx5oZanMrDv7eGHthfih78lhMPlqDczftChpNemNSQOjbIkSg1kE\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InBWbmtnZ0l1Mk43YmpFQ21lV0hjL0E9PSIsInZhbHVlIjoidE1qUkNSRG5YRFNWSUxTMEFBSlVIeUdtek5heUpGOHVtTVlJbERFeXRaS1B0UnBRT0ZaMlJGU2w1TDYxczZZbDQ3TlZldWYxMklBSk05Z2RoVWFtUDR5UVRoOVNiR2U0R1Q2TjNCZjE3T3Q3MkNIT0NLMEtQWEFJRFk0MlVLRVUiLCJtYWMiOiI5NzNmZjZlNzE3Yzg2MWYwYzU4MmEwNzBjNWI0Mzg2MjRmNGFiODRhNWNlMjIzMWQxNzk1ZTJmYWY1NjllYzFiIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:49 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImRsUC93NThjbGdkczhLb05OSnFUdXc9PSIsInZhbHVlIjoicGpYWThXa3llR0c1MXBucUp0TmFweWVEcnp5bHA3MUFEQzRiRHMvWnZZSTJIY1pGZkdnV0duWkZzeXBNbDV4d2s0enFGN296dzBiVUkvSlRTaGswWmx3SG5NbGhkNmZ3c29oQ001bWhYZE83NEcraTZPV0JIUTJSMU5ocEtZdzciLCJtYWMiOiI5ODhkZjVlZDExMTMxNjFlOTE1OTViNWEyMjNiZTE2ZGM0Mzc2ZmY2YTdlNzFmN2M1ZTI5OGU5NjllZWJlZmM2IiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:49 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae85441af0656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6177,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6177), with no line terminators","md5":"b57c746d88bb72ae6ea417c733c26849","sha1":"e632381ea2d37dd1b0c7a474db9fcb9e9759bc21","sha256":"168c51336b9f158eba52a12869d4c27b91779a63aef0135926701291d881d31a","sha512":"da68502f6a5d07cfd4e9581e1829bef7b163893ce8ba75ded0a95a48a9b7447d7e6c5ea3502366cbe3ccccfdc010e15b3e2c5edc0bba01a6aed3121f223c26e3","ssdeep":"96:sEqM8kkGe+kC4jx0cR0sZ1+nASEQm9ch9YJWFG5823BXacqm7Gr:x/S+khd0cR1Z1+nAMZbYJOSr3BXacqL","tlshash":"b1d18e4a626326385515a1a0ae6be0094c79a5143334d4f4578f9ce71c8fc6ec1ffaed","first_seen":"2025-12-15T19:26:10.40151Z","last_seen":"2025-12-15T19:26:10.40151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":219,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"images.pexels.com/photos/3729464/pexels-photo-3729464.jpeg?auto=compress\u0026w=300","fqdn":"images.pexels.com","domain":"pexels.com","tld":"com"},"ip":{"addr":"104.18.67.220","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:40.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.pexels.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 10 Dec 2025 17:14:31 GMT","end":"Tue, 10 Mar 2026 17:14:30 GMT"},"fingerprint":{"sha1":"44:56:84:20:22:69:80:84:DB:5C:00:52:8B:6E:8D:E6:A3:73:32:25","sha256":"08:5F:7A:2C:37:4E:06:22:F8:FF:08:9E:FF:92:6D:C7:05:B7:12:F4:A0:F3:12:1C:14:03:A1:4F:46:46:22:8C"}}},"request":{"raw":"GET /photos/3729464/pexels-photo-3729464.jpeg?auto=compress\u0026w=300 HTTP/1.1\r\nHost: images.pexels.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16805\r\ncf-ray: 9ae8540a1c230b59-OSL\r\ncache-control: public, max-age=31536000\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: degrade=85, origSize=18296, status=webp_bigger\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Mon, 01 Dec 2025 23:08:36 GMT\r\ntiming-allow-origin: *\r\nx-cache: HIT\r\nx-content-type-options: nosniff\r\nx-imgix-id: a8a90cfe1da4b70423d9fe2eb3df65bea9460522\r\nx-served-by: cache-fra-eddf8230188-FRA\r\ncf-cache-status: HIT\r\nage: 142941\r\nexpires: Tue, 15 Dec 2026 19:25:40 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=xmrNnL.aFjVj0EhnItW6a8p6pJ4z8QSTJtNda812YtA-1765826740-1.0.1.1-hpXVQLmjsor3r5ydss9HdPtbcWYQ3JtF1Zs9gGrK5daSE8Y1E1OC0HAaYAbvH9.At4qUfDKgncL6p.r7i_7fQZr0L01nJl.s6on.k.RvQU4; path=/; expires=Mon, 15-Dec-25 19:55:40 GMT; domain=.pexels.com; HttpOnly; Secure; SameSite=None\n_cfuvid=0YhVwhQNXzpzWvWTCg0dUlBZr0uyv5O5I63UFB74s1A-1765826740838-0.0.1.1-604800000; path=/; domain=.pexels.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":16805,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x200, components 3","md5":"424d843da10a69e2e4db86154cab38e9","sha1":"0c6a84e92641505fe7ed12efa4fb6cf01d162c40","sha256":"ba88883d4d9684bebf7f4ffbb3a4a7ca7315082ee6d3d70e5bcd3682526d34e4","sha512":"58013e65130fc6048a6706a53bc856e11d6b6cbb6e8194f69f3791998a69d80824dfa317add4e13552ea2ae74e3832dd285cfd0e710de475a9d2ff7768fa486b","ssdeep":"384:wX1XA2ju5yvTo1i8rc0CcligkxtvZmgPKgjVkF2i7pqH:wX1wGcjligkxdE+vkF/7pO","tlshash":"d372d0ecada535e7f5d0223292cd113f8a2d0e9d27de825698887ec221f51acb84c58c","first_seen":"2025-12-14T03:43:47.000674Z","last_seen":"2025-12-17T22:01:56.680265Z","times_seen":46,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":12,"dns":1,"connect":1,"send":0,"wait":28,"receive":4,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.6.0/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.socket.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 18 Aug 2025 00:00:00 GMT","end":"Mon, 14 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:31:34:3C:FE:6A:94:47:2E:CD:E0:26:D6:4D:DE:E6:D9:31:A7:E3","sha256":"C2:34:E7:66:CF:D6:AF:AA:30:42:B0:50:F9:74:CE:BC:8E:BA:E3:A4:6E:8D:7D:A2:7C:10:10:F5:12:12:6A:A6"}}},"request":{"raw":"GET /4.6.0/socket.io.min.js HTTP/1.1\r\nHost: cdn.socket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"socket.io.min.js\"\r\ncontent-encoding: gzip\r\ndate: Sat, 27 Sep 2025 12:03:08 GMT\r\netag: W/\"80f5b8c6a9eeac15de93e5a112036a06\"\r\nlast-modified: Sat, 27 Sep 2025 08:22:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::dhxjk-1758974588920-4d1ad8f54596\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ac3e1d7135d19671e1860c67a45b3f70.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: cP6pP5v_unrB3aNP6kMiJfcFmprzXn6107VRAwTNhYNcISKgMTLjHQ==\r\nage: 6865426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":45806,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45667)","md5":"80f5b8c6a9eeac15de93e5a112036a06","sha1":"f7174635137d37581b11937fc90e9cb325077bce","sha256":"0401de33701f1cad16ecf952899d23990b6437d0a5b7335524edf6bdfb932542","sha512":"b976a5f02202439d94c6817d037c813fa1945c6bb93762284d97ff61718c5b833402f372562034663a467fdbaa46990de24cb1e356392340e64d034e4ba1b4e4","ssdeep":"384:1ZS0CCnasl8gRR/PoPez+iCMN0Fkiw2Jh4RWdRGhAjbp2ChPL8cYRGv5MRUK6np9:/CCnVl7tUkBxkdRGOfDiY5C5MAn5GY2","tlshash":"1423a488f2a1b06187e37165443f110ba27a746964c9c18cf639d9f19eb8ece7123f79","first_seen":"2023-04-05T03:09:50Z","last_seen":"2026-04-03T09:57:49.448884Z","times_seen":39623,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":27,"dns":0,"connect":1,"send":0,"wait":4,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/GDSherpa-regular.woff2","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /GDSherpa-regular.woff2 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"GDSherpa-regular.woff2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:25:55 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y9bqzZxwtOLehhqLDclWwATWEqdfeul7uxCzlWMh%2FPqTkAkUN3XnbFgLRTk%2BzBcpILZnbz0sM7Beb3xH4OUYVpek1SvPVQPhO%2Fo%3D\"}]}\r\ncontent-length: 28584\r\ncf-ray: 9ae85460585456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28584,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28584, version 1.66","md5":"17081510f3a6f2f619ec8c6f244523c7","sha1":"87f34b2a1532c50f2a424c345d03fe028db35635","sha256":"2c7292014e2ef00374aeb63691d9f23159a010455784ee0b274ba7db2bcca956","sha512":"e27976f77797ad93160af35714d733fd9e729a9981d8a6f555807981d08d8175e02692aa5ea6e59cebd33895f5f6a3575692565fdd75667630dab158627a1005","ssdeep":"768:8n53CNftp4NM/2qxGvtAG9fvpWYSTvlj6OIqrd1xUseRc:85SNfQS2ntfxvpWYSTcfMERc","tlshash":"b4d2e0ed44d2c62988f7638902690111f27898ffe52d7db3c19da0b27245d7ea3a8b09","first_seen":"2023-04-09T18:51:15Z","last_seen":"2026-04-04T17:39:33.860399Z","times_seen":100508,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":517,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/GoogleSans-Regular.woff2","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:55.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /GoogleSans-Regular.woff2 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik0waHV3dmhLanhrSmZuUXZnOWJFZ2c9PSIsInZhbHVlIjoiT1lEWEZDeDZJa2ZlbGFKd3lLT2M5TkltdFplNlZpa291Y2s0dzViQk5GSzhROWIzQUs4cWNEeGZHWHVxM3AzUEpSVnJaOFBZanhxbVNDbHlvTzlSaFhqZUZJSUNGclI2TWFKaGFkZmorKzJVN3MrbjZQKzhsQzlDUnpIMzlER3IiLCJtYWMiOiJhNmJhOGJiYzU5N2M0ZTBiMzI0YjVjZjg2ZDdlZTMyNmQ4OTEwNWM1ZmU4Y2JhNGIzMDhlNDViNTVkZDk3N2EzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFoTXZ4dVAwVmlxdHc2NGNuQTRIYVE9PSIsInZhbHVlIjoiN29iZGczenhuWG1NMG9Ta2ViSjBIMjZrY2I4TEpqK09wd1RSeTd6WEdZNEpydXAyRUFBUjB2dmdDTUJMeXBDTDRmS1F1U0xHWmlBMzJDSysyVU8zTWhtMU9CR1pUSkh3SXI2SW45bHQ5NjhaUm9ZaS9xaVA1YVVDMDBzUzU5bWoiLCJtYWMiOiJhOGQ0NGRmZTZjYzI4Nzc2OGRiY2I1MDM0MzZkMTY5NzJjNzBiYzVkY2Y0NzRkM2ExYmJlNDJiN2M0N2NlZDA5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"GoogleSans-Regular.woff2\"\r\nage: 97\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:24:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPdfxWzc%2F5rlUXTXTVcPMd6rI3IhwVmF7oc%2B71K8Av3hH%2BXKdtRx3rMSzzq6C0SDWWqSi4obXCFgG3%2FhyJnziPJwNTYWE7Xw\"}]}\r\ncontent-length: 47176\r\ncf-ray: 9ae85463f87e56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47176,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47176, version 1.0","md5":"1d58c608b0bd0e8f8485ad30d654246b","sha1":"946aa09af49caca4a9db7d42c2bbf9fde5673693","sha256":"805f42f2c1560e8cc2b9cdbffbcface2e4f10a13a3393d58cf839a4ae8be80fd","sha512":"61199582ad8cb42679c12acfa3048613c371d954427d81527c032fe5cc1df82004bdff3456a1dc02c71893145258357d902767a6200b9a73a0c48872fa411da4","ssdeep":"768:Rmvzgfuf+id2q79FbQPm86mDymvZxwjZUHNDWT8C8zF40zk35BD9yahXvVP0LOeG:RvRidBUmDmD7wO9WTLXpn86VPQxWDwi","tlshash":"2923020d1051b5018e73ffe13d2dc7a96e734458ff2a29282a3b87c8fb57911b699b24","first_seen":"2023-04-15T19:29:41Z","last_seen":"2026-04-01T20:31:28.459436Z","times_seen":1437,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":253,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"thumb.photo-ac.com/71/71fb880f3db0b5b3deb0e41aa2802395_t.jpeg","fqdn":"thumb.photo-ac.com","domain":"photo-ac.com","tld":"com"},"ip":{"addr":"54.240.174.26","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:40.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.photo-ac.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Tue, 22 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"39:C4:B5:BF:02:81:55:22:CF:CB:B6:7A:DE:07:80:22:77:40:A1:03","sha256":"08:EF:B1:F0:B4:1C:5D:B2:D9:7A:35:AC:C5:27:A5:70:08:AE:B2:3F:D5:47:8A:1D:7F:1C:3B:12:00:5C:09:05"}}},"request":{"raw":"GET /71/71fb880f3db0b5b3deb0e41aa2802395_t.jpeg HTTP/1.1\r\nHost: thumb.photo-ac.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 24023\r\ndate: Wed, 26 Nov 2025 18:24:28 GMT\r\nlast-modified: Mon, 08 Jul 2024 10:30:44 GMT\r\netag: \"c35c409d3e05420219196add14dee87c\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: XHsAZ_9quspt56kgchSZzcHCBYiaRUR8D1PrB_xHPZYOZWCd_nEhvA==\r\nage: 1645273\r\nvary: Origin\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P1\",cdn-rid;desc=\"XHsAZ_9quspt56kgchSZzcHCBYiaRUR8D1PrB_xHPZYOZWCd_nEhvA==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":24023,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 437x340, components 3","md5":"c35c409d3e05420219196add14dee87c","sha1":"ba5dd8b00fe54eafe3d5632cbd792df8ae62af7e","sha256":"a912e4fa7427993ef48347038d4e77133e77db8fcb29efa1a3cd7f2dea4731e4","sha512":"bc62e3919bb773a12edf61c926d37dc44751e405ee129edcaddc1e63e7b2c34ce0318b7a0cb96f4b4eb1f516afb4666a7fc8c24bbe65182bbfcf2cfb5f7160b7","ssdeep":"384:B4QVzPjXt/OW8FU6dSNieCv20YnLRfa3NGDlz0pj0ZEeIhlYxKAB3yBCp1ZYZY:bVz8U6k2v2PCNGZUjABHKTB8Hj","tlshash":"36b2e14062566e0adb7f3aa357beb4bdd52908f1b0d2aa157818d7f07690cd0a87e053","first_seen":"2025-12-14T03:43:46.989235Z","last_seen":"2025-12-17T22:01:56.67844Z","times_seen":46,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":351,"dns":27,"connect":1,"send":0,"wait":5,"receive":2,"ssl":325},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-15T19:25:49.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"POST /0McFNjD!wR2CzxRsYSwDkgb/ HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 5\r\nOrigin: https://midi.traipeapu.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImJsSnZUZlBCZlJ3U2U2WFNsK2daOEE9PSIsInZhbHVlIjoiVXFaSmpySDJQc1BjTWJNTjRvcVowcFFDTlJWaG56aU13MEFYOTRBNWhEczdvNVJsZWl5ekFvQjlWWWdzUVN4NzZSdEpiRkNrMThxUXFIZ09ZaTlXSERQRnNjWHdwRThZdk95UG1qZFNVd2UzbDJxNGx2NUNCZGxTeCtKRjAxM28iLCJtYWMiOiI5ZTA0MWQ4NmQ0MWE4ZmI1MTk4NTk2MDdhODBjZTExYjM1ODg2MTNmZWJhNTQ3NDRkM2M3NGE1YTdhNzc5YjBmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImpaRUhnOU12Yy8xbmlUdkhnL2ZtK1E9PSIsInZhbHVlIjoiUmlmbkgxY0lXSlJUOFg2aG5lVDhzYVNOL0kvVm95cy9sMGxPL296VDVHZkgrZ3FreG5Xb09aYUdsRmJXclgva1RQSkxIVVBNTWJmSkFObGFHVTJxdDB2MjJySDdiT2ViL0RqOFZQVndvSXl0ck95amVJK3lCRGd3QnpmSUtrM0QiLCJtYWMiOiI2NWNiNDBmOWQ1NjAyZDdiMWVkNTlmZjZjYzA2NDk5NzRkYzVjNDk1OTdjNjE4YWZjODg5YjJhNDZiMDQ0MzI5IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5,"data":"zone="}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:49 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lT9rbWrAYu9DK0sTSe9PnOv%2BZOj1TqFM3tUi%2B6LUHlSQBiPUSUHAoQIsiuNmwqbv4kCSC9jHgR0FOcci3ettLZf9zWlfagLp\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ii81bUp5VmhmZFE0aS9FSzd1SmorMGc9PSIsInZhbHVlIjoiVXcrZTZDdHJGTE5teUY2U3Q1RkwwZUdXT3ZpenJDNmkrS1hDOFkzWUNmWGUwQWJ3WE1QNVFrczlUOEZNTEVUdll4WEVkaU5JNld6WmVEOWF2SWNzWHpVdjVmWFNqZGt4dTE2c2N1YStKam5DQjFhMmUxVGdIUnFQK2s2by8yb3MiLCJtYWMiOiI0OWFhMTlmNzc2MDFjODQ5Y2ZiZmE3MjU3MDMzNzQ0NTViY2FlMDc1Zjk2MWVmZTE0YjM4NmY4NWVkNmRjZjIwIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:49 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6InUvaXdlRk5wL1NsMVZ4Uy9RdWlNTnc9PSIsInZhbHVlIjoiMzkwWGtlS0Vid0FVSGlUM1k4ajNBaGNOZWdRTTdJTWp5eTZhOGZVWUVtU2xZYVBZT3FYbENOVHJhczR0WGxvOWU0MFZ3VmFoVnZsVnV3Nk52bkU3amZQT1dnMmczTGdvVHNLOHFweWJjd0lsdUQ5ZXAwMy9oUi9Zamg4Unh5S0oiLCJtYWMiOiIwNzAyNzE4YTU1N2JhODFjOTNlODg5NDllYzRjOWQzYjliYjE0NTlhYTVmMjYyNmFiOWQ2OGFiNzY3ZmRiNmZmIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:49 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae8543e7eee56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"7828f7ae07241c0978ce44e5cc4a0a83","sha1":"a9c93817a15b03507c3c21021fba863d3ac62b7f","sha256":"a65713ab569fbcda76f7d8cd7827b5cc51b58eb5d1b03b50c91924ba9c785fd9","sha512":"3bb6311f102cc50b6e8f2d2739185b17fb0715f94d0100cb7636c76e59e79dd2bbb58046e0e13679efc7c1b92696e68b09354010992d96af34399577f443ab39","ssdeep":"","tlshash":"69b002df0c4182453af211129a537359357350eb1804f05255515510756cb8f972fdde","first_seen":"2025-06-23T00:01:47.918545Z","last_seen":"2026-04-04T03:19:30.938476Z","times_seen":40963,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":456,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"candy.stafretotoocoo.qpon/lani!jdatg","fqdn":"candy.stafretotoocoo.qpon","domain":"stafretotoocoo.qpon","tld":"qpon"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:50.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stafretotoocoo.qpon","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 12:02:46 GMT","end":"Thu, 12 Mar 2026 13:01:28 GMT"},"fingerprint":{"sha1":"DD:8C:43:CF:02:02:18:E1:8F:18:52:22:99:F5:12:47:6D:87:56:F3","sha256":"64:59:E0:26:EE:65:D4:BB:F5:5D:CF:1B:83:7B:BB:0F:05:F5:96:84:08:98:A5:93:01:CF:E1:95:B4:76:FE:9B"}}},"request":{"raw":"GET /lani!jdatg HTTP/1.1\r\nHost: candy.stafretotoocoo.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/\r\nOrigin: https://midi.traipeapu.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6kwaUTpYw6gKj8ykvSnhmxhnVk%2BljOPZ4YCRIyl28weYnYfDfBtn3a7a3Mjx45mjBdddAWeH10cz8dHj2PGKkLOl2zPYQgSMMPt%2FosFGbwA3%2BL58mCyb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ae854458ca356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-04-04T17:43:51.810182Z","times_seen":103561,"resource_available":true,"data":null}},"time_used":1191,"timings":{"blocked":211,"dns":189,"connect":1,"send":0,"wait":769,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:52.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"POST /t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nContent-Type: multipart/form-data; boundary=---------------------------28918151743981562255384640647\r\nContent-Length: 62\r\nOrigin: https://midi.traipeapu.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InViMmlCamVFS0RySE53NklDNkxUY0E9PSIsInZhbHVlIjoiZDY5dWVabnNKTGE5c05IWnF2UzRBMGRRZmFXcmVvQU1YNWxSYThvSk5aend5Y2pVWkgxc0I4ZG5nNUVWNEVud2wvQmhRMjk1K3orcVZ5eTZ5TTYxZXBDYVdQTXJiTVZLU0xyVXNlNHhJMnh0M0JubElTdUZPWDhFYUtTU2RkeFMiLCJtYWMiOiIwMmFhM2IwOWJiYzYyMjQ0M2Q2ODJjN2I5MDI2MDk3MThiZWYzMWI2YTgxMjg4NDRhOGE4MmFjNDNiMzE1YWI4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjRYcWxCVW81aHo2TjEwWThKbVBZSlE9PSIsInZhbHVlIjoiQkhnelEvcUZzWDI1aTdVc2haREN2aUwzRHpnVnpCTEpKWDZhcVRxZG9BRjBxYk5tcEExempOUDZiWmFONzdzQWF5emdkMWg4aTh6YnF3NVpPbTBXak5SNHhNNmpVbDZXaDNPakpCZkowZ0V3cXZqdXJJZFhnSi9vb3Vmc2F4ZjIiLCJtYWMiOiIyYWFiOWFjY2Q4ZTgyY2VmM2E1ZjU4ZDVkMjM0M2VjMjZkNDI5ZTZhYzhhYmZmMThkN2I2NDAxM2E0ODdhZmJmIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":62,"data":"-----------------------------28918151743981562255384640647--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:53 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gGy0Nflv%2BYnUXkeOsJjPUbtfRWeZPI9diYyaHIsB5aYcpjpmP0HxRIKVXPTFX27oupoj8eFk9aCOXZ7BK2H8YZh4IuccOjxB\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:53 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:53 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae85453dfec56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":999002,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"4afa4456a9e45a86e82fa476319550bd","sha1":"623e5ea4b63139508a401b67f76736d85d4623bd","sha256":"20beffadc4a8c45882dd545f348a43c28f7e48e832767ca80a448e27b84307bd","sha512":"1ed2d7d309e6febc3be8bc59775c535ab8c437d0a4ba543cd85cc5cb37859faf72942c0f748cebf6358ed8fb69be774f58b0935c92182ed3c77b2a9bf2af6342","ssdeep":"24576:AlqDu2NNmJcPW+B1v/VkDE4XBMej30138yQP7C:aLcB1vaDE0BZwxG+","tlshash":"f02523809ef6745e3fe84f0ce4efa75b67b48f74808564d75b82548362d6f0aa633209","first_seen":"2025-12-15T19:26:10.408433Z","last_seen":"2025-12-15T19:26:10.408433Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":650,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9ae854607fe835a6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 935722\r\nexpires: Sat, 05 Dec 2026 19:25:54 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ml1q6779bCf2TR5%2FXSibgVxTrUTd8Hx%2FEakT6N9oAGPUH5VJqLp62ksrlXAGYuFqyLN35%2FnavYU4WFFaF9H2q2vvfxZYeHaLXGJYpVRSZHyiXTsBJ%2FlvAmBjwu9hnODh%2B4hMCqt3\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-04-04T16:10:07.865529Z","times_seen":29356,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":35,"dns":0,"connect":2,"send":0,"wait":12,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/rscM1KNg7HQJ77t6FBbBqglEYyVYf0LfC990csC688gfE0vKV0be1MH8HrAymIOFgndps2uQ78lEhswIS503KxzolkBfUX7iFdWu0VrjAayai2zoJYqUNQxwXhhrDXFKp8G8q2QyADZU7dhTop510","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /rscM1KNg7HQJ77t6FBbBqglEYyVYf0LfC990csC688gfE0vKV0be1MH8HrAymIOFgndps2uQ78lEhswIS503KxzolkBfUX7iFdWu0VrjAayai2zoJYqUNQxwXhhrDXFKp8G8q2QyADZU7dhTop510 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"rscM1KNg7HQJ77t6FBbBqglEYyVYf0LfC990csC688gfE0vKV0be1MH8HrAymIOFgndps2uQ78lEhswIS503KxzolkBfUX7iFdWu0VrjAayai2zoJYqUNQxwXhhrDXFKp8G8q2QyADZU7dhTop510\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNR9tcY48GwzYQTpZvbSXy4zJAWx3PqLagq0C4EszTTFlt4o5nOyDV00%2BHy0v21%2FMApXcPiKYgOTHF34veS1DdunEteG%2FjuEcmM%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ae85460785f56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115701,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4931a1f00ce50af995a4aac2ddc041e3","sha1":"bfc83ce6ac9e9d54d6f1a6e8ced457cd120bbb14","sha256":"2fbc43c9558fbe6c02837e0552942046e7f25e3feb623db7e544227c3953c69c","sha512":"0dab11edabe8a3478674147a27ac06fceb7d79d86bf4f7ae290ff9e91b52c21ab93bbc8c8417a21b1b8dc19daa02b4789cb93a1ed648380cb4b32b85c9fe5ee7","ssdeep":"3072:eaiBud2K6K7T+oqEZ2dVKMWpa34FmAENwR+g2wJbTGSL:eaPv+oqEDpY9AqgdTFL","tlshash":"08b312b818e95f11e79d3193852d2e207777996cb21846fe4bb568e84f23b8fd042c70","first_seen":"2025-12-15T19:26:10.411295Z","last_seen":"2025-12-16T19:13:42.003082Z","times_seen":2,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":459,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-15T19:25:52.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik85Um4weU8weFBabHZtZUVGSEM2RVE9PSIsInZhbHVlIjoiWXVkSklHUE9BN1JxNExRT3VkUTlTWjdsR2Q1OHlIbXpTUjV2SUlKcFdTSDBMd1k4RjNVMWVQR3daRzJRc3pNbTB0N3dwb0hMbjRDWmhjZXVVTmVLL095YzJSWUViL0s4bnUxRWdwZndheURicGt3V3ZXYzNzMXg2Q21RZm5PbzIiLCJtYWMiOiI0NDRjM2Y4NGUzYzc1ZmJhOTI4OTFmNzIxMDYyOTAzMWUzYWY1MWExYTBmYTg2Y2JjZjYyN2M2MjgxMmJhYmViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijl5cmdJUzVDOGRWWGtsdW94am5JdWc9PSIsInZhbHVlIjoieDFRa3l0ZVZ5Z3J5VEtYbm9LYXZNNTU2UWxxWjhBeTNvNG14cEFlU0I0VGlWWWZCelpLWEg3bjNQSDZPMzZFbkt3SVA4VWZRa2VmeXFkUXFRMStCeTEvL1lXbVg4a3NMYmNDcXIzeHJpQm1rZXFiVDYzaUFabnFCZ1ozUTBUQjEiLCJtYWMiOiJhY2U5MDg5MWY0YzljMDBjZDc1YjRjMzY0MTg2NGUyYzcxNjg5NzM0NDJjMzgyNjM1ZTYwZmViMGY2ODA1ZTg1IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:52 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvBchoIKQxr6JbZCnYeTWUg%2BJricZyZp4ADSK71bT5vVRHFqKo53TkuDW0TYYRqmgc74lwuTE2FmlCbSpsXyb51i69D6fpWD\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InViMmlCamVFS0RySE53NklDNkxUY0E9PSIsInZhbHVlIjoiZDY5dWVabnNKTGE5c05IWnF2UzRBMGRRZmFXcmVvQU1YNWxSYThvSk5aend5Y2pVWkgxc0I4ZG5nNUVWNEVud2wvQmhRMjk1K3orcVZ5eTZ5TTYxZXBDYVdQTXJiTVZLU0xyVXNlNHhJMnh0M0JubElTdUZPWDhFYUtTU2RkeFMiLCJtYWMiOiIwMmFhM2IwOWJiYzYyMjQ0M2Q2ODJjN2I5MDI2MDk3MThiZWYzMWI2YTgxMjg4NDRhOGE4MmFjNDNiMzE1YWI4IiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:52 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjRYcWxCVW81aHo2TjEwWThKbVBZSlE9PSIsInZhbHVlIjoiQkhnelEvcUZzWDI1aTdVc2haREN2aUwzRHpnVnpCTEpKWDZhcVRxZG9BRjBxYk5tcEExempOUDZiWmFONzdzQWF5emdkMWg4aTh6YnF3NVpPbTBXak5SNHhNNmpVbDZXaDNPakpCZkowZ0V3cXZqdXJJZFhnSi9vb3Vmc2F4ZjIiLCJtYWMiOiIyYWFiOWFjY2Q4ZTgyY2VmM2E1ZjU4ZDVkMjM0M2VjMjZkNDI5ZTZhYzhhYmZmMThkN2I2NDAxM2E0ODdhZmJmIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:52 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae854523fdd56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1468), with no line terminators","md5":"fa638f7c8b76f1571da35c922760f4a2","sha1":"6d83bb78e743b71634af0408bbcd66984cdbba0d","sha256":"f37d097be6720a5c40d43b444cbb9ab4bf5a6f0a0a6e04fd9c173124289d3bec","sha512":"4dc058e6be24317742ffcac8058bc7afe1c7a9e83fdae9aa3944a12f59a7e6da027bc3893062072470c015548d4a398136204f86dfff7b61c70c4fb46dfc86db","ssdeep":"","tlshash":"0a315f9a607956390791aec6a1dbf29d87a95a28b304fcc05acc740449cf7b8c9af0f4","first_seen":"2025-12-15T19:26:10.412891Z","last_seen":"2025-12-15T19:26:10.412891Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/561r2fdy5cs1PBKrYE7G9LzPghulUcGcGw67740","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /561r2fdy5cs1PBKrYE7G9LzPghulUcGcGw67740 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:54 GMT\r\nserver: cloudflare\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"561r2fdy5cs1PBKrYE7G9LzPghulUcGcGw67740\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sDY2EEWvbsX0Nod8wPLMZy9htu7gOSiLPtL2nLGOQtfE6GG14gD6v9u2gCX6GocwMkGQ7VoBrT9DlVPXAkXnkfrmgrozHfLV\"}]}\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9ae85460284956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T17:41:44.090376Z","times_seen":444933,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/GDSherpa-regular.woff","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /GDSherpa-regular.woff HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"GDSherpa-regular.woff\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:25:55 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzglnpNFGyxuCh6%2Fi6Ob9SCjN1bkLikEgAHkURKFOd4FYaR4NrNW5cS%2FRyau3QoSSMGkN5WR1kqnj8d1L1%2FXfkV4w%2FBzX0Xrt78%3D\"}]}\r\ncontent-length: 36696\r\ncf-ray: 9ae85460585356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36696,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 36696, version 1.0","md5":"a69e9ab8afdd7486ec0749c551051ff2","sha1":"c34e6aa327b536fb48d1fe03577a47c7ee2231b8","sha256":"fd78a1913db912221b8ead1e62fad47d1ff0a9fa6cd88d3b128a721ad91d2faf","sha512":"9a0e4297282542b8813f9cc85b2ccb09663ce281f64503f9a5284631881da9aacf7649553bf1423d941f01b97e6bc3ba50ab13e55e4b7b61c5aa0a4adf4d390f","ssdeep":"768:lvJo4KciQZYjebVq19lKPtHAQ/l4rj2bqkiHShpeSUOR4OqWOgaU:lhH3rVq1PKP432tSSh4SUORHqWcU","tlshash":"31f2f15d76443e8cf06a245836ad2dd6a423171247138f8709de72bbd14f120f65aaff","first_seen":"2023-05-09T17:48:02Z","last_seen":"2026-04-03T14:38:11.342242Z","times_seen":90380,"resource_available":false,"data":null}},"time_used":639,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/GDSherpa-vf.woff2","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /GDSherpa-vf.woff2 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"GDSherpa-vf.woff2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:25:55 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jeigNu%2FVNqzoLs1jXY2yE%2B1hnPAHspojZjmWiOyW9IJOPsA6t%2Fd6Fa5MsIeyl1n87HKq%2FS6AiF%2BmZJIZIQvAV22QERALD2zQxbs%3D\"}]}\r\ncontent-length: 43596\r\ncf-ray: 9ae85460585556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43596, version 1.0","md5":"2a05e9e5572abc320b2b7ea38a70dcc1","sha1":"d5fa2a856d5632c2469e42436159375117ef3c35","sha256":"3efcb941aaddaf4aea08dab3fb97d3e904aa1b83264e64b4d5bda53bc7c798ec","sha512":"785ab5585b8a9ed762d70578bf13a6a69342441e679698fd946e3616ef5688485f099f3dc472975ef5d9248afaad6da6779813b88aa1db60abe2cc065f47eb5f","ssdeep":"768:b0nfc/3Osy1fo0tBBFF/GGXfN2ZHKTBUwL+BR49qCow3Z3HuvJ5+xXtTgXHk6/:b0fU3OdhFF/xNOoZc49ow3Z3HO+xX1mf","tlshash":"e2130258592578a9eb43bd49f00c6e64c296b3d8f5832b62334a04f0bff651620fe797","first_seen":"2023-04-18T03:10:28Z","last_seen":"2026-04-03T14:38:11.33698Z","times_seen":91843,"resource_available":false,"data":null}},"time_used":673,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/favicon.ico","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:49.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nCookie: XSRF-TOKEN=eyJpdiI6InBWbmtnZ0l1Mk43YmpFQ21lV0hjL0E9PSIsInZhbHVlIjoidE1qUkNSRG5YRFNWSUxTMEFBSlVIeUdtek5heUpGOHVtTVlJbERFeXRaS1B0UnBRT0ZaMlJGU2w1TDYxczZZbDQ3TlZldWYxMklBSk05Z2RoVWFtUDR5UVRoOVNiR2U0R1Q2TjNCZjE3T3Q3MkNIT0NLMEtQWEFJRFk0MlVLRVUiLCJtYWMiOiI5NzNmZjZlNzE3Yzg2MWYwYzU4MmEwNzBjNWI0Mzg2MjRmNGFiODRhNWNlMjIzMWQxNzk1ZTJmYWY1NjllYzFiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImRsUC93NThjbGdkczhLb05OSnFUdXc9PSIsInZhbHVlIjoicGpYWThXa3llR0c1MXBucUp0TmFweWVEcnp5bHA3MUFEQzRiRHMvWnZZSTJIY1pGZkdnV0duWkZzeXBNbDV4d2s0enFGN296dzBiVUkvSlRTaGswWmx3SG5NbGhkNmZ3c29oQ001bWhYZE83NEcraTZPV0JIUTJSMU5ocEtZdzciLCJtYWMiOiI5ODhkZjVlZDExMTMxNjFlOTE1OTViNWEyMjNiZTE2ZGM0Mzc2ZmY2YTdlNzFmN2M1ZTI5OGU5NjllZWJlZmM2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:50 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXJeazRI6YjHRKin21UfGcz3u0CsBvIMmgzbXGI%2BMCB1bFVgZjZ93dYaL4zzdhq4nGo833%2FF35bkINVs8C4ApvDZYho7gKqvylA%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImxXZ0J4MUNuUVlNSHhjNEd3R0ZLOXc9PSIsInZhbHVlIjoia1lsTGdjMEhrWWNRY0lrWXRsQk1QUHJyVHdjSU5md2tseWdSSU9oUlU4WHFrZXpsY0lXQ2FNN050RlNNVks0T1VacWVBMlhRZGVlejRrNlpIaFA3TnFCYW83T3pPWWR0amJwaGtFUTZjL0JWVHY2MzEyQ3piQmRTUGpTcEtERU4iLCJtYWMiOiI1MTUwYWI5ZmQ2YTZjZDFmZjY3MTExNGEzYzE3MzZlZjk1ZDJjN2MyODkxY2UyZWZmZjc5ZGQwYjY0NTZjZDgwIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:50 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IlhCcEVFaStEWWFVWE8xUDlLcFlZNGc9PSIsInZhbHVlIjoicXBFelltQksxWklkOVk0SW9BS0RFUkdvZ3pNS3Z4V0hFdFFOTkwzLzFWSjVUS1VuOHd2dGJJM0cvMUJ3d3ZmMnQ5ZUxwczZPWGp6cXRvSEtLTStJZzd2ME1lbFg0OUt6YnROZTk0V2xhTnhaWE1udXN0RWdWcmJ1TkEwNEhjdmwiLCJtYWMiOiJmMmZmYWIyNzJkNmZhMjNlYWUxM2I5NGYyM2M1OWMzZWEwYTgxYzIxNjIxMzIzMWE4ZDU4MDc2MjMzZDIyYmVjIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:50 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae854434f1556bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10423,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387)","md5":"58a2067b843dc9dc4c3a0640e2bf4efc","sha1":"4c39aa8399a7a6667f87850e66e01912e6a2ae63","sha256":"57e10a4e3a99bbe2c4b6679f89452e7e1da6aa875aa5c7ecfce502b8012a9eca","sha512":"c0a7abb8bd29d86b0392e06821825fc2e6ddc8700f97ff8ffe29f0593b5d13b4e41cfee07ad4220867f5721f9bd8d2e38af8e17ebda27b205f11eb3cc12d4bd8","ssdeep":"192:fvNpgEthwoOIkfCjSuv5bkunaP3wV6xLbKXhsz23bSeH2Q4Uvdd5+JwnU:X7SRfyXKFoPRsaLvHV5+JwnU","tlshash":"0f22b4321060b0372963a5c6faa1234fb5f1e517dd270a54bafd52988fcbec1ce9b505","first_seen":"2025-10-31T22:38:13.409821Z","last_seen":"2026-02-17T03:30:40.122356Z","times_seen":4519,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/list.js/2.3.1/list.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/list.js/2.3.1/list.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 5828\r\ncf-ray: 9ae854608ff335a6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"600474f4-4c1f\"\r\nlast-modified: Sun, 17 Jan 2021 17:33:40 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 934822\r\nexpires: Sat, 05 Dec 2026 19:25:54 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Lsd7%2BZffG0KEqiiwDF0laTWVKBu3%2FwHyhRggQMzYB17uNviMnCmRqIGiscp9dPdxAyHiA2jYt0Zp7bV5QJMQpgBCDEORO9Un%2FY%2F2zzbDUlHjh6x6drUJh8c7e9ZK5nXGFbmT%2FC6d\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19487,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19450)","md5":"d1cdff6a106c934639d63f03f0e781ef","sha1":"085b67a4fb85caff9574aba1e57427645b4f4181","sha256":"34456f18d306a85bece9a7462d98e6e6c2e072e5fdac64e0d70946b40d5feccf","sha512":"f77c18830ac814bf9bf8fdd1bd8c62fd65054575d40d22c24f625093dce15465ee4b69879766b18fa77e47aa4ffa0714e62b0c1d18f5bb4a1813f996cadfd18c","ssdeep":"384:Vse0oG1SOLMTLWyjI4L3PZE8HKT1YWDdW3wn6q4WM0Qtlu/4JJzGijQ9k2d+cfyN:bGbAU4t+f84UF9crVQ6KV","tlshash":"2f92959e7288762147f364794d1f324ab4b62a14b40a94d8d126c9d5ecb8dcf80bbf7c","first_seen":"2023-03-07T01:35:45Z","last_seen":"2026-04-02T23:11:40.354609Z","times_seen":1582,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":35,"dns":1,"connect":3,"send":0,"wait":9,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/GDSherpa-bold.woff2","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /GDSherpa-bold.woff2 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"GDSherpa-bold.woff2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:25:55 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvjOUo06Ya95EGQIiqyBWY1qOvWLrOk4ZiQiECzXnTUHP7CGcS3WyGeJwDJJNn4EywqKHo4yrc9mBKestRmSXzmQEIdiosw1fYM%3D\"}]}\r\ncontent-length: 28000\r\ncf-ray: 9ae85460585056bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28000, version 1.66","md5":"a4bca6c95fed0d0c5cc46cf07710dcec","sha1":"73b56e33b82b42921db8702a33efd0f2b2ec9794","sha256":"5a51d246af54d903f67f07f2bd820ce77736f8d08c5f1602db07469d96dbf77f","sha512":"60a058b20fcb4f63d02e89225a49226ccd7758c21d9162d1b2f4b53bba951b1c51d3d74c562029f417d97f1fca93f25fdd2bc0501f215e3c1ef076810b54dd06","ssdeep":"768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+","tlshash":"cfc2f1878fd02879a72dfeb80252903197d00de93fea42318d99b70fe683987515e272","first_seen":"2023-04-09T13:59:19Z","last_seen":"2026-04-04T16:12:10.873794Z","times_seen":94581,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":507,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/Roboto-Regular.woff2","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:55.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /Roboto-Regular.woff2 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik0waHV3dmhLanhrSmZuUXZnOWJFZ2c9PSIsInZhbHVlIjoiT1lEWEZDeDZJa2ZlbGFKd3lLT2M5TkltdFplNlZpa291Y2s0dzViQk5GSzhROWIzQUs4cWNEeGZHWHVxM3AzUEpSVnJaOFBZanhxbVNDbHlvTzlSaFhqZUZJSUNGclI2TWFKaGFkZmorKzJVN3MrbjZQKzhsQzlDUnpIMzlER3IiLCJtYWMiOiJhNmJhOGJiYzU5N2M0ZTBiMzI0YjVjZjg2ZDdlZTMyNmQ4OTEwNWM1ZmU4Y2JhNGIzMDhlNDViNTVkZDk3N2EzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFoTXZ4dVAwVmlxdHc2NGNuQTRIYVE9PSIsInZhbHVlIjoiN29iZGczenhuWG1NMG9Ta2ViSjBIMjZrY2I4TEpqK09wd1RSeTd6WEdZNEpydXAyRUFBUjB2dmdDTUJMeXBDTDRmS1F1U0xHWmlBMzJDSysyVU8zTWhtMU9CR1pUSkh3SXI2SW45bHQ5NjhaUm9ZaS9xaVA1YVVDMDBzUzU5bWoiLCJtYWMiOiJhOGQ0NGRmZTZjYzI4Nzc2OGRiY2I1MDM0MzZkMTY5NzJjNzBiYzVkY2Y0NzRkM2ExYmJlNDJiN2M0N2NlZDA5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"Roboto-Regular.woff2\"\r\nage: 97\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:24:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k%2FW9Uvq9kJD2jUIxpiBE1NskusV8J5BBuTgXQpK518%2Biab2J1GcuLxAi4Nv2E6DvUSLPUv8m828D%2FodrQENB0zCu1Ijy8MbIFR8%3D\"}]}\r\ncontent-length: 65916\r\ncf-ray: 9ae85464087f56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65916,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65916, version 1.0","md5":"9feb0110b6dff9ee2b9ebd17f7a1aee6","sha1":"90bbe308a02d7cda492e3beb1a6091809b8f35c8","sha256":"8cef08634dc57d6519717c5a99a9e502bdc96586fe64770520a4820b0b089920","sha512":"e5b4c7643a1e2f3c134d2a0a4e08922d01eedb5cf7f463e885d58167f438cb1745d16aca2e455733f59ac5b63d85d4a34efb37d86281fb51273569a3e35d7085","ssdeep":"1536:nAwBjS40rROWAAffkRf+aFDExB8+m+bHvYc3uezUAAxmn:AQh0ymaFDypmcHvhumUAA0n","tlshash":"0f5302d162117d6596ed003a427b7696d800df22f3baf2698c7fb9d3e2689c603c25a0","first_seen":"2023-04-07T21:58:55Z","last_seen":"2026-04-04T17:22:09.266801Z","times_seen":3915,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":254,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.shopify.com/s/files/1/0639/2545/3041/files/dog_laying_on_couch_with_sofa_covers_480x480.jpg","fqdn":"cdn.shopify.com","domain":"shopify.com","tld":"com"},"ip":{"addr":"23.227.39.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:40.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.shopify.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 20:25:52 GMT","end":"Sat, 14 Mar 2026 21:25:48 GMT"},"fingerprint":{"sha1":"73:52:67:A0:3F:CA:D9:EB:CD:DA:09:F4:9A:9E:D6:A6:BA:D2:06:66","sha256":"76:13:17:01:D8:13:58:B8:32:BB:46:29:9D:C0:97:1F:E3:FB:B7:62:C4:2C:B4:73:82:1D:B1:79:A5:18:35:59"}}},"request":{"raw":"GET /s/files/1/0639/2545/3041/files/dog_laying_on_couch_with_sofa_covers_480x480.jpg HTTP/1.1\r\nHost: cdn.shopify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92704\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: public, max-age=31557600\r\nlink: \u003chttps://cdn.shopify.com/s/files/1/0639/2545/3041/files/dog_laying_on_couch_with_sofa_covers_480x480.jpg\u003e; rel=\"canonical\"\r\nsource-length: 3090285\r\nsource-type: image/jpeg\r\ntiming-allow-origin: *\r\nvary: Accept, Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-request-id: dd2c3fbc-7ec9-4ede-b3bd-7b9a86b21246-1764619540\r\nx-shopid: 63925453041\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-dc: gcp-us-east1,gcp-us-east1\r\nlast-modified: Mon, 01 Dec 2025 20:05:41 GMT\r\ncf-cache-status: HIT\r\nage: 142941\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EsnjO87swURfq%2BwhGvP44U%2FwY%2FpiXe7XFnCbqtjZgKvG9Wz%2BiWT%2BdSI7emhwt7My7%2Fz%2FfnotFCLYO81n28LZwjuHGF461n5xwI1eyOn%2B4R8XIAsSbf9TY%2BSrqpDNfQD%2F1g%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver-timing: imagery;dur=410.695, imageryFetch;dur=171.590, imageryProcess;dur=237.240;desc=\"image\", cfRequestDuration;dur=16.999960\r\nserver: cloudflare\r\ncf-ray: 9ae8540a5f220b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Shopify","description":"Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.","website":"https://shopify.com","common_platform_enumeration":"","icon":"Shopify.svg","categories":["Ecommerce","CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92704,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 480x480, components 3","md5":"72e98e85b7c7e5c25c6800911ef4b6af","sha1":"8b42304df005e1a7f47150cd9c3aaa7255d50990","sha256":"d5dccddfbd5500e15b4e8929f88075cff0d82bc5a9fb84586e275efe46d18d34","sha512":"c8cb39d6a7478f50e42e4736121cf65f91f07fee0d06def35220f4eb9736a0032cf0e30e0cdd0a4e460d414de27022e8d7e9ad77fda654e9c86259b2c400993f","ssdeep":"1536:hwfUSb7oqSOBRw2fVgLE1M7PmdL9cDSzY/c2Hwc+012uLyeFRlaWUWKYY:WnrKUgo14PmdxaSE/fScLyeFR1UWKYY","tlshash":"b993123431445984e2a7ab7af5aa1fa47037fb33904bb953bd5f05a7897c0a69460ce0","first_seen":"2025-12-14T03:43:46.991994Z","last_seen":"2025-12-17T22:01:56.676598Z","times_seen":46,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":48,"dns":20,"connect":1,"send":0,"wait":18,"receive":3,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/favicon.ico","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:41.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nCookie: XSRF-TOKEN=eyJpdiI6IkFVTUxiNHdacWRIM0xnenl4TzJsVUE9PSIsInZhbHVlIjoiN3F3emdqQUlpR0RDcjMzZStEcm0xa1FhbVVFY0VwRlQ5cDVHR2xMditmUTI4RTVzMkdSZFJ1Wk9CUVBPQnNZcEJpWTBlSmkrNjdiRWNYdnlDZDhPN0xKKzlVMGhWdWtTRUUzWHNUOVhVVGY1QTl5Q0V1ajJUZ0xSREt2bTFQVTMiLCJtYWMiOiJlMTc0MGMzMTE4ZWY5MDM4YTIyN2QxNWI3MzAyY2M3ZjBmZDI3MmQ3N2RkNDk0ZTZhZmFiMGRlMzJjN2E0ZWJhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNaaSt6VmYyeGUrZEZJVVRmcFZNZ0E9PSIsInZhbHVlIjoiRlAwZTZJNWY5L2d2SkxhQnp2aENtNjlQMGRBRVRPSy80WW1ZTitiSW9kVllxeGFDZHlFWTNFTXl6M0hqYUxSV3JlYmlDcGR3YXVwVzVPZnBaVE8veFVIZW41WTR6VjU0UlJCcVcxdlhhcE1RR1Y3bW5qd0J0OHBBUnIyNUhBcnQiLCJtYWMiOiJiYmRjYWRkMWY1NDg4ZTZiNDRjN2E4NDJhYTk4Nzc5YzExNzJlNjdlODVlMWUxMDY5MGVmOTNmZmJjOGQ1YmY0IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:41 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufxiqlQVPYJJimiiYdmi3%2BmNfNYz2T8R76xe2zEPpAEWN5LG%2FLIZzFSdEeP2mu2PWa7DWxmzObnn7qtl4SbrYPGD%2BmomNuVZaEY%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImJsSnZUZlBCZlJ3U2U2WFNsK2daOEE9PSIsInZhbHVlIjoiVXFaSmpySDJQc1BjTWJNTjRvcVowcFFDTlJWaG56aU13MEFYOTRBNWhEczdvNVJsZWl5ekFvQjlWWWdzUVN4NzZSdEpiRkNrMThxUXFIZ09ZaTlXSERQRnNjWHdwRThZdk95UG1qZFNVd2UzbDJxNGx2NUNCZGxTeCtKRjAxM28iLCJtYWMiOiI5ZTA0MWQ4NmQ0MWE4ZmI1MTk4NTk2MDdhODBjZTExYjM1ODg2MTNmZWJhNTQ3NDRkM2M3NGE1YTdhNzc5YjBmIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:41 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImpaRUhnOU12Yy8xbmlUdkhnL2ZtK1E9PSIsInZhbHVlIjoiUmlmbkgxY0lXSlJUOFg2aG5lVDhzYVNOL0kvVm95cy9sMGxPL296VDVHZkgrZ3FreG5Xb09aYUdsRmJXclgva1RQSkxIVVBNTWJmSkFObGFHVTJxdDB2MjJySDdiT2ViL0RqOFZQVndvSXl0ck95amVJK3lCRGd3QnpmSUtrM0QiLCJtYWMiOiI2NWNiNDBmOWQ1NjAyZDdiMWVkNTlmZjZjYzA2NDk5NzRkYzVjNDk1OTdjNjE4YWZjODg5YjJhNDZiMDQ0MzI5IiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:41 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae8540c7bea56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10423,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (387)","md5":"58a2067b843dc9dc4c3a0640e2bf4efc","sha1":"4c39aa8399a7a6667f87850e66e01912e6a2ae63","sha256":"57e10a4e3a99bbe2c4b6679f89452e7e1da6aa875aa5c7ecfce502b8012a9eca","sha512":"c0a7abb8bd29d86b0392e06821825fc2e6ddc8700f97ff8ffe29f0593b5d13b4e41cfee07ad4220867f5721f9bd8d2e38af8e17ebda27b205f11eb3cc12d4bd8","ssdeep":"192:fvNpgEthwoOIkfCjSuv5bkunaP3wV6xLbKXhsz23bSeH2Q4Uvdd5+JwnU:X7SRfyXKFoPRsaLvHV5+JwnU","tlshash":"0f22b4321060b0372963a5c6faa1234fb5f1e517dd270a54bafd52988fcbec1ce9b505","first_seen":"2025-10-31T22:38:13.409821Z","last_seen":"2026-02-17T03:30:40.122356Z","times_seen":4519,"resource_available":true,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-15T19:25:51.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /0McFNjD!wR2CzxRsYSwDkgb/ HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6InR3RXh3TUlGZEh2OWgwMVRXdm8wUFE9PSIsInZhbHVlIjoiR1JQSWhGQ1dnU2Y3ZytHbnFyTVVXQmZQdDMwUHdoWXF4MyszeVdTdGRqSU1sY1Nmd2JYY3FJT21TaWVKVHNnbnNnN2QzdTlyVHpKY3E1aHJEVFh5N0xLZDVwTldTREd4anR5cWR1QnIvUzFLMWlNeW9sZVNGZEt6YU5zWnlkVVEiLCJtYWMiOiJmNTRjZTMwMzQwMzE1Yzg0NWVmZmYyOWUwNWI3NGM1M2IyZWE0M2Q3NzBiMTc1OGQ4NjRmMzk5YTYzYjUyZjJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllkeEtreThnanhjVWpzQ2c3REFVcWc9PSIsInZhbHVlIjoiWUptZ0xLU0RBdGttQkVXU1laMXc5Q3ZkYThmQVYxWXdKWWhCZVhXbFIrcjJMNGN1UGxUQ05BRFU5cVA3dUpJRW15dCtENUNVWk5vcUlOaHh1L2ZQaEVnZmlneDR3YWRZL200WEZyakV2QXJLUTZxQUY0R3U4Yjd4cHUvU3R2M3ciLCJtYWMiOiJlODU3ZjdjMmE2OTA2NTU5MjRkZGI2OTNhZWQ5ZDZkMzVhMDYxZmUxNzE5ZjVhZWM0NTQyMDQwNjU1ODU0MDdhIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:51 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sJFqKq6O%2FeJPGgfm2Tz4Cw0JZZcOQ2HOddIL1bKGHbDH88DwOpaR3jvWo7Kipf6fLgxI1lseJsh1GtHpJSr7CGZp0m0VTT8Y\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImVxZzVEMW9iaTAybTltN0R0QU1tb2c9PSIsInZhbHVlIjoiZDNhbFdtK29HdmdNRzlRWG5rSzBWckVJWldsMEU1UEZEU01ZTGNxOXlsYTR2V0ZLTnJEbzlPemVCUnlwWGNiMWJXN3pvTENDMlJhaDdqcXBrRXNuSnV2dklDdFJyL1BmOEJYOCt3bHlseFIxZjEyV0d1S1ZiK3RDUWVKZkRPYWYiLCJtYWMiOiIzOTdhZmEzNTljNGY2Y2U0ZjAxZDdmNGU5ODg3N2NlNTlmMTMxZGY2ZGJiYmI2NGNmODcxNzg5YzAwODk0ZTdhIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:51 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6Ikt3bzNNT1h6dEdIMTdiYmFUU2xlNXc9PSIsInZhbHVlIjoiK09MWldKbGlrVUt3V3ZVK05mSnhrS2dURGxPMEYvZFFaVDl3TGUyd0xBdDJqdlJlbG11dndCZnhNTHBOL1dUQUN2ci93L0JXTmxvSVpoNFhBYkdoOWc1ZXJOOVZiOVc2WkpINUNtTThDWW1KTGZycnNLcTA5UVFmUGdiZmk3UmciLCJtYWMiOiJmMjEwOTNjY2I4NWQ4ZmZlNTA1NmMxZGMyM2Q0NTg1Zjk0MzJiMTk3MmNjYTc0Y2EzYzliNTU5MTQzOWZiOWVjIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:51 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae8544bef9956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1468), with no line terminators","md5":"8e858ee8828bab99646c43d5048a0d1c","sha1":"7b1b3143427c95a7e28042a775433e770c9abe00","sha256":"bf7ca75f5194580d992ed50c778727e89e8e98169e33cb353c333bb17afeb38e","sha512":"9447fac32ffc5aff3983506ec7324ed4d2e087ccb17214ecb101b17f5d08dcecd2741843c272b3978864e8517f95c22c817200d70913d209a46ac3dd07234694","ssdeep":"","tlshash":"82314492a162953c1733d9d265dbf24e8bb81a30b304ecd2064db45205df6f4c9af5e4","first_seen":"2025-12-15T19:26:10.41955Z","last_seen":"2025-12-15T19:26:10.41955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/favicon.ico","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:51.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVxZzVEMW9iaTAybTltN0R0QU1tb2c9PSIsInZhbHVlIjoiZDNhbFdtK29HdmdNRzlRWG5rSzBWckVJWldsMEU1UEZEU01ZTGNxOXlsYTR2V0ZLTnJEbzlPemVCUnlwWGNiMWJXN3pvTENDMlJhaDdqcXBrRXNuSnV2dklDdFJyL1BmOEJYOCt3bHlseFIxZjEyV0d1S1ZiK3RDUWVKZkRPYWYiLCJtYWMiOiIzOTdhZmEzNTljNGY2Y2U0ZjAxZDdmNGU5ODg3N2NlNTlmMTMxZGY2ZGJiYmI2NGNmODcxNzg5YzAwODk0ZTdhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikt3bzNNT1h6dEdIMTdiYmFUU2xlNXc9PSIsInZhbHVlIjoiK09MWldKbGlrVUt3V3ZVK05mSnhrS2dURGxPMEYvZFFaVDl3TGUyd0xBdDJqdlJlbG11dndCZnhNTHBOL1dUQUN2ci93L0JXTmxvSVpoNFhBYkdoOWc1ZXJOOVZiOVc2WkpINUNtTThDWW1KTGZycnNLcTA5UVFmUGdiZmk3UmciLCJtYWMiOiJmMjEwOTNjY2I4NWQ4ZmZlNTA1NmMxZGMyM2Q0NTg1Zjk0MzJiMTk3MmNjYTc0Y2EzYzliNTU5MTQzOWZiOWVjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:51 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2uTWhP%2Fh%2BNGp9gOcuZy3ufDpCMxEa213I8vNJr66uVYQoRKWvAR3adaiCuIGkxunI3iX108CGbQpPXTWudJnJJuuUKr2f%2FVO3I%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImVrdU1WazBhWDY2MndDRkt3UmtKUmc9PSIsInZhbHVlIjoiTG9Wd1pVZklNMmxTdlBGN3A5a0pSSXR1QkRVcy9mSEp4b2FXaU1FTkpyc2NYVFJlT3A4NERFUjU2N1NWb2h1c25RUmd5Q0hjb3hBQ3AwUnZjWTB1dUFWY010YlJKM05sNkZtb2FtU3NrOHJPazdLN3dRdUZwN2tLRi9ERGlBY0wiLCJtYWMiOiIyYTEwYTBkMzQ5YmZlYWM5NWM2MzQ5Y2FlNmYxZTQ5OTczZDk4MWQ0OWVlNGYxOTM0YzBmODM2ZDJlYWYwM2I4IiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:51 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IkgrTk9MRGE1d3Rhbnp0UU9ZWmowRHc9PSIsInZhbHVlIjoicHNEd1pQNFRNaExUM2dHSGlKSG1wbGg0RUJOMUtGMnYrbGNrRkh5NDByWDZMKzFwclV1eG9BOUI5SlFDK0R1VnhRa0dNOTZkbEZWczJqQjgxVFVEM3lXT2k0Uit4UnhiYWFyY2VSZ2h5STM5dWxuM2JNbWlrRjZVY0Y1MnVvNXoiLCJtYWMiOiJkYmVkZGFhZDcwZDlhYjk2ZDQ0MmY4YzA4YzI2YzU4ZDQxZWFhODgwOTBmMWZlNzc1YTdmMzA5NmRkYTZkOTA2IiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:51 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae8544e1fb356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14150,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (377)","md5":"78205d9016de2e597479f4d2afa2553d","sha1":"403cf36d2420d8069dcf3f6d496cd65e762606b0","sha256":"0f119d5572942fd873942e793d2fecad09a1e559d12896534f021e4e6fab2fa4","sha512":"6e97ae8e87b621afa58c2befad09dbaa1b750adf8e6a4b9fa873e0a6f7e123daae0c00fc07a57b33bf3d884a887518e2dcb4c22cc2469cb1fd2a106b3bb34d89","ssdeep":"384:PRaGboRKozZd9qBpKJSmf0l+uC1CmSBzA:BboRBr986f0l+11/28","tlshash":"9852613250a0743b2923e4c6aa61574f79f1e51bdd270640b6fca2e44fd3dd2cea7609","first_seen":"2025-11-01T06:14:30.995109Z","last_seen":"2026-02-17T07:18:09.17602Z","times_seen":4555,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js","fqdn":"ajax.aspnetcdn.com","domain":"aspnetcdn.com","tld":"com"},"ip":{"addr":"23.36.77.73","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:52.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ajax.microsoft.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure ECC TLS Issuing CA 04","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 15 Jan 2025 17:50:49 GMT","end":"Sat, 10 Jan 2026 17:50:49 GMT"},"fingerprint":{"sha1":"67:7D:DB:2D:BB:27:07:2D:C9:20:48:81:00:BE:4D:DC:81:08:A9:2D","sha256":"59:BC:DE:80:EE:F9:3D:BA:D9:06:0B:44:03:DF:2E:89:FC:64:EF:D9:5B:25:01:51:86:C6:B1:37:63:A1:7D:30"}}},"request":{"raw":"GET /ajax/jQuery/jquery-3.6.0.min.js HTTP/1.1\r\nHost: ajax.aspnetcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 30982\r\ncontent-type: application/javascript\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\netag: \"803056b57d10d71:0\"\r\nlast-modified: Wed, 03 Mar 2021 22:36:53 GMT\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: public, max-age=31012849\r\ndate: Mon, 15 Dec 2025 19:25:52 GMT\r\nvary: Accept-Encoding\r\nakamai-grn: 0.454d2417.1765826752.204f4218\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-04-04T17:41:44.090376Z","times_seen":444933,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":33,"dns":1,"connect":1,"send":0,"wait":8,"receive":4,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/lmJHRpjZ0vryIuysQnLKkYLyEkwg09PeIF5ikGgFJdfw","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","date":"2025-12-15T19:25:52.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"POST /lmJHRpjZ0vryIuysQnLKkYLyEkwg09PeIF5ikGgFJdfw HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 6\r\nOrigin: https://midi.traipeapu.biz.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImVrdU1WazBhWDY2MndDRkt3UmtKUmc9PSIsInZhbHVlIjoiTG9Wd1pVZklNMmxTdlBGN3A5a0pSSXR1QkRVcy9mSEp4b2FXaU1FTkpyc2NYVFJlT3A4NERFUjU2N1NWb2h1c25RUmd5Q0hjb3hBQ3AwUnZjWTB1dUFWY010YlJKM05sNkZtb2FtU3NrOHJPazdLN3dRdUZwN2tLRi9ERGlBY0wiLCJtYWMiOiIyYTEwYTBkMzQ5YmZlYWM5NWM2MzQ5Y2FlNmYxZTQ5OTczZDk4MWQ0OWVlNGYxOTM0YzBmODM2ZDJlYWYwM2I4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgrTk9MRGE1d3Rhbnp0UU9ZWmowRHc9PSIsInZhbHVlIjoicHNEd1pQNFRNaExUM2dHSGlKSG1wbGg0RUJOMUtGMnYrbGNrRkh5NDByWDZMKzFwclV1eG9BOUI5SlFDK0R1VnhRa0dNOTZkbEZWczJqQjgxVFVEM3lXT2k0Uit4UnhiYWFyY2VSZ2h5STM5dWxuM2JNbWlrRjZVY0Y1MnVvNXoiLCJtYWMiOiJkYmVkZGFhZDcwZDlhYjk2ZDQ0MmY4YzA4YzI2YzU4ZDQxZWFhODgwOTBmMWZlNzc1YTdmMzA5NmRkYTZkOTA2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"data=u"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:52 GMT\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHmfgSPxQMkmLurKF3rbWrrwQtHSgyzYrT325ywD0dDNgvbHS0kl4Gk4Ci1%2FcYPbmDPU4uSpgORJdFdCoA1k7BDs0fRn9e8r\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Ik85Um4weU8weFBabHZtZUVGSEM2RVE9PSIsInZhbHVlIjoiWXVkSklHUE9BN1JxNExRT3VkUTlTWjdsR2Q1OHlIbXpTUjV2SUlKcFdTSDBMd1k4RjNVMWVQR3daRzJRc3pNbTB0N3dwb0hMbjRDWmhjZXVVTmVLL095YzJSWUViL0s4bnUxRWdwZndheURicGt3V3ZXYzNzMXg2Q21RZm5PbzIiLCJtYWMiOiI0NDRjM2Y4NGUzYzc1ZmJhOTI4OTFmNzIxMDYyOTAzMWUzYWY1MWExYTBmYTg2Y2JjZjYyN2M2MjgxMmJhYmViIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:52 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6Ijl5cmdJUzVDOGRWWGtsdW94am5JdWc9PSIsInZhbHVlIjoieDFRa3l0ZVZ5Z3J5VEtYbm9LYXZNNTU2UWxxWjhBeTNvNG14cEFlU0I0VGlWWWZCelpLWEg3bjNQSDZPMzZFbkt3SVA4VWZRa2VmeXFkUXFRMStCeTEvL1lXbVg4a3NMYmNDcXIzeHJpQm1rZXFiVDYzaUFabnFCZ1ozUTBUQjEiLCJtYWMiOiJhY2U5MDg5MWY0YzljMDBjZDc1YjRjMzY0MTg2NGUyYzcxNjg5NzM0NDJjMzgyNjM1ZTYwZmViMGY2ODA1ZTg1IiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:52 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncf-ray: 9ae85450efca56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"63eb9b33263be690ff359295f9f7cda6","sha1":"9f832daba130b28a740c4cdf5e48b6c9d8c8aadf","sha256":"485b97003aed6df42ed17224af1b3aa86e36ab785994f7b80d9121285a789360","sha512":"d11a527d4173beffe4d9797074ab783d9b78095a058836c1778bcbcc59b165cccfe7305fafad8880e55d04cc2552ffa8e893a81cf29396ccc44378b4a034905c","ssdeep":"","tlshash":"f3e07d75bc59025d8802c6896986848708a3726b50c0d32c2512a76450573b6a7003f6","first_seen":"2025-12-15T19:26:10.421658Z","last_seen":"2025-12-15T19:26:10.421658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/GDSherpa-vf2.woff2","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /GDSherpa-vf2.woff2 HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6Ik1QUUhyOHJsSjJtU1ljUElQQzRNbWc9PSIsInZhbHVlIjoiVDh6OTRpd2FRKzRvUmdQblpObWJvZzBZT25YaE5RT05IOEFkVmhDV05PM1N3cDJiaFBEdEY0bEkzTHVKQWUrRHN2RDRvTENIdmFQSEh2RnNrRVVtN2hiczRUczBsYUZldTlidUNXT1JRWElhZGtLMnAveDloeVRqOXBkYmtiemQiLCJtYWMiOiI0M2FmMDY5OWFiN2VkYzUzMjRkYzBlMTQ0MTA3MjRiNGJjYTdhNWNjMGNmZmM2OTIxNzkzYmNhYjBkYjlmMDhlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InhINVdEUmlZOXFESVE2NVpvRllJTlE9PSIsInZhbHVlIjoiMWJ1NnhEWVBZUXN0RXlIdWIwTGV4dTUrQlFKQys1Q2RldHVIaW5iamloSTZrci9iK0NMRS9pdlprSFRaT25ROEdTS2lObm1HWUczL3NEaER4bTFLNnlCNnlLR2g4OUM2emNjTytTMWF4VHNNUW5NS3M5eFFHamlmTlVnR25QeTEiLCJtYWMiOiIxNGVmODRjYzU3NWJhOWVjYTVjNDU3NzgzMGY0NTQ0ZDkxOGQ5ZmE4ODZhNDUyYjI1Mjc0MjAwZjEwNDczNGMwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:55 GMT\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-disposition: inline; filename=\"GDSherpa-vf2.woff2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 15 Dec 2025 19:25:55 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f8FLgfjudkCPzoMOgl1IOCzCK2rmZR5uUcQLfKgl5TGYNRp30%2BSYtvXYi6rei6M9MSrXS5iQE6Plh4GOSG2WHt1sJWlMrD5bG6g%3D\"}]}\r\ncontent-length: 93276\r\ncf-ray: 9ae85460685956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93276,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 93276, version 1.0","md5":"bcd7983ea5aa57c55f6758b4977983cb","sha1":"ef3a009e205229e07fb0ec8569e669b11c378ef1","sha256":"6528a0bf9a836a53dfd8536e1786ba6831c9d1faa74967126fddf5b2081b858c","sha512":"e868a2702ca3b99e1abbcbd40b1c90b42a9d26086a434f1cbae79dfc072216f2f990fec6265a801bc4f96db0431e8f0b99eb0129b2ee7505b3fdfd9bb9bafe90","ssdeep":"1536:Dy7KSLv+MMqDeeIgDFSxpuQP7ObnKSWBO61LlRzSSAT6YmkSzOu7Be0OB53jIH4I:Dy7JD+net+puI7ObKHVhTSSlYmk4OuWa","tlshash":"d293029c71ec79c19e00616e94c92535f89fdab0f049d3fa9a4ed85b927c369e343b10","first_seen":"2023-05-01T02:20:29Z","last_seen":"2026-04-03T14:38:11.338063Z","times_seen":91677,"resource_available":false,"data":null}},"time_used":798,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":520,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Microsoft","verdict":"phishing","severity":"medium","comment":"Resource associated with Microsoft phishing","tags":["microsoft","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"flagpedia.net/data/flags/w20/us.png","fqdn":"flagpedia.net","domain":"flagpedia.net","tld":"net"},"ip":{"addr":"104.26.5.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://midi.traipeapu.biz.id/t1zgjtsjl8?id=7516e1a9c290504f-6b37cc59-2a04c51d242-b431727f8d-5092af5e969f-0c1ee2e9-91736ba042272e-21e3a89e7c4-c757778f66cd14-6f2c8802a9b852d6078d9","date":"2025-12-15T19:25:54.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagpedia.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 02 Nov 2025 23:43:53 GMT","end":"Sun, 01 Feb 2026 00:40:16 GMT"},"fingerprint":{"sha1":"B7:FD:C2:BC:6D:2E:04:C0:6D:FB:99:6E:AF:FB:03:85:8D:1D:55:C0","sha256":"EB:4F:98:C8:EC:73:12:80:FC:36:72:9C:C3:9C:F7:5E:C8:6E:84:A0:83:18:1D:98:D2:C7:FA:26:25:4E:CC:5D"}}},"request":{"raw":"GET /data/flags/w20/us.png HTTP/1.1\r\nHost: flagpedia.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://midi.traipeapu.biz.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 175\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-af\"\r\ncache-control: public, max-age=31557600\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3650489\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4bCxN62CZH%2FTZ9ToT0iDu4BLFAtHAYikvSra4RuQhkNH%2Fp6RIGruUw9cMexSqg6BW2xCWdq5P%2BNFNaqDjh7yCjXxjdDAjpQH%2FujORq8%3D\"}]}\r\ncf-ray: 9ae85460ee5a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 11, 4-bit colormap, non-interlaced","md5":"a5f97a0f56d94de1e38a2265dea61801","sha1":"a9abb61b8597864a78db0c1810b7a20b8492fc23","sha256":"585de11254ccfcc19026fc580881220bd893dae0d151a1c3868cc8a9e7f3c695","sha512":"c36c89cbd5113f669b3f9c1559e167974f2f3276cafe02f2dc4c6d76fff57f456898f268bfe29674986832acd3411953e574d6c02a8018e0995f500109dadd3d","ssdeep":"","tlshash":"75c0c0fb60024c2c4acc4d33c8039100f4e6cc0e061a171f5452523e050d1c180c52c3","first_seen":"2025-07-03T21:12:41.511423Z","last_seen":"2026-04-04T18:21:32.073119Z","times_seen":1122,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":75,"dns":54,"connect":1,"send":0,"wait":9,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"midi.traipeapu.biz.id/0McFNjD!wR2CzxRsYSwDkgb/","fqdn":"midi.traipeapu.biz.id","domain":"traipeapu.biz.id","tld":"biz.id"},"ip":{"addr":"172.67.139.185","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-15T19:25:40.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traipeapu.biz.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 19 Nov 2025 19:31:51 GMT","end":"Tue, 17 Feb 2026 20:30:13 GMT"},"fingerprint":{"sha1":"DB:EC:2A:2B:11:9B:A9:86:AB:73:C8:69:BC:E3:54:12:18:27:85:DB","sha256":"B8:AD:78:09:67:28:EF:12:8C:22:89:8B:C4:F5:78:24:47:D8:FE:26:CF:C3:1A:0B:05:FB:BA:21:9D:08:3A:AD"}}},"request":{"raw":"GET /0McFNjD!wR2CzxRsYSwDkgb/ HTTP/1.1\r\nHost: midi.traipeapu.biz.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 15 Dec 2025 19:25:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dm044r6nGOJjecmbSF2ZdMnj6I%2B8%2FY3pDkwnn%2B9TMKFqdL4T5frXnO%2BUyfCDKYp9AvgU6HUGSPU8owm3PFALa7gWFOLM34Do\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkFVTUxiNHdacWRIM0xnenl4TzJsVUE9PSIsInZhbHVlIjoiN3F3emdqQUlpR0RDcjMzZStEcm0xa1FhbVVFY0VwRlQ5cDVHR2xMditmUTI4RTVzMkdSZFJ1Wk9CUVBPQnNZcEJpWTBlSmkrNjdiRWNYdnlDZDhPN0xKKzlVMGhWdWtTRUUzWHNUOVhVVGY1QTl5Q0V1ajJUZ0xSREt2bTFQVTMiLCJtYWMiOiJlMTc0MGMzMTE4ZWY5MDM4YTIyN2QxNWI3MzAyY2M3ZjBmZDI3MmQ3N2RkNDk0ZTZhZmFiMGRlMzJjN2E0ZWJhIiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:40 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjNaaSt6VmYyeGUrZEZJVVRmcFZNZ0E9PSIsInZhbHVlIjoiRlAwZTZJNWY5L2d2SkxhQnp2aENtNjlQMGRBRVRPSy80WW1ZTitiSW9kVllxeGFDZHlFWTNFTXl6M0hqYUxSV3JlYmlDcGR3YXVwVzVPZnBaVE8veFVIZW41WTR6VjU0UlJCcVcxdlhhcE1RR1Y3bW5qd0J0OHBBUnIyNUhBcnQiLCJtYWMiOiJiYmRjYWRkMWY1NDg4ZTZiNDRjN2E4NDJhYTk4Nzc5YzExNzJlNjdlODVlMWUxMDY5MGVmOTNmZmJjOGQ1YmY0IiwidGFnIjoiIn0%3D; expires=Mon, 15-Dec-2025 21:25:40 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9ae8540619b056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6099,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6092), with no line terminators","md5":"6b2d020f41b2acc9383673141bd69f46","sha1":"6b62650e5bd2bc4155a1e864d436b7a0e5d4dbe7","sha256":"fbec15f51a33768cb44b421b917e4ab8c72ff300090cece60023d512e2b540e9","sha512":"269ca47980678891541fbdf518a060decb873311fd230e0d061257cb8390fa63f7fb1deef3a7fd6491dfca4a52b78dd999e17f22f174d1e2221b5aef80b0adee","ssdeep":"96:L+wCM7Qo+CczWI72XQiloF1yVcUwIJJUHqshs9b/StX:LRCWQo+CioXQvF1yVcUwIHxshQmJ","tlshash":"63c1b53372040036e642b2e87de693eab264d642f351a6b959d84055c68def1c4ffacc","first_seen":"2025-12-15T19:26:10.424419Z","last_seen":"2025-12-15T19:26:10.424419Z","times_seen":1,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":479,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}}]}
