{"report_id":"f624ced5-8f46-4b15-a57e-71605659704a","version":0,"status":"done","tags":[],"date":"2026-07-17T08:41:03Z","url":{"schema":"http","addr":"danaanew-indoonesia.lifesstylenew.com","fqdn":"danaanew-indoonesia.lifesstylenew.com","domain":"lifesstylenew.com","tld":"com"},"ip":{"addr":"172.67.155.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"danaanew-indoonesia.lifesstylenew.com/","fqdn":"danaanew-indoonesia.lifesstylenew.com","domain":"lifesstylenew.com","tld":"com"},"title":"𝗗𝗔𝗡𝗔 | 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗖𝗮𝗿𝗲 𝗗𝗔𝗡𝗔","dom":{"size":19632,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4768)","md5":"8226cfa6e96548ce7025bf8625fc8249","sha1":"ad65094e873d2575067a33f733d6708ef7c34097","sha256":"c1749b836539983c08af1e6235bbcb4f713b73843040e54eb7f8b09b067d050f","sha512":"a91c4d22e1ba7f3c1c16e0827b85029eb939671439fdefeaef917879a52ea6b38cc8e9120b028e781001cf826b2985f3eecfa3f8a4620cec10017bb7ca2db349","ssdeep":"384:DxFr/OEGvjxuSESrOAG22FGFmFsFJo5ENgOicKxX:DtYOAG22FGFmFsFJ8qgAKxX","tlshash":"c992659399421117241684d93757af4a3587e1078e6ac8a17fcc439aafce6e09cfa3cd","dom_hash":"domhashd672d70aff33c456b6ffe02cfd3b8542","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"danaanew-indoonesia.lifesstylenew.com","fqdn":"danaanew-indoonesia.lifesstylenew.com","domain":"lifesstylenew.com","tld":"com"},"ip":{"addr":"172.67.155.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-07-20T08:41:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"danaanew-indoonesia.lifesstylenew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"danaanew-indoonesia.lifesstylenew.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"danaanew-indoonesia.lifesstylenew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"danaanew-indoonesia.lifesstylenew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegra.ph","ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":2920,"first_seen":"2016-03-03T04:27:14Z","last_seen":"2026-07-15T04:38:19.389532Z","alert_count":0,"request_count":13,"received_data":485504,"sent_data":7488,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"danaanew-indoonesia.lifesstylenew.com","ip":{"addr":"104.21.90.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-13","domain_rank":0,"first_seen":"2026-06-30T18:30:46.636801Z","last_seen":"2026-07-16T12:29:56.443605Z","alert_count":4,"request_count":1,"received_data":14885,"sent_data":506,"comment":"","tags":null,"fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:3.3.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":1,"received_data":19540,"sent_data":614,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.dana.id","ip":{"addr":"23.214.96.81","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"domain_registered":"2017-07-14","domain_rank":103065,"first_seen":"2018-07-06T01:48:16Z","last_seen":"2026-07-13T00:31:17.446504Z","alert_count":0,"request_count":1,"received_data":102057,"sent_data":555,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.ionicframework.com","ip":{"addr":"104.26.6.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-09-02","domain_rank":164865,"first_seen":"2014-02-05T17:09:16Z","last_seen":"2026-07-10T22:56:07.738739Z","alert_count":0,"request_count":1,"received_data":52661,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-07-13T08:04:43.600548Z","alert_count":0,"request_count":1,"received_data":123459,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":1,"received_data":6877,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-12T22:42:14.264548Z","alert_count":0,"request_count":1,"received_data":90485,"sent_data":509,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"e-formulir.mwebs.id","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-03-18","domain_rank":0,"first_seen":"2023-08-26T17:19:56Z","last_seen":"2026-07-10T06:58:14.796184Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":594,"comment":"","tags":null,"fingerprints":null},{"fqdn":"encrypted-tbn0.gstatic.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-31T02:32:18Z","last_seen":"2026-07-16T17:40:58.786151Z","alert_count":0,"request_count":1,"received_data":12355,"sent_data":623,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-07-12T22:48:41.233588Z","alert_count":0,"request_count":6,"received_data":253571,"sent_data":3395,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-24T17:56:41.515014Z","times_seen":263070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-24T18:00:01.610996Z","times_seen":108631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"danaanew-indoonesia.lifesstylenew.com/","fqdn":"danaanew-indoonesia.lifesstylenew.com","domain":"lifesstylenew.com","tld":"com"},"ip":{"addr":"104.21.90.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e0330a91f898f8dca2d25621beb7291","sha1":"92c4a38c3da7de8ee9e746c682941543afca83af","sha256":"52ee5f3479345c5c490da435b10185d78bc6556a97570cd102df341b4da6bf03","sha512":"b0aa0178bad425c434c32b548d022f4167352b1aa5781d93f37f852129699d7d095e43415c760857d4f2a5157a8c8bbf3c93a06dec4c00336c9b201f5e41538e","ssdeep":"","tlshash":"51d09b1b60ad6031093774045fbfb4045f677807140db9e47a4c17944f1d3196023544","size":210,"data":"","first_seen":"2026-06-08T01:51:52.830632Z","last_seen":"2026-07-24T17:21:52.295541Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"danaanew-indoonesia.lifesstylenew.com/","fqdn":"danaanew-indoonesia.lifesstylenew.com","domain":"lifesstylenew.com","tld":"com"},"ip":{"addr":"104.21.90.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f58a0e20e265bb08d8b4ca9fc23ff51","sha1":"7ed758fdd8a7b1f9f4624679ae980ba3162961b5","sha256":"3a0b2ccdd5ebda1d532208925b8939dd6723bca2f998367c72dbdbf8406ee298","sha512":"ba9516c9c70da83492db5b653724047ab8285def2fddc3fd39eb4bb30456318c5f54c83b994951964cc6dade6c723737964f3700f7253cb2c71206f934c4a643","ssdeep":"","tlshash":"93c02bc630f121014cb6197359f2118c307901752c4cdb806e24d5226f1031fb5a7ac0","size":139,"data":"","first_seen":"2026-06-08T01:51:52.831528Z","last_seen":"2026-07-24T17:21:52.2964Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.dana.id/favicon.ico","fqdn":"www.dana.id","domain":"dana.id","tld":"id"},"ip":{"addr":"23.214.96.81","port":443,"asn":35994,"as":"AKAMAI-AS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.762Z","timestamp":1784277636762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dana.id","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 26 Feb 2026 00:00:00 GMT","end":"Sat, 12 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E9:ED:91:2F:F6:34:69:BB:CF:66:8E:63:5D:69:16:87:82:99:AE:A4","sha256":"16:17:3A:E7:2F:7B:EB:4C:69:22:7D:50:49:62:BE:03:6D:BD:16:91:F7:66:A3:34:B3:D7:A9:8F:A4:22:5B:73"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.dana.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 11 Apr 2023 09:54:24 GMT\r\netag: \"64352e50-18c5f\"\r\nx-ua-compatible: IE=Edge\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: br\r\ncontent-length: 4296\r\ncache-control: public, no-transform, max-age=7165031\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1784277636786_399869521_2472061790_50_15170_4_58_21\";dur=1\r\nalt-svc: h3=\":443\"; ma=93600\r\nakamai-grn: 0.5186d517.1784277636.9358ab5e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":101471,"size_decoded":4882,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"8f1bac7ae69451bdf9c44b09577cf28c","sha1":"4fe47a2d13f8b8bdf5966dc6c4e9e245b00e91c1","sha256":"8cd0ee2909907b3b0f78d1fd1e7223e2ecc90069261768d98c4b8c7cbee0f9f5","sha512":"7a33d5879926c4bc7e69f66eebca9e0e5a1ba1dc04d5fb4b058acf0ae20e2f18693c423fb9b3f19433a940cd3180d2eecaed4ae1bb60e84ca5e0383bfc6a1a9a","ssdeep":"384:wsa0333K///bggnggnggnggPgg/gg/gg/gg3HabzXDbHG7FHWJ:wX0333K///THabjGpHi","tlshash":"74a36192f109c25ee17c5471be00c2e4f1a2fc67e855cc2eb8da772e5db1e88ca25617","first_seen":"2023-05-23T04:54:26Z","last_seen":"2026-07-24T17:21:52.289696Z","times_seen":1517,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":20,"connect":3,"send":0,"wait":19,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.ionicframework.com/ionicons/2.0.1/css/ionicons.min.css","fqdn":"code.ionicframework.com","domain":"ionicframework.com","tld":"com"},"ip":{"addr":"104.26.6.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.305Z","timestamp":1784277636305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ionicframework.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 18:30:38 GMT","end":"Sat, 19 Sep 2026 19:30:31 GMT"},"fingerprint":{"sha1":"5A:64:39:55:E8:40:2B:7D:CD:F0:ED:2A:22:3D:94:44:A2:E8:36:61","sha256":"EB:B4:85:71:FB:41:90:9C:07:7E:C8:C6:A6:A3:2C:2D:29:35:2D:F9:D8:E3:3E:21:52:9D:92:9C:7E:CC:57:F9"}}},"request":{"raw":"GET /ionicons/2.0.1/css/ionicons.min.css HTTP/1.1\r\nHost: code.ionicframework.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncontent-type: text/css; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Wed, 15 Oct 2025 14:38:53 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"68efb1fd-c854\"\r\nexpires: Wed, 01 Jul 2026 01:59:18 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4742:1C6B08:B1F50:C631A:69C48981\r\naccept-ranges: bytes\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\nvia: 1.1 varnish\r\nage: 1407034\r\nx-served-by: cache-bma-essb1270041-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1775745588.430885,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 81570def1b433ceed36ca80d3ae6cadc3dcc4675\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self'; script-src 'self' *.ionicframework.com ionicframework.com; style-src 'self' *.ionicframework.com ionicframework.com;\r\nstrict-transport-security: max-age=15552000\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdFulfY%2FnobVCKy9vc04Iz1QKhuNhVBtefcOpmSoD2XNan5y7WIF8mGCgyzA1Nt84uq2nH8y1Vgj4eCAzBPxq7xLMZs916%2F0I0Jh7f%2FMcr8h0eaiMDHVYs7dN9NF%2Bl7iVEKhaSPvr1GA\"}]}\r\ncf-ray: a1c7f15b1848568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8313\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51284,"size_decoded":9690,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (50802)","md5":"aed7997754b0bd942995126653dfc81d","sha1":"89568702c732f4c0b629e068f56bc3812cf5f5a2","sha256":"95d37d2b4f6dc57aca2141a52aafe6e34fb6cac97983f8205c7befd824c62d42","sha512":"e79677cd4bed1609de5ad33c5a6e09e223f33e0d1835e300416382bdcea7e984cfe0c28ac268d41cb311b2ed0717747e4e98740b98e0c21e5f409e3652238541","ssdeep":"384:R48wBhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:R4jhhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"ef33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-04-07T10:41:49.428708Z","last_seen":"2026-07-24T17:21:52.280269Z","times_seen":5737,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":6,"connect":19,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.310Z","timestamp":1784277636310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 533\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"6f0-qUoFmzF4tK3sCeMoGs4oGaMAlaQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230121-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2721545\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOs3KGVXmgJhXn5xTdyYBjkx9HQ%2BoSicnIPpEhg4pXVSzl7jfcs2SFyubGjpRT7NxAVMN1SZMhHHNzTAD15gijVq0lYOwCro9tceQj06X0B8zoGn430vzNn49XUAyPeRgTU%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1c7f15b2b7c3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1776,"size_decoded":1627,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-24T18:00:01.579956Z","times_seen":71992,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":5,"connect":5,"send":0,"wait":6,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.315Z","timestamp":1784277636315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://danaanew-indoonesia.lifesstylenew.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 28778\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.2.0-beta1\r\nx-jsd-version-type: version\r\netag: W/\"2f3f9-YnOsGiPXmhIvAi9qh8W3XCz6/Do\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220064-FRA, cache-rtm-ehrd2290037-RTM\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3207880\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KmLhU7aWNjs0OHoyjZaEvIzqVWYL98m0M7%2Fknz2%2BGv2xhJUJan6iX50LWt0nZebX5vYZ7EHwsSNozxu7mrFdlmfU1%2B%2BFOU0oEAot2Fj1ZgkLhgccm1TxCXFJuGr2zBvBeLc%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1c7f15c68645695-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193529,"size_decoded":29920,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"6d9c6fda1e7087224431cc8068bb998f","sha1":"6273ac1a23d79a122f022f6a87c5b75c2cfafc3a","sha256":"fb1763b59f9f5764294b5af9fa5250835ae608282fe6f2f2213a5952aacf1fbf","sha512":"a3f321a113d52c4c71663085541b26d7b3e4ced9339a1ec3a7c93bff726bb4d087874010e3cf64c297c0ddd3d21f32837bc602b848715eadd8ef579bfe8e9a9a","ssdeep":"1536:xtGMGH2K5wlP7WIgHf73Z6LsKkVkpz600I4lp:xtGMZvkVkpz600I4lp","tlshash":"be1482d6f190303d98a7c2499591fefd866fa585d7024aaaf0137b6847ca7c30963ecc","first_seen":"2023-04-06T08:38:45Z","last_seen":"2026-07-24T17:21:52.242929Z","times_seen":4756,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":2,"connect":4,"send":0,"wait":7,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/2f6ceb2e5a1a2fc7ed4ca.png","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.345Z","timestamp":1784277636345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/2f6ceb2e5a1a2fc7ed4ca.png HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 12780\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"eb509dca9eb4a6cd3dda6ee7328b94a297483694\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12786,"size_decoded":13156,"mime_type":"image/png","magic":"PNG image data, 382 x 112, 8-bit/color RGBA, interlaced","md5":"6fd5a7d18a8f7c04bc5effcdc5235987","sha1":"c4852c577f44fcdf78fb439a30ea2c6c6983b140","sha256":"c67e5431f9c00bb690ea8b8add63d5ca9250bf2925f2c2a691eeee498ac75853","sha512":"13e05a6f89b8110f1867efbbc6a7bf216471ff5cad3739ac3c34e30aaed670844ed8de5b220eb449b174a272bcabef07a96f13f936a34aedd754e6a8ed3cc991","ssdeep":"192:olyA9pk9pGYsPVMm80Y0xf43FmSqf6x0LUYMTo2OZ9:olyA9pk9kYaV+0t43Tqf6KU/82Of","tlshash":"2642cf03f9de13005f6a367eaa2500be41aadd795a8905a2666c6c2ec177700ff988c9","first_seen":"2023-06-26T01:49:46Z","last_seen":"2026-07-24T17:21:52.291136Z","times_seen":3610,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":160,"dns":1,"connect":19,"send":0,"wait":108,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/be0c88ba14ca044776e1c.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.347Z","timestamp":1784277636347,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/be0c88ba14ca044776e1c.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35862\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"0eaeb478858ca529e1bcc7b41201a60565cb5259\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37724,"size_decoded":36239,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 669x286, components 3","md5":"41b022c125311aab691ffc19ccfc3286","sha1":"f73662c40dce4b9917037e9981c56cc0c9abc6fc","sha256":"543191cf2c750cd2a358f15ed391e3912f55a40cc81e04ea78e7719b02210f54","sha512":"029ea90159047e0b526c81ff1d10b9606aa4a23ec24924655f8553750af65e6c59d50a0df4209651c7ce4529421a702d5dd4b14a87ff87c5be1e7fe5bee71053","ssdeep":"768:0bGmGE46bzvxcjqF47e8PLx9J8XeB6WGb9OBJ5Mtv16KxOvq:0mN6bzJYqt8TbJ8XeB6WGZAJ5MFE6","tlshash":"fd03f14105e0c216eb9756be12a89b82d732747b25cf5bd88118bcbc0bb46e270dc9fc","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.22941Z","times_seen":148,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":132,"dns":1,"connect":24,"send":0,"wait":110,"receive":19,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/ff817316449f76e14fb2c.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.351Z","timestamp":1784277636351,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/ff817316449f76e14fb2c.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31095\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"4dddc8e58f78918954ab00811adbd7b9e435738f\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32297,"size_decoded":31472,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 767x400, components 3","md5":"dbbdbc43caf6711d00d7ac9928c59d9b","sha1":"11df2b0495a13f3ddfccc1b1ef99a5d4d6208293","sha256":"ddcdeb52e267f261ad7ca437499a9ea6d79787b9ee3626853a62ec45b404f28b","sha512":"a077ab75674407b35fb857b8558da4c5fa67c639d00ca58f4b8548ac90e9e2212bb581509476c5af7a2845a60ee70d9507d06dc76e0b9228f8e197e5843537b9","ssdeep":"768:amrbOo+hnSm7RgEGtsswziGBXrVxTcIgO3Ib4meFVy:amrp+JfaDtsswuGBXxxgQ3kxe7y","tlshash":"14e2d021cfadc3a6c197a63270c12dc4f7047d29d3f6d74a32a46a7123992f1c52a6db","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.245516Z","times_seen":145,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":131,"dns":1,"connect":22,"send":0,"wait":108,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/1214de4228752b76ef775.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.355Z","timestamp":1784277636355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/1214de4228752b76ef775.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 64817\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"ee42d4d145995737ba8d48b4ae492854ac14db19\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65956,"size_decoded":65194,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"779bd4ecaa34e87b57fd3a28511abfe7","sha1":"fba85f301b4f22473e205f07aff557e0d553db39","sha256":"99b4ce7a8d73432d6752093fde14d3b43a954a4c217b9925143c1905e5dbd9e3","sha512":"4f372bb44c434addcc03560038a6e9406c985d8029866ade8d1133d5ec55d57001059c66215867ab568ab2dd79788531fa6d2c5508eb4366565d38d59a943792","ssdeep":"1536:MaYM3y5JGV3evNq64rg6Tq/9ttBSthnRB0U1Amv2W2QTCzdyx05saLWt:Mabyeeg2LmBVam3m/ql","tlshash":"3853028bcbcb8c46e85923b960f775d4ddbdb3ba0474c0582a40ca22fe166470a77e57","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-07-24T17:21:52.291859Z","times_seen":141,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/df54e3f92fa6e1a99fd82.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.358Z","timestamp":1784277636358,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/df54e3f92fa6e1a99fd82.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 60310\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"520e6b0e7f20db88a2815d99da0ee087e2b47d2c\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61380,"size_decoded":60687,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"39e68bf37020490b5c541782726b9adf","sha1":"819bd8309ea32f5224694dfcb7c6f15bdc2fad1b","sha256":"a87d5d63f8f86283daff34bd01361ef78ff6a69405b9d364720663be2807b8f9","sha512":"a479e1309ea00f30b909321a4de9171f27bbb0a463cc1c596f273b997122ed20dbe76ab2289129aadb428390e4590d8cb7554e08f73b3d549b4d9799d8405b04","ssdeep":"1536:r2vMVwO69w88cDyHyefahdHmIgk3IBrEtWCwC:QUwOM8LH7fAyi8rAQC","tlshash":"4a53f208631de691ec6a147c4ad1b319ad17b92f1f828701748728748df32e5eac4ba0","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.250019Z","times_seen":147,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.308Z","timestamp":1784277636308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 06:33:56 GMT","end":"Tue, 29 Sep 2026 07:33:46 GMT"},"fingerprint":{"sha1":"95:C5:B1:CC:FD:2D:A2:1D:9E:F8:29:11:70:8F:C2:32:DB:0A:16:D8","sha256":"67:23:C0:55:AC:EE:9D:BF:1F:32:F6:C6:31:3A:5A:3F:85:B5:50:88:71:96:38:D1:BB:37:21:B0:0C:CF:B9:EA"}}},"request":{"raw":"GET /bootstrap/3.3.5/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"5d5357cb3704e1f43a1f5bfed2aebf42\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 07/03/2025 14:49:11\r\ncdn-proxyver: 1.31\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 863\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 93a677859cccc76a96b51ca410f5a0d4\r\ncdn-cache: HIT\r\nage: 3208445\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a1c7f15b1be456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122540,"size_decoded":21260,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"5d5357cb3704e1f43a1f5bfed2aebf42","sha1":"08df9a96752852f2cbd310c30facd934e348c2c5","sha256":"31fbd99641c212a6ad3681a2397bde13c148c0ccd98385bce6a7eb7c81417d87","sha512":"7537e07bfce0a0c6293fb41b1f2e2058c106b1bb1d65e097cfb8ab22d8dc0b7b0f505b5fd24b856c3cff8b11bb02b4f19838cb5c399ecc7b9b78d8a4c8a195c9","ssdeep":"768:ayPGxw/jc/QWlJxtQZIuiHlncmzI4I8OAduFKbv2ctm2Bm8JP+eckOvS1Fs:Uw/o1wIuiHlncm28lDbzzPux","tlshash":"d2c3d7a0f11031ea7323c55a71d0ed872259a153e56a4eb7f22f25d88f886cb1773f1a","first_seen":"2023-04-05T07:46:17Z","last_seen":"2026-07-24T17:33:21.946977Z","times_seen":14491,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":6,"connect":19,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.313Z","timestamp":1784277636313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick-theme.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 866\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"c49-gaQ0+U8rESTzIyu4bylE+C+yOsA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220086-FRA, cache-bma-essb1270065-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 3226630\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KM6rLjvMDb1LprwHXxZWyePIjNRSVOsgdcK%2BM%2B%2BJunDqMa2vLj9yGP%2BTsSEnYb9I3lXhncNqNW4Pgdni%2BvbT%2Br%2BBlqu%2BvEQx09wpEhNhZ7hCsskyD256MHc%2Bd9vZXLw1BMo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1c7f15c6b1e0b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3145,"size_decoded":2033,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"f9faba678c4d6dcfdde69e5b11b37a2e","sha1":"81a434f94f2b1124f3232bb86f2944f82fb23ac0","sha256":"7adaf08052c6a6a0f8a0d0055b4f191fd07389fe41c972b69573472b2ecb406a","sha512":"ea52d475e439ba178c15b5a6dc23f6ef5975e11b17d71b71f89e71db27880e49220697954cd853aa28cc13b1a044a2a2ea10aaa2fc02a014e5441102db433c32","ssdeep":"","tlshash":"cb51e19856b3a746101694903be7472477cb70131629d8acff95638dcfcd0d8ead934e","first_seen":"2023-04-05T09:38:24Z","last_seen":"2026-07-24T17:21:52.28434Z","times_seen":28159,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":2,"connect":5,"send":0,"wait":8,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:wght@500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.320Z","timestamp":1784277636320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Open+Sans:wght@500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Jul 2026 08:40:36 GMT\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6193,"size_decoded":2263,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ff25af4a310d8225bb745489c6fea2c9","sha1":"37d95e7efa18a621c062487bd04c66fa5fc667a9","sha256":"81855a9223fb532772ef58644e2f4930030d54863ee16f3482e4ea5f098432ef","sha512":"bbd062f72df8499a3b585b88687d17ed07e09d459a5f9cbcded7c93fa42a61b49947a6386d2fa758b232d57a27bae7940a1a4012b86560b4e0d3d5a7b5f5b211","ssdeep":"96:ZOXbalJOXbasFZ8OXba7kOXbadYOXba5OXbaly+aZjzBrWOXba7ubqGIFuV4UOXl:xlhrwd4RlqS6bqGIwV40Cd3Z","tlshash":"0bd131a000179450ab475ce327cebe34ee1fa2656040c07aabfd478aeedbd65637931d","first_seen":"2025-09-17T02:40:21.094619Z","last_seen":"2026-07-24T17:21:52.29044Z","times_seen":653,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":32,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.339Z","timestamp":1784277636339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27958\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 23:01:39 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ue4dTuGF6a%2FsD3uy6BjpXhr4zdfDybK9wWXiyTtGQoFxEER%2FzG%2BtMrxfZr1XuA5O0A34lHvv2yA9UIA%2BChxb88e1VnXleNMui1wQWXj4Mg0RaRArPxMxZ3RNdMwkx6%2Fudm4zmFLI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a1c7f15b3c1b712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89476,"size_decoded":28967,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-24T17:56:41.515014Z","times_seen":263070,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/1e68929082b536f5df374.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.357Z","timestamp":1784277636357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/1e68929082b536f5df374.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40080\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"757e68f6e0c362633fea9247dcd945c41c3b70ce\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43086,"size_decoded":40457,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x315, components 3","md5":"52611566a906577a6f8df09242879dbc","sha1":"986393aa1ea93c947b8c7d932f820fb8880146ee","sha256":"0e9a605f74d29c6a55ed02a9b75611757be80005d3833198a933d8040f3fe17a","sha512":"6a3f03bd3eba46fb45573b5451157c22b0907bfb5cf7409ed4e9f77162c3295b34fdffc59c028f4dc2be1ff9d27d83e35b48ec5da3116428a459adb660c52fc2","ssdeep":"768:V6Xkx8LgLN/GWXLKWsguOQGoGisZfD1jBgoVSUUJMNfRtY1v+5:9GAN/7RQG6slFB3DAMNnY1+","tlshash":"cc13e07855c14b04e47b0ab315ca7316f9647380c0b792db65da2f2742b69b31feb226","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.292585Z","times_seen":146,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":131,"dns":1,"connect":22,"send":0,"wait":110,"receive":20,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/074af7b0b495f2a210721.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.359Z","timestamp":1784277636359,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/074af7b0b495f2a210721.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27616\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"626dcd409f13e33bad4e306e8104550168bb9b8a\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30914,"size_decoded":27993,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x600, components 3","md5":"e3792eb908f79a34238999adc2a46688","sha1":"20ca96b1d2b4b0b4961bc658c4f4ce2500cd422e","sha256":"b34d40ec1fd3b90153a2bb45c2a68803f295510c42c7479e73daecde9d0aaf0b","sha512":"8176af9119c41119fb29e3d1530405100dc439a0127bb8ca918c05b7b0ae337affec39eaafc8c0bba83404db2cce36a1d219f6c4d8053308fefb927af6c997fe","ssdeep":"384:k9eTCkvSRHbo6xfGkXp+4SVAUzXGQNHj9mZtYtXnlGJSwPBpc475Y/gU3cXZBS9w:Af/xZM4SV/9j9NBoJZBf74eLpP5","tlshash":"d0d2e1c9457892cfc8390b71d8e727c1d7e236623cedba0783a90047ab1661ae16ded5","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-07-24T17:21:52.232465Z","times_seen":149,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":66,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/73cfd241e126f3ff53304.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.362Z","timestamp":1784277636362,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/73cfd241e126f3ff53304.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 24335\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"fbe678dace539f5db95a1cbe6a8a3d71e1a9b7e8\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26527,"size_decoded":24712,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1200x360, components 3","md5":"7f21b4087f3b5c4ee2298f00c5de1f02","sha1":"14bb4cd75a80ac6f2c093b04d649fe5845003189","sha256":"0cfc8f9f23bb792197d73d89d23d74b1bb3e7003342e7ad379a062981ce6a240","sha512":"431d981adb2c1dfe7599a0e34b27f2424e46a5e348dc0b2d50ec6835bf34c581310a9e312cc2f7ef76e1eb28202657d29d3c1c7b33bdf0c572c1bd343c3d31af","ssdeep":"768:bJVR8Rrqg0xn/gW3R0YtQTUtkneaCzZCHcQl4MXS:9Vu5qgBW3NtQTUtkPuCHb6","tlshash":"18c2d026be4437d9c0228eb50aef3ab5fc721c271b43b13d62859a693274cb3191c5e6","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.268896Z","times_seen":148,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/6851b7eed19e0048a18b9.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.363Z","timestamp":1784277636363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/6851b7eed19e0048a18b9.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10463\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"a0035bab37369d0098be047e8f4f77fb5a125d3d\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11193,"size_decoded":10840,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x138, components 3","md5":"67b95924413ffeb603127fa60fda5980","sha1":"f28340953ec6245692d3b12f3bf164db9e913a88","sha256":"936085de6da0b583376394b821a6ce7bf86baff72711ad8a020d32f92a78e48e","sha512":"9f9575c876c4394a0888172c213d5edb415bb0c1e552fa89ebe3c9203fce47a3a9c0eaf37d6c317b9490d84679447b75e1ec861e75d8368c6db9b45ca991de0b","ssdeep":"192:kjREeGvdVWYpCpCpGZl8tSFRlQ0lqKPEZTWCrjAGXK7WWK5kqDWj:k9EeGvdoYpCpCpg/XCTWC2qOqDWj","tlshash":"36329eb09734dfa1cc06893b60ed40fccd747b739acad867f94422a42bd315826754d9","first_seen":"2024-03-28T16:46:14Z","last_seen":"2026-07-24T17:21:52.274307Z","times_seen":151,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":129,"dns":1,"connect":19,"send":0,"wait":110,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/ef49956cd9d6444e24f41.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.352Z","timestamp":1784277636352,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/ef49956cd9d6444e24f41.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28295\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"7be79daacc3eb422bba49c020ec24c70d9567e22\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29964,"size_decoded":28672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 643x259, components 3","md5":"6d50bcb334150b5fae2f7e9a143e3ded","sha1":"40d976b19912ed3adf511f25dd550f1316851618","sha256":"cc3e389bfa43d9cb4d2ce67743f358c798088e2dd208cf5c035976895e09fd36","sha512":"d03c667634f2d5bf017ccebf0e1cb9a7c8c2e38a13c35ef4cbc0dde8cffc368791106c6ba875ca74a8f282efb16c8f0f791d98aaddb2b953721b218d68d7b6c6","ssdeep":"384:k9iw2bNLbynbXMCUhn+e1Gr00ElhjPrzF1cjhymqiYwi9xe76yk/jwfcTUATxnzj:mzMCy15zFaTqiYRe76RqCJu5XnY","tlshash":"1dd2d0513ab41ae5c87d1ef4e3cd9b0770a7b69e92ecec8351a4bd1809ca89027d453f","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.248316Z","times_seen":142,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":63,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"danaanew-indoonesia.lifesstylenew.com/","fqdn":"danaanew-indoonesia.lifesstylenew.com","domain":"lifesstylenew.com","tld":"com"},"ip":{"addr":"104.21.90.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-17T08:40:34.162Z","timestamp":1784277634162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lifesstylenew.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 20:22:02 GMT","end":"Thu, 08 Oct 2026 21:19:25 GMT"},"fingerprint":{"sha1":"F6:B6:40:99:F6:BF:57:CC:71:D3:71:A3:73:FF:AF:3C:6C:CC:17:3D","sha256":"BE:37:FD:9A:12:49:4C:06:1F:48:50:AB:8E:27:CD:46:B3:23:89:0B:0A:35:56:66:22:CA:A4:98:18:0C:2D:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: danaanew-indoonesia.lifesstylenew.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 08:40:35 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 31 Jan 2026 04:27:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGH6DyJIVj8oOVbO1o%2BB8FxF37CEhSIrutDD6ZKjummZ1P05pWy0m2I08i8lFaZlc2ttAKvDafekA0ygR2IPo%2FWfr%2BJ9mTFCxiKkYPkCH5%2FDCZUX%2BQZqysIWU6neiJqJLjMBTuUiMt0%2BFYmuyK5GH%2FywVqwoRVAv\"}]}\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1c7f14dbe83712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:3.3.5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":14233,"size_decoded":4515,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"4c0f07092b7c07f160849f8db289dd0c","sha1":"2f2e28e0ab2e18f27d5c70de6324c088b9202785","sha256":"bdebe015cb46891d76c941bfbd57deb0381e864d0830a0b34350208fc44c16d8","sha512":"2834d7ff97b7e1467af494d2729dfca36a3b09a63d1014e7f66ecce7e15ee4dd5d2570c397c5242b0f305da4f05cc4121f7919aebc6eb4c3d7c827fe5befdea6","ssdeep":"384:DxFr/OiGvjxuW4OeLt2FGFmFsFJo5V35cKxH:RW4OeLt2FGFmFsFJKmKxH","tlshash":"ed529397698350067412c1ad3ba73b4d6257910b4a4eccb5ffcd5389ef892e489b23cd","first_seen":"2026-06-30T18:30:51.494275Z","last_seen":"2026-07-17T08:41:06.270902Z","times_seen":4,"resource_available":true,"data":null}},"time_used":1845,"timings":{"blocked":-1,"dns":9,"connect":19,"send":0,"wait":1633,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"danaanew-indoonesia.lifesstylenew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-17","alert":"Phishing Block","trigger":"danaanew-indoonesia.lifesstylenew.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"danaanew-indoonesia.lifesstylenew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-17","alert":"Sinkholed","trigger":"danaanew-indoonesia.lifesstylenew.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/f214ca8c116e23a945567.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.349Z","timestamp":1784277636349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/f214ca8c116e23a945567.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 68792\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"8a479848450c822dbc87dff62a11663499ec68e2\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70504,"size_decoded":69169,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"fda3ca154c19eb648b3108a76b57b2f1","sha1":"bbf3c849ae2cf321321e5cedfc450d59589f3678","sha256":"58aadf1b3132da1d9d941fb9d7690aef3560196ca5743d5700b00137cdb6d581","sha512":"7377d60a42f4d624bc9bbcd45b40154369763951ce3a059051100bde78f530b096564c59a239a3034100d7fe22990e9709558ba314296203460b4e83cb158c82","ssdeep":"1536:KkPwMrxkciBon5neOZ68Od1OSZ17YWzcxM:nPwMrxkjhD8mNZ1hF","tlshash":"c563027e46b9f916c00f44f3bdd92736bb06c51861428b5d194dada0af4031dbfb896c","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.287147Z","times_seen":151,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":110,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/08d026a96c972a8c29acf.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.354Z","timestamp":1784277636354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/08d026a96c972a8c29acf.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47463\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"05afce711a5e840134c5a528c68f735befde2342\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49847,"size_decoded":47840,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1100x439, components 3","md5":"40af6ab1ffeb7242b07fd40aa4face2b","sha1":"7dc8a44a889f90eba9818e9b71af05239f502035","sha256":"4a6eb4fe97b203347d9ce38a21bfd704141488a075e8a17e57e3e0ab53be929a","sha512":"e43d82291e12dfe3f6ba88dac064bb1db8ef1d6ea3c6d9d38a8123dfdf2c950aa2c21a0385e5d6e75a772cde31e489a5b904df34b6115c63e86ecd88581c6e71","ssdeep":"1536:/pUjK7ao+4ZOV4rU7WVKPlsOqPGF1C4f7WPK+:xayPrqKOqZ4fKK+","tlshash":"bd23e0e5864d8ebdf179af7f49e24216e6713c90a79308f762c010390370fa25cd26ab","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.230905Z","times_seen":144,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":88,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"e-formulir.mwebs.id/BotikaTTS%20_5_.mp3","fqdn":"e-formulir.mwebs.id","domain":"mwebs.id","tld":"id"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.366Z","timestamp":1784277636366,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /BotikaTTS%20_5_.mp3 HTTP/1.1\r\nHost: e-formulir.mwebs.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T17:51:03.946765Z","times_seen":17508756,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.615Z","timestamp":1784277636615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/opensans/v44/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjr0B4gaVI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://danaanew-indoonesia.lifesstylenew.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18728\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 05:58:33 GMT\r\nexpires: Fri, 16 Jul 2027 05:58:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 96123\r\nlast-modified: Mon, 15 Sep 2025 16:29:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":18728,"size_decoded":19540,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18728, version 1.0","md5":"a6f0123a9439d11d2bd8f404f620bfca","sha1":"e50a2af45400cb2f6fd8c89711cb4b4ef481002c","sha256":"fcb3290e95d43c9427acb996e3c1243c44f003eae5104707b3f5ed65fba7d452","sha512":"3882dae2392e9d4347952072e52e86ee1f2136f29629eb19df2178b09b768c8b6ed638e4da57c46470515558075252ca550516dda5ebddd11e326a4f47c9e9a8","ssdeep":"384:6gLJuh+PG7AeiBHvp6MQ8jvy3xse1253sADWsMGGRQp2d:6nUB7HJtyueADWVGGRQp2d","tlshash":"4682d09788e9aa41e6c4f76232e92bf57ccf351b3065d2ee14505dc92892b63200bf2d","first_seen":"2025-09-20T15:52:41.695948Z","last_seen":"2026-07-24T17:21:52.277525Z","times_seen":1196,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":2,"dns":7,"connect":31,"send":0,"wait":16,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/ajax-loader.gif","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.646Z","timestamp":1784277636646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/ajax-loader.gif HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4178\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"1052-ehqkNhQ5Y4K7FeX95XTZzc0haY8\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230113-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i\r\nage: 3223787\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSb1sNBfRQ1UPrc377NIX1bQnhcoGLeTNnDJ9iVOrjCVWqVHaqHdtOGSIbHaT0V96dWP50lx%2FxgfGTHJi8qfOoNop5StQUC08w3%2BLd5AwwiPF7sRxKbpEar5rBNiR3EE27M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1c7f15d0b690b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4178,"size_decoded":5262,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 32","md5":"c5cd7f5300576ab4c88202b42f6ded62","sha1":"7a1aa43614396382bb15e5fde574d9cdcd21698f","sha256":"e7b44c86b050fca766a96ddac2d0932af0126da6f2305280342d909168dcce6b","sha512":"f0d7ada22a3eb3b2758198a71472fb240c74ce4ca09028076e23690c70b2339c6b2a40f9158dd71c52d953ef27bbcc0105b061bdc74fbb0ad0b304c7c6a04a38","ssdeep":"48:32e4MxZKDtivGOFkoajWKOwD2s4UYX034Hk4zHdwt4zeoAF5oM4JTp3uVj4gBFyj:32e4ZtyiqsdWAXWwXPF5oMcdUjVsmuS","tlshash":"e2810b9ce8a0f631c59936b78dd92d1a9adc5796ac3ccf5215986808f91f223028735d","first_seen":"2023-04-05T22:52:05Z","last_seen":"2026-07-24T17:47:16.373146Z","times_seen":45105,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.340Z","timestamp":1784277636340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/slick.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 10910\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230136-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2944635\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuAgZprzTD9bscUMaC9bFMDebvyAUkve0byo00q%2BVyLK%2BDNECHygfzeQAX4zHmpNWt9XJi2OI%2FnPduNYDfGt8Ya%2BXF6YvNuRY5Q%2FLfBb5iHegSrui2g8q1qiNwbD4IKyZUQ%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a1c7f15b2b833181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42863,"size_decoded":12029,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-24T18:00:01.610996Z","times_seen":108631,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegra.ph/file/79d4ec49c06faed353dcf.jpg","fqdn":"telegra.ph","domain":"telegra.ph","tld":"ph"},"ip":{"addr":"149.154.164.13","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.361Z","timestamp":1784277636361,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegra.ph","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 20 Sep 2025 10:44:20 GMT","end":"Thu, 22 Oct 2026 10:44:20 GMT"},"fingerprint":{"sha1":"25:0E:9D:45:63:37:41:9D:4A:E3:26:89:C8:EC:78:03:E0:A0:6A:50","sha256":"36:94:AD:0D:2B:E0:05:48:39:27:F4:45:4A:4E:CF:30:9A:9E:7F:EA:17:16:EE:21:4E:B7:AC:6C:AB:01:57:11"}}},"request":{"raw":"GET /file/79d4ec49c06faed353dcf.jpg HTTP/1.1\r\nHost: telegra.ph\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7888\r\ncache-control: max-age=10800, must-revalidate\r\nexpires: Fri, 17 Jul 2026 11:40:36 GMT\r\netag: \"9a8cf0178db5efe135a7c1c6632d264bec334883\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8427,"size_decoded":8264,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 369x137, components 3","md5":"ec464111bf1b76e00a8a5c6449bf6605","sha1":"8fd735e8d37804ff2bf5dd51c6bb91ba1216cbac","sha256":"1f72c44d8d91d016c3b15db423cd0d155d68c22a3aa1d57cb674d61f792ff83a","sha512":"d7668b595f416dcfbdb3ba2de4ea79b179edda992e0b041d71b1da64ca98d785dc31e7ee75808ce3514f0e710bb42db7787968d0c3b4cf5bc8d908e5606d72c0","ssdeep":"192:kjRFllasoyzwJnQB4V/J2baWmUWkOX4Eru/GYz/W+x2ovmZ6:k9dasoGwWB4R8uWmU8jGLtw4","tlshash":"65029faa4b659b07e4705cb589ec0a02f3073f35a2579152c362570cab5ade64aad0ca","first_seen":"2024-03-28T16:46:13Z","last_seen":"2026-07-24T17:21:52.234102Z","times_seen":151,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":130,"dns":1,"connect":22,"send":0,"wait":24,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/fonts/slick.woff","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.686Z","timestamp":1784277636686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/slick-carousel@1.8.1/slick/fonts/slick.woff HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://danaanew-indoonesia.lifesstylenew.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 17 Jul 2026 08:40:36 GMT\r\ncontent-type: font/woff\r\ncontent-length: 1380\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.8.1\r\nx-jsd-version-type: version\r\netag: W/\"564-r5HBLw9Aak+AGus7OYdo/kHY+GQ\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220113-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=3,i=?0\r\nage: 3136553\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kaLg%2BUrcAc6rqJr3Maf%2FHdfQG6MefDzsh7%2Bs6W2eISmI0IUtY4L4HfwCUuD1nOaRLHboeOAMAJ1GLGGslZt%2FBiq83zHT4Uw3o%2BFXNsSV2S8hLHOIu21XWcSJGW1E4MTV%2FXs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a1c7f15d4b930b06-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":2474,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 1380, version 1.0","md5":"b7c9e1e479de3b53f1e4e30ebac2403a","sha1":"af91c12f0f406a4f801aeb3b398768fe41d8f864","sha256":"26726bac4060abb1226e6ceebc1336e84930fe7a7af1b3895a109d067f5b5dcc","sha512":"976f6e9d65859b1a5e3bbd426441e6885d1912f5694f40e2897b10f46b3bd0c7d940f7917a6050d6bb8cdeaaa5e5f0332391d3d398f6c21ce27299dfc7036911","ssdeep":"","tlshash":"cb21a55dbda5eb19fe9ed376738497e1bb1e849db2a20246990e2e3db280040a880655","first_seen":"2023-04-05T04:33:55Z","last_seen":"2026-07-24T18:01:40.611121Z","times_seen":25253,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU","fqdn":"encrypted-tbn0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://danaanew-indoonesia.lifesstylenew.com/","date":"2026-07-17T08:40:36.760Z","timestamp":1784277636760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /images?q=tbn:ANd9GcQZ9dATs_nkzyO-gSoQWbtIhJV7bG51r3gOKg\u0026usqp=CAU HTTP/1.1\r\nHost: encrypted-tbn0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://danaanew-indoonesia.lifesstylenew.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"images-tbn\"\r\nreport-to: {\"group\":\"images-tbn\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/images-tbn\"}]}\r\ncontent-length: 11540\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Jul 2026 06:02:27 GMT\r\nexpires: Sat, 17 Jul 2027 06:02:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9489\r\nlast-modified: Sun, 15 Sep 2019 17:10:09 GMT\r\ncontent-type: image/jpeg\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":11540,"size_decoded":12355,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"45525a4e10b53535c2f0a134aec2d0fe","sha1":"8689b23fb445fab7c8f3f92f91eb8606a5a51959","sha256":"0546f98f9019a3d2afbe9372ba08aba895e2aa716bd0fec8e78ff5879162f134","sha512":"9065c80f6d41caf354ab957f724ab2e3102fb1bedddfa9503d76f2c19c418695ecfbcba1d54be82359b2341b242d746510241fa6910b1dd4f20c727b63845311","ssdeep":"192:I1PWG4+OxCPAq2CWPfxoZ3s3G2fJOz3PZ8IrfD45R:IlF/OxCP/2BFtwrR8Ir745R","tlshash":"c6326b6bff43a122cd08d336ddeb56183b3355ad815c0582d78d426094ab7a7eeae4c0","first_seen":"2023-07-12T15:04:13Z","last_seen":"2026-07-24T17:21:52.237Z","times_seen":2143,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":16,"receive":4,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}