{"report_id":"fa92a1ee-f3f9-46ea-94cd-c1fdf4f82370","version":6,"status":"done","tags":[],"date":"2026-04-20T10:52:06Z","url":{"schema":"http","addr":"phantomportall.wapka.site","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":0,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"phantomportall.wapka.site/","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"title":"Phantom Withdrawal Portal","dom":{"size":14459,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (327)","md5":"249e45f1186411bd878d5a6c0ba952ab","sha1":"6e937b288b2c61495c6f5563ae51995518a88421","sha256":"8fda3f937d4abd303c090d1385723504be22a725c8f1ae2a5b316ca7b6f6ee9c","sha512":"97453291ed2ef3c9a5b84c104d2980105665343654c7ab8b1b22b67b6ccb9ce58f67ce3511f4eadd5041ede5d5eca37d114b5f4f3536b76eff0f7d53cf74f6c0","ssdeep":"192:+FxftqFfzyRKq4+BOujGve2AoVUScbr0aR9H+1sqwWTu2V33z8:6cfvloLr/R9eL8","tlshash":"3452d891b3b350326867819976fb879f3295a503c80bc6a0bfecd5980fc2dd5ed2265c","dom_hash":"domhash2f32df3777805a0e1bf2477790aa23ac","first_seen":"2026-04-20T10:52:09.487793Z","last_seen":"2026-04-20T10:52:09.487793Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"phantomportall.wapka.site","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":0,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T10:52:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"phantomportall.wapka.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"phantomportall.wapka.site","ip":{"addr":"45.87.41.112","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-04-14","domain_rank":0,"first_seen":"2026-04-20T10:52:07.125776Z","last_seen":"2026-04-20T10:52:07.125776Z","alert_count":2,"request_count":2,"received_data":18163,"sent_data":997,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap:5.0.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"wapka-img.zuna.id","ip":{"addr":"104.21.36.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-01-01","domain_rank":5079900,"first_seen":"2024-12-02T15:50:42.252468Z","last_seen":"2026-01-19T23:07:28.529682Z","alert_count":0,"request_count":2,"received_data":111782,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-19T22:24:53.213297Z","alert_count":0,"request_count":1,"received_data":475857,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"adstook.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-04-08","domain_rank":660608,"first_seen":"2018-09-26T15:40:03Z","last_seen":"2026-03-28T19:30:13.044134Z","alert_count":0,"request_count":3,"received_data":18959,"sent_data":1471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phantomportall.wapka.site/","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"56b3e23b4cc7a5946b9b6af3e6fe6241","sha1":"d582a9f86caa51a63d5fa6530589cec8ab2beb1f","sha256":"05b99e6d00ef6e0aa59e11f4c832b7b05c83da14e0d4dc1ca341f92c76696f10","sha512":"1a6513127ba6e9107f132b50c2295d2bbd74f3369d917516642630b0a2645cd178e3988b191fd3c655c9859e3eeb0da09b5c01975e8d33e855a2fab842d52e7b","ssdeep":"","tlshash":"48a0228c0222233a830a0c2c80f200220a288c88ec0082200380002c20f0022e08a30b","size":67,"data":"","first_seen":"2026-04-20T10:52:09.509451Z","last_seen":"2026-04-20T10:52:09.509451Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomportall.wapka.site/","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"b589445828955e7325cb5a2d911eb0b3","sha1":"dcd85aa62b5f5129565f574410bf9c143ef99d4c","sha256":"1863277e9ee47ce4864cffab62c186ca8cb2e78dbe96eedf9cdf7ae02ecfb63b","sha512":"9b4e5e2e86b87f206d56f71fa148cbd6d52e81d9742070afce920b631fdf222e182777139c702cd45d72f902a720eb15f80a213fc8c63a64c560312f95ee70a6","ssdeep":"","tlshash":"c6f08bfe486288356e43a426a0776a09323382676e327852755e10701fddf6eb2b5bcc","size":650,"data":"","first_seen":"2025-08-18T19:48:39.646944Z","last_seen":"2026-04-20T10:52:09.524573Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomportall.wapka.site/","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e15b93a6f5e20d9470ef679c2bd5741","sha1":"51608ae30fbea0de324b8072b9bffbce18ab0588","sha256":"9fabb0c75e0b669bf4c37acb02bca19eb877580b28a00073470bd9a0bc9f9ba6","sha512":"86897701579f1eabb2fa362ac5e7635853c54c89998a49e1c8a687d18e0462fd76fef10fda90a8dfb7b2e56ea668e0cf29a5a947eb99dc7e443da06b80e0437f","ssdeep":"","tlshash":"69115c44638873b60c7ba76f519b95f07670b653300684b173dc82894f05a1d9955afe","size":891,"data":"","first_seen":"2026-04-20T10:52:09.527312Z","last_seen":"2026-04-20T10:52:09.527312Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomportall.wapka.site/","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"12c6cbc7ba60ab54e3a08d1c4a023671","sha1":"ee53b6ee4eaff86c68fc67532e98a526719ae2f6","sha256":"db55f5d8a3da16633a69a4d9ec9c1fb2a6a5d37c759ac80f9c65dbaedb81139e","sha512":"b246df2ad1fd36ffb496da42005058382cc26b6397b7f2a6a28af72cb6b77a812ca740ad101abd9265456faa1a1421ed24ebfff50b1b3bf99149568a5fe1fe44","ssdeep":"","tlshash":"d1f0a086b0a295020a93806f5e2b3168356331bf284cd481ba0ccaa50f207af72a5add","size":460,"data":"","first_seen":"2026-04-20T10:52:09.529593Z","last_seen":"2026-04-20T10:52:09.529593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adstook.com/wapka_lib.js","fqdn":"adstook.com","domain":"adstook.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fc13414fbc745fb0034edecf94204f0","sha1":"202f29301c48ac163e98c20058adea1443e201bb","sha256":"2cfec1830fe22b71bc0787872986d82ef24eb389e705946181afba9133ecbc50","sha512":"bcccf08da368b1b3a80f765fbfeb8aa0f78d2d05417557477b35fdb23a78537605869e814c26f0663610b882f750a98053b8f5298f577b4e2ca5de50684820bc","ssdeep":"384:cBXlmi8iWub4kiviqibXijjWV2wesr2QYnFb5pSDnmy+3Q:chl3xN2qTOjjWV7epQoSV+A","tlshash":"9072d761b5632024a167008a73b36b98383583037703dda6706ecae98fd5ddbd1f9a9d","size":16770,"data":"","first_seen":"2026-03-15T17:34:40.289579Z","last_seen":"2026-04-20T10:52:09.496001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-WFM1HNDZFF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5c804bc89ed95bcf9ebf891d83473d3","sha1":"a9ef049e07632dce3d95e87b952e54d5902d6f3b","sha256":"3a9041560c4cca99a3223ece2b9b0be51bb52091a71a95f48cea30f1de24de3f","sha512":"ab86f2a5216054d5964911177f839be3c16ba08c5dd4a41d558a0ad8a20dfd2c0fa82f2478cc261c05eabe4fc48df2dbecb6029b2605e9381eb09a0a067cd581","ssdeep":"6144:qWx4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:qc7t4MtfrJL8p5WOW","tlshash":"aca4f8ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","size":475253,"data":"","first_seen":"2026-04-20T10:52:09.505107Z","last_seen":"2026-04-20T10:52:09.505107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomportall.wapka.site/","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"8278919d6029be6254226ce500affa9b","sha1":"aa970b709e04f459792aedf3cdfa9cd472d4b9fc","sha256":"ba43a59c2e8ed2f62ffc7009604a85999f4db3d7b039979572d76029526a9f9b","sha512":"a1837f43a0163d3e7e0dca30b8d522c0b97aede4ccc41a38a0673fb2339173508dcd0abd82bca93bb1b3126938ea27c26e7bde6f46665b60470c00b88933d84d","ssdeep":"","tlshash":"0a31f104b353443a89ff06d8b4b3caad39a15350a48acae988fdcc550f474c1aca56fe","size":1755,"data":"","first_seen":"2026-04-20T10:52:09.531719Z","last_seen":"2026-04-20T10:52:09.531719Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"adstook.com/track","fqdn":"adstook.com","domain":"adstook.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phantomportall.wapka.site/","date":"2026-04-20T10:51:47.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adstook.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 21:13:59 GMT","end":"Fri, 29 May 2026 22:11:37 GMT"},"fingerprint":{"sha1":"F2:70:22:E7:A8:03:61:C6:5E:42:4D:D0:DA:3A:58:F1:F7:9F:6B:8C","sha256":"C3:75:3D:64:1B:E9:16:39:F4:16:7D:CF:58:7D:77:E4:CA:8F:D0:05:A4:34:40:28:71:31:47:3F:8C:4E:DC:6E"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: adstook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://phantomportall.wapka.site/\r\nContent-Type: application/json\r\nContent-Length: 247\r\nOrigin: https://phantomportall.wapka.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":247,"data":"{\"type\":\"impression\",\"ad_type\":\"banner\",\"advertiser_id\":1,\"ad_id\":1,\"page_url\":\"https://phantomportall.wapka.site/\",\"referrer\":\"\",\"screen_resolution\":\"1280x1024\",\"browser_language\":\"en-US\",\"timezone\":\"UTC\",\"utm_source\":\"phantomportall.wapka.site\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 20 Apr 2026 10:51:47 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 2\r\naccess-control-allow-origin: *\r\netag: W/\"2-nOO9QiTIwXgNtWtBJezz8kv3SLc\"\r\nx-powered-by: Express\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mv5wvw482VlTQMyZQ%2F8BDJxTLezpkF298xOTpf15cpgxCmQnAlEopY6fdugOosJveZOqPglnz7WJjUFewvza7puRgrcK2taqsXWf46gqR%2FBrLVsyZi5csRsXmCjZ9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ef39882ccf656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-14T02:52:14.903487Z","times_seen":364229,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomportall.wapka.site/","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T10:51:44.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wapka.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:37:44 GMT","end":"Sun, 03 May 2026 05:37:43 GMT"},"fingerprint":{"sha1":"1F:29:08:60:5B:2E:E7:67:0F:AE:1B:4B:9E:7A:CB:92:2A:6B:46:A6","sha256":"54:35:52:3E:F4:63:FD:B6:66:38:DE:59:7E:8B:BF:ED:A7:15:36:50:38:37:0E:25:D0:86:D8:DF:97:49:AD:45"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomportall.wapka.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Mon, 20 Apr 2026 10:51:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.12\r\nset-cookie: PHPSESSID=4lcfrmkbv3ga4sl8gesr0oac9a; path=/; HttpOnly\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.3.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":14962,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"ed73b6e7eadb459a287d972c5696fe6a","sha1":"9ac410659f5f9b9d7ce2e577ad3fe8ce477941ed","sha256":"f2cf3b38d956dee084f9cedcc2015aaa49ec503ea63cd6ea190b074a16ef010d","sha512":"d51b123ede5c6fb714badc8cdad3f06d00dc9d0d8d0809dae69e69bca10f9c3897045010c55a1a2a2df10bb9e2a69cc9c34d6bc6d442792f97c98721292d5107","ssdeep":"192:bqckP1t7CqokN5LKotPkbPnmhBEOVUcqbrDLgFU2fo4+0UkrjGNonQ:8DmHgYzrXgq2f/Q","tlshash":"d562e794e242503354738295abb1479ef6911113cf028365bffc92960ff2d98ed23e9c","first_seen":"2026-04-20T10:52:09.493137Z","last_seen":"2026-04-20T10:52:09.493137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":512,"timings":{"blocked":218,"dns":135,"connect":36,"send":0,"wait":77,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"phantomportall.wapka.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"adstook.com/wapka_lib.js","fqdn":"adstook.com","domain":"adstook.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomportall.wapka.site/","date":"2026-04-20T10:51:45.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adstook.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 21:13:59 GMT","end":"Fri, 29 May 2026 22:11:37 GMT"},"fingerprint":{"sha1":"F2:70:22:E7:A8:03:61:C6:5E:42:4D:D0:DA:3A:58:F1:F7:9F:6B:8C","sha256":"C3:75:3D:64:1B:E9:16:39:F4:16:7D:CF:58:7D:77:E4:CA:8F:D0:05:A4:34:40:28:71:31:47:3F:8C:4E:DC:6E"}}},"request":{"raw":"GET /wapka_lib.js HTTP/1.1\r\nHost: adstook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomportall.wapka.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:51:45 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zSfow%2FPLAa8V7UQx%2B6fzLM4xHk5qVJqCxpZmKOhtlu6inYN%2BIVpqlYIzrHtV7BVc5IM9D3HHwNlMpKYfdJ6QFoZd5cothnjxj3T1Qt%2F8OmIr%2FOdZNAWsQs3StS9cBQ%3D%3D\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1200\r\netag: W/\"41a5-19cc8e2aae0\"\r\nlast-modified: Sat, 07 Mar 2026 15:20:24 GMT\r\nx-powered-by: Express\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef398789d130b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":16805,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2542)","md5":"5fc13414fbc745fb0034edecf94204f0","sha1":"202f29301c48ac163e98c20058adea1443e201bb","sha256":"2cfec1830fe22b71bc0787872986d82ef24eb389e705946181afba9133ecbc50","sha512":"bcccf08da368b1b3a80f765fbfeb8aa0f78d2d05417557477b35fdb23a78537605869e814c26f0663610b882f750a98053b8f5298f577b4e2ca5de50684820bc","ssdeep":"384:cBXlmi8iWub4kiviqibXijjWV2wesr2QYnFb5pSDnmy+3Q:chl3xN2qTOjjWV7epQoSV+A","tlshash":"9072d761b5632024a167008a73b36b98383583037703dda6706ecae98fd5ddbd1f9a9d","first_seen":"2026-03-15T17:34:40.289579Z","last_seen":"2026-04-20T10:52:09.496001Z","times_seen":2,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":48,"dns":41,"connect":1,"send":0,"wait":205,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wapka-img.zuna.id/734bfffe.png","fqdn":"wapka-img.zuna.id","domain":"zuna.id","tld":"id"},"ip":{"addr":"104.21.36.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomportall.wapka.site/","date":"2026-04-20T10:51:45.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zuna.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 20:32:16 GMT","end":"Fri, 26 Jun 2026 21:30:00 GMT"},"fingerprint":{"sha1":"96:3F:22:59:AA:E8:B3:65:B2:91:73:C3:CB:5E:7E:0C:15:F8:11:AF","sha256":"3F:F6:2E:96:D2:23:CB:41:3C:17:0E:94:D2:D5:96:05:08:1C:F7:F0:6D:0D:02:58:E9:06:ED:92:D8:F3:0B:97"}}},"request":{"raw":"GET /734bfffe.png HTTP/1.1\r\nHost: wapka-img.zuna.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomportall.wapka.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:51:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 80821\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 19:34:23 GMT\r\netag: \"69751ebf-13bb5\"\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 44297\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZ2bXj30twi6sZnnzX6V7FrG65IHDGYwsxOiQS3llyiUwxfPEqegy6gYTWqK3RYKVczMnrS076zR%2FvoRCVbXhR5M4a4VxWeS7wHcq58%2FYYLVxG%2FX8Tc1GFHv4JNli%2BsCEWrS8w%3D%3D\"}]}\r\ncf-ray: 9ef39878cd9032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 229, 8-bit/color RGBA, non-interlaced","md5":"fa1c5810c58c8db6f6c42e8d889f65c2","sha1":"d09e9a7b432dbd7138075374612a46842c2a8da6","sha256":"9cc67dff47c4129f71ffea42ec06e5aa1de255245f3336cd2b5b802db27def3c","sha512":"54a749616e62ba2369112d2b53691555de8061fc2a33a8be8ba65606ff1394dae68c62289cb4a4c7bddaa84c7b9986c17934765c9d86dc2146864a62bf83730f","ssdeep":"1536:iceNc5BQXugCka1TiWHOP1YHUxcGZtigydz43wM3qVvCLCxlYIA:LKu11+WHk6HizydzXMa9rlYIA","tlshash":"d283e0aa5274d502c778933a0b895b4a3f760caa76b8725166f49cc7474eafcbc24cd0","first_seen":"2026-04-20T10:52:09.499515Z","last_seen":"2026-04-20T10:52:09.499515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":76,"dns":58,"connect":3,"send":0,"wait":8,"receive":7,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomportall.wapka.site/favicon.ico","fqdn":"phantomportall.wapka.site","domain":"wapka.site","tld":"site"},"ip":{"addr":"45.87.41.112","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomportall.wapka.site/","date":"2026-04-20T10:51:45.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wapka.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 05:37:44 GMT","end":"Sun, 03 May 2026 05:37:43 GMT"},"fingerprint":{"sha1":"1F:29:08:60:5B:2E:E7:67:0F:AE:1B:4B:9E:7A:CB:92:2A:6B:46:A6","sha256":"54:35:52:3E:F4:63:FD:B6:66:38:DE:59:7E:8B:BF:ED:A7:15:36:50:38:37:0E:25:D0:86:D8:DF:97:49:AD:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phantomportall.wapka.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomportall.wapka.site/\r\nCookie: PHPSESSID=4lcfrmkbv3ga4sl8gesr0oac9a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty/1.25.3.2\r\ndate: Mon, 20 Apr 2026 10:51:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.12\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.0.2","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OpenResty:1.25.3.2","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2577,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9584a097a69e5869d4bdefecf5de39c8","sha1":"63c7c3df3795a3be60414d134f17f0848fe2ce0b","sha256":"3be37455abe1b453d148b06c28e43ae6fe091cf0bd22f7dd60a07e3d0cb7a4ce","sha512":"da8d31ab5c4e5900df00a967afb4e7984f8968d07d1d7ac654cb4d81873499b8be51d46182a8687247f127d621a2e0213733eabbdc90c7ff001ccf565b3e1a71","ssdeep":"","tlshash":"4d51523229f0801f1282c1957ae1b51fae92f957e656995871ee47990fc3ecacc530a8","first_seen":"2026-03-15T17:34:40.284257Z","last_seen":"2026-04-20T10:52:09.502464Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"phantomportall.wapka.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-WFM1HNDZFF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomportall.wapka.site/","date":"2026-04-20T10:51:45.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-WFM1HNDZFF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomportall.wapka.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 20 Apr 2026 10:51:45 GMT\r\nexpires: Mon, 20 Apr 2026 10:51:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157322\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":475253,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e5c804bc89ed95bcf9ebf891d83473d3","sha1":"a9ef049e07632dce3d95e87b952e54d5902d6f3b","sha256":"3a9041560c4cca99a3223ece2b9b0be51bb52091a71a95f48cea30f1de24de3f","sha512":"ab86f2a5216054d5964911177f839be3c16ba08c5dd4a41d558a0ad8a20dfd2c0fa82f2478cc261c05eabe4fc48df2dbecb6029b2605e9381eb09a0a067cd581","ssdeep":"6144:qWx4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:qc7t4MtfrJL8p5WOW","tlshash":"aca4f8ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","first_seen":"2026-04-20T10:52:09.505107Z","last_seen":"2026-04-20T10:52:09.505107Z","times_seen":1,"resource_available":true,"data":null}},"time_used":277,"timings":{"blocked":107,"dns":1,"connect":7,"send":0,"wait":36,"receive":26,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"adstook.com/track","fqdn":"adstook.com","domain":"adstook.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phantomportall.wapka.site/","date":"2026-04-20T10:51:46.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adstook.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 21:13:59 GMT","end":"Fri, 29 May 2026 22:11:37 GMT"},"fingerprint":{"sha1":"F2:70:22:E7:A8:03:61:C6:5E:42:4D:D0:DA:3A:58:F1:F7:9F:6B:8C","sha256":"C3:75:3D:64:1B:E9:16:39:F4:16:7D:CF:58:7D:77:E4:CA:8F:D0:05:A4:34:40:28:71:31:47:3F:8C:4E:DC:6E"}}},"request":{"raw":"OPTIONS /track HTTP/1.1\r\nHost: adstook.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://phantomportall.wapka.site/\r\nOrigin: https://phantomportall.wapka.site\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 20 Apr 2026 10:51:47 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Headers\r\nx-powered-by: Express\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vurMzXq67K4ZBm3ss%2BekqJT7utd1FxcG5qVEOV2kmEymQiNBIkfNOcIHTvio6EQTtOm1MOL6mXe8h9UhBA5C7iNiecjAyWDVJ%2Frw2N%2FGk4sXtbu2UqtahYsn5yfAXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9ef398818b4156a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T02:51:57.151416Z","times_seen":17879698,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":18,"dns":1,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wapka-img.zuna.id/7d95070c.png","fqdn":"wapka-img.zuna.id","domain":"zuna.id","tld":"id"},"ip":{"addr":"104.21.36.6","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomportall.wapka.site/","date":"2026-04-20T10:51:45.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zuna.id","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 20:32:16 GMT","end":"Fri, 26 Jun 2026 21:30:00 GMT"},"fingerprint":{"sha1":"96:3F:22:59:AA:E8:B3:65:B2:91:73:C3:CB:5E:7E:0C:15:F8:11:AF","sha256":"3F:F6:2E:96:D2:23:CB:41:3C:17:0E:94:D2:D5:96:05:08:1C:F7:F0:6D:0D:02:58:E9:06:ED:92:D8:F3:0B:97"}}},"request":{"raw":"GET /7d95070c.png HTTP/1.1\r\nHost: wapka-img.zuna.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomportall.wapka.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:51:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 29567\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Jan 2026 20:08:43 GMT\r\netag: \"697526cb-737f\"\r\ncache-control: public, max-age=86400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 493894\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XH%2FLl9OgpThbWPbwZ0gA96OGrjabvgtDaV4qMS9aPzAAaE3%2B8vXZ%2BqbDqZz96K2PTh8Z9VASj2kdaZXLFNJUbbmUf3F0ySqPuQN8yF1F2KnUwYabuPlF30C1%2FcxNk4Rk2SYFJQ%3D%3D\"}]}\r\ncf-ray: 9ef39878bd8b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 552 x 556, 8-bit/color RGBA, non-interlaced","md5":"56a6f0ec098b9e82733296f40aa44952","sha1":"ce3db293ddbef230ba5fd35ea14cb9b943232cf2","sha256":"b218f3cab15f094635d7daa0869f7c69a5d04c60985272c9c29b6bb2a040dd4a","sha512":"84ed7852cbd4d5ff0d89e2169df5b6076292569f4c1dd832156d57dd97789f6d1e776dff94ba6c1540043ecd611fce099fc712b2d5afbef9e020a094b0303d5d","ssdeep":"384:lOrhdqPXCROutwUzOorGpgTNignn1FpyAA0hxVCbjtDjqXc+vH0ncrB/MdRYAHM:Qrhdq/riOoAE1FnpeRjqXfUABkdC","tlshash":"aed2bfb7e4b6a817c13023797a57a702a7b19ded667c34650cea7ce9c37c0dd3849098","first_seen":"2026-04-20T10:52:09.507816Z","last_seen":"2026-04-20T10:52:09.507816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":73,"dns":57,"connect":1,"send":0,"wait":9,"receive":2,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}