{"report_id":"02d9bebd-7d25-4a85-befa-ef1d834f0138","version":6,"status":"done","tags":[],"date":"2026-02-02T15:23:12Z","url":{"schema":"http","addr":"justinsun-allocation.xyz","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"justinsun-allocation.xyz/","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"title":"HIGHER | Distribution","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T08:31:29.283355Z","times_seen":17915674,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"justinsun-allocation.xyz","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-09T15:23:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"justinsun-allocation.xyz","ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-31","domain_rank":0,"first_seen":"2026-02-02T12:28:52.778335Z","last_seen":"2026-02-02T12:28:52.778335Z","alert_count":14,"request_count":14,"received_data":4878033,"sent_data":6867,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":3,"received_data":148101,"sent_data":1692,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"justinsun-allocation.xyz/123/jquery-3.6.0.js","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3e855b0eb2576cd39287aeab632cf63","sha1":"2e4ce6cf1009964433785f184a2924b5a7655cf7","sha256":"d7544207eed63034a526fe4ae1688bbe7329891bb4441f40f506eab814619e01","sha512":"7b756b5ceb8df1d38118029da161e9ab02434948840cbd3d3eeaf548c5c1970748addb51b2e9aec1fa02686c5a88d24eafec35353242dba1b1f956d14282c53d","ssdeep":"","tlshash":"88110ea2629a625f0a7023a9e23bf1eff508c27820496452704cc16ca8a0d66075fdc9","size":1000,"data":"","first_seen":"2025-06-21T01:00:28.758113Z","last_seen":"2026-02-02T15:23:15.215274Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/123/toastr.min.js","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1515ed21d8bd30ca0fae0970f85a7fb3","sha1":"b7808c728fe5fcf884620df5e2154ce988e920c7","sha256":"f2bb0e8511764611ff0081b549ff188c326c7376bf86e28513782b0a48f9c7aa","sha512":"38ba3736b75c78b1c2149cc18022eb235144c162d3fd9d817318e05be6359e7d192fe81b0546b54bd4e9ab56c601c1b87d7b152dfdef3c4646e6a342e7a3f6dd","ssdeep":"96:IVkLdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrwH:ekL4BtcvvRqIQcNa74ccrwH","tlshash":"09b19384b220bb8b6b731169919f144b937673b2ccce55007639a5987e7082c97b7fdc","size":5544,"data":"","first_seen":"2023-03-07T13:20:43Z","last_seen":"2026-08-15T03:25:52.233642Z","times_seen":483,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"justinsun-allocation.xyz/123/css2","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /123/css2 HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 2421\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\netag: \"697e2f99-975\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 10460\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tz3kjlzGX10lZ5z2tSlCUGkP8O9R8gcir5G7iLwoUoV8beyOgL8td3HcMzeMmxJSNFlkjLQEipxRn62mSZ9u%2Fc2SpRamIuwBZRIcv%2BP3e%2FVxE0Ah2M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c7aafa08b690afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T08:31:29.283355Z","times_seen":17915674,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/123/toastr.min.css","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /123/toastr.min.css HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\netag: W/\"697e2f99-fed\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 10460\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xik2Khr1nM99jsjP%2B5HaZ30dglLyLASHUDFNeQNzZNJsapdY1cPt2WqSN%2BSHbEpZDJefRLAknHsgjs7wC4zw5lOs7XLsJB0ugE3LxGTwGRR55SBTDjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7aafa08b6a0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4077,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3790), with CR line terminators","md5":"7bb5a088537dfb8154a867fde2e73704","sha1":"53bf6a20858090281d87c9f9ca6b2696d502855d","sha256":"f51995faee855b1f8c0174398f957dc33a368423abd98da8cab4fcfab87e377a","sha512":"f5b06972fddbb702dab54c3c34b3acc5c62b5235c6b13bf911e84bb564bdca126168b1628e684caf4b52f82ffa9634491903b3cc5034d016d9aa0276178e0e68","ssdeep":"","tlshash":"ae81c011cb80332dbea3961ef455664a2609e1b3e6ee5eed651fa5bcc3c27d41c33284","first_seen":"2024-09-28T07:03:36.213793Z","last_seen":"2026-07-10T23:25:47.369165Z","times_seen":80,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/becker-logo.jpg","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /becker-logo.jpg HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49790\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\netag: \"697e2f99-c27e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 10460\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ID0jm2J%2B7o8o0A0chbgRUJ5uOk1itTOzq5rmNxrrwIneiEZQFGVv4evKiqf4DBFRNB0H6y92fdZ8FBWtkF444be1IwRQ9eDbBIHfkCsZOmOZkDKBWX4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c7aafa09b6b0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.3], baseline, precision 8, 400x400, components 3","md5":"f69d0572010c89a64c875ae853bf085d","sha1":"c49eb9d402ff4336a9eee7b86c59f949514159ba","sha256":"91ae61ed9ade99ea9db91c6868cbdfddfb25f8e66b1aa70e422c103e67796d46","sha512":"6075c9324c09a87d9570f31f4587fd203337e5a94e3c86359c8bb4c7aee661b1f5dd9b25ec505735e4f1f09fe88854eaaa84b6b8b4bdcc4dcb1300d02d1f8b60","ssdeep":"1536:fiBgneoaPW1QGy6hAGGEcnR24ANdgw4WroOdeplInu:pCGrWEvbswBZcpiu","tlshash":"f923f2d5a7641bd0dca0227c384415faf005fc46e7dc93968c561e297988fd4e988afd","first_seen":"2026-02-02T12:28:56.08647Z","last_seen":"2026-02-02T15:23:15.201106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/BCKR%20_%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Distribution_files/powered_by_meta.png","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /BCKR%20_%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Distribution_files/powered_by_meta.png HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 10460\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L9PLPcrJJUQC%2FR9fyAFHjBVDGJvDTHSgQXE5R%2BSKfm0Gs0IUr4xKMYgs%2BHTA607Ybx8O%2BIYdhNQZQwpvTvqPIytRJp3wDnfxkhRZAIrl%2BOp47YrNX2M%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c7aafa09b6f0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7729)","md5":"e26f3685e1f46cbb03ae7ade7eb3c42f","sha1":"362527522c335c5152a1ffe8405e997c78fcf224","sha256":"e9eb5abcad6e36dc929eef80f276079a6a808c89ffe45158a9a7dc65c2480d23","sha512":"de094197a5d57960612fe81594e3daa2403084fb15e1cacb612ea0cca74f69da68ab2a36dea9567d87d07d73fc2e556bf1c8dbccadd54584bd889966a52dee12","ssdeep":"768:WzaVEWDvdUeVIJfb3B/ioD2L6Ujw3Vv8ZvRujjUPEJfJmrzyFAgFvqU3rwIC43Kj:WcJdUUIB38Y5yH2J7lcE1TSB1DR","tlshash":"0dc37317ba9042187903c1ba1dff7b5e3935a0074d84ef9bbdcd2560df8b2a2e891764","first_seen":"2026-02-02T12:28:56.07974Z","last_seen":"2026-02-02T15:23:15.203976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:48.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://justinsun-allocation.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 17:24:55 GMT\r\nexpires: Thu, 28 Jan 2027 17:24:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 424673\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T08:31:05.874203Z","times_seen":259815,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":108,"dns":3,"connect":28,"send":0,"wait":16,"receive":11,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/123/index_1.html","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:48.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /123/index_1.html HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:48 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 10460\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnqLB86tjsKWtpYlPeqjbB4mMLD%2F0EYxoKPiGvdgpvutb33SHrM2I4W1D2qIJJmXIuOIECrZat86EnOZC2T9iysksW3n3ecywUbr9QSc0LPm1Lq4ER8%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c7aafa37b7f0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1510,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (1431)","md5":"7ac863c20d80c754ff2fdf93ca02c1b1","sha1":"ebbec8729a0a4183f564ddfa1624ab4cd89429bd","sha256":"c350fa88b72d686b998af69bcc3a95567d0233a8478c39c0e7ee10a664aaddd9","sha512":"3a0af7592404e133ff8608a0150d0654263a4f136e969b182bc5e0450f4b6a5207e1d0909fa271508a4de07d1ff70f3e55f32d290403f15d7fd160fa5c283efc","ssdeep":"","tlshash":"613185b67e1950308695618631bef36c38329224ba029040c2ece878cd9cfd718afdbd","first_seen":"2025-08-14T22:48:24.824269Z","last_seen":"2026-07-10T23:25:47.373111Z","times_seen":68,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:48.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://justinsun-allocation.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 17:24:55 GMT\r\nexpires: Thu, 28 Jan 2027 17:24:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 424673\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T08:31:05.874203Z","times_seen":259815,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":94,"dns":3,"connect":14,"send":0,"wait":15,"receive":20,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-02T15:22:47.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pt0ZD3d03VZyLiAp8TpryK6IWxw0YiSu%2Fz2LTAZfFELwj2CD%2FEYdPnoz6HqDz6AMrx8Fo%2BWl8MTUkLYz1cEBbnA%2FKfcvzSGv%2BP9GDsUnURAzOzjhCs0%3D\"}]}\r\nage: 10460\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c7aaf9f4a4356c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":126162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7729)","md5":"e26f3685e1f46cbb03ae7ade7eb3c42f","sha1":"362527522c335c5152a1ffe8405e997c78fcf224","sha256":"e9eb5abcad6e36dc929eef80f276079a6a808c89ffe45158a9a7dc65c2480d23","sha512":"de094197a5d57960612fe81594e3daa2403084fb15e1cacb612ea0cca74f69da68ab2a36dea9567d87d07d73fc2e556bf1c8dbccadd54584bd889966a52dee12","ssdeep":"768:WzaVEWDvdUeVIJfb3B/ioD2L6Ujw3Vv8ZvRujjUPEJfJmrzyFAgFvqU3rwIC43Kj:WcJdUUIB38Y5yH2J7lcE1TSB1DR","tlshash":"0dc37317ba9042187903c1ba1dff7b5e3935a0074d84ef9bbdcd2560df8b2a2e891764","first_seen":"2026-02-02T12:28:56.07974Z","last_seen":"2026-02-02T15:23:15.203976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":62,"dns":41,"connect":1,"send":0,"wait":18,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 02 Feb 2026 15:22:48 GMT\r\ndate: Mon, 02 Feb 2026 15:22:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-16T08:28:32.201418Z","times_seen":40689,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":272,"dns":1,"connect":22,"send":0,"wait":33,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/123/jquery-3.6.0.js","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /123/jquery-3.6.0.js HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\netag: W/\"697e2f99-491c5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 10460\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9igjWBxcqSBhlvJEQz4EW%2FAv5XIRxleLq%2BfDFqh2GaW154DJHhOvsP53iLlVuBfm%2FcU9pzMg7qHQRyq93H8govD9OhdVGh5lMNGghd7qH4cLJlOKBOY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7aafa09b6c0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8a750b5e10f34fe9be3d2b152dd12aa4","sha1":"4c7631e6cb74b97f42f146067ffc24c47b329763","sha256":"29223fdf1c42ac27b10aea5dcd02513f507a22a83ed8d03e5f6bb7f1c41daaaf","sha512":"0e003607f4ed747440d2d38b09a30a8fcb9d6dcc65f80ef56abf712674eb83592f45a4bc41d8a136350796a0b0f5cd972f9ca8b45516794644636f4385ec2ffe","ssdeep":"6144:9aaKxfbLY8Cv4okFFmwiFbP6s3JdB/HD0KUWrE4/Xp89ZwvY1Z5COsi2+pHeJwn1:FOiFbP/j70KUWrE4/589jjbvHeyb7PV3","tlshash":"f054b4d9734f116f4ba233aae43b5149ff7dd1b0520550acb58d997c24a081883bafbe","first_seen":"2023-03-07T12:22:54Z","last_seen":"2026-08-03T01:46:09.354079Z","times_seen":2112,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/123/toastr.min.js","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /123/toastr.min.js HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\netag: W/\"697e2f99-15a8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 10460\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sLotEoA9kDUogB7%2BKNwW5u4A2f09WK%2BmGKm2a4LuoZhiyVKnFsGXudyXUu0uYF1wIpfHz%2FC1ReYTdm1%2FoZfTE%2FFPnumFawu0OHzKjsxvf%2F4gx3YKDWs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7aafa09b6d0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5544,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5215), with CRLF line terminators","md5":"1515ed21d8bd30ca0fae0970f85a7fb3","sha1":"b7808c728fe5fcf884620df5e2154ce988e920c7","sha256":"f2bb0e8511764611ff0081b549ff188c326c7376bf86e28513782b0a48f9c7aa","sha512":"38ba3736b75c78b1c2149cc18022eb235144c162d3fd9d817318e05be6359e7d192fe81b0546b54bd4e9ab56c601c1b87d7b152dfdef3c4646e6a342e7a3f6dd","ssdeep":"96:IVkLdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrwH:ekL4BtcvvRqIQcNa74ccrwH","tlshash":"09b19384b220bb8b6b731169919f144b937673b2ccce55007639a5987e7082c97b7fdc","first_seen":"2023-03-07T13:20:43Z","last_seen":"2026-08-15T03:25:52.233642Z","times_seen":483,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/BCKR%20_%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Distribution_files/powered_by_meta.png","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:48.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /BCKR%20_%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Distribution_files/powered_by_meta.png HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:48 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 10460\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=basxRCrNrm51a29vikn8zonpWdyuVLTwaPEG4MWxAof%2BmpqCt3VKDcXZr8aH9S450CDVYWCtjERBN2eTJXtSni0gAfO8bwqKtasZKShkaUB4SZlSX8I%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c7aafa37b810afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7729)","md5":"e26f3685e1f46cbb03ae7ade7eb3c42f","sha1":"362527522c335c5152a1ffe8405e997c78fcf224","sha256":"e9eb5abcad6e36dc929eef80f276079a6a808c89ffe45158a9a7dc65c2480d23","sha512":"de094197a5d57960612fe81594e3daa2403084fb15e1cacb612ea0cca74f69da68ab2a36dea9567d87d07d73fc2e556bf1c8dbccadd54584bd889966a52dee12","ssdeep":"768:WzaVEWDvdUeVIJfb3B/ioD2L6Ujw3Vv8ZvRujjUPEJfJmrzyFAgFvqU3rwIC43Kj:WcJdUUIB38Y5yH2J7lcE1TSB1DR","tlshash":"0dc37317ba9042187903c1ba1dff7b5e3935a0074d84ef9bbdcd2560df8b2a2e891764","first_seen":"2026-02-02T12:28:56.07974Z","last_seen":"2026-02-02T15:23:15.203976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/123/styles.css","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /123/styles.css HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\netag: W/\"697e2f99-75670\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 10459\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYS5km%2B5hzZkKzT%2BtTgT8Fn5iBuhK%2FYgYVr7kwoETySZyC48EHrb4FRCr%2BGlShocaDE3bkJT%2FP6i67LxDvQppBZ8prpQ50VijbYf33ZVvbc%2FGnDKqGA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7aafa08b680afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":480880,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20196), with CRLF line terminators","md5":"04571f9334a9ec7d194aadf0619b97b0","sha1":"217028f2a47144021542a5bd3da227fa6b95c238","sha256":"5170301acec4e30a994bdbb46e99ab410f0e3203e629b4ec775a2c05000a65c0","sha512":"1497f5dfa87505a51e50f9d66da6975dffa8f01d5da34f27f4fc07dbf98f76a2593578556cff347cc863dd66824ba2f3a2f4c6b8d1866bdf543b731bfdddfa58","ssdeep":"6144:/S6XuVsQboD9yIyYMN6el5gTVyF24buT+:TeWQbo5y0MoeTgx/T+","tlshash":"c9a43b295a111512b733cb3c2bfd5244f7944817ee8349bd7add1a808ff21b8b962e8d","first_seen":"2024-09-20T21:38:21.078438Z","last_seen":"2026-07-10T23:25:47.356627Z","times_seen":80,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/BCKR%20_%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Distribution_files/sprite.svg","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /BCKR%20_%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Distribution_files/sprite.svg HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 10460\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dETy1SN12SQaPl63yJAY%2FvGUyjgVk87ippqH1dBNqL9ln9Y%2FlhmeZyPUzwP4DtYmiV%2F0Otyl7gyeoz5vC3d%2FQu1eR%2BJmtNNMLEyZWjko%2F%2F1B9WRjIv8%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c7aafa09b6e0afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":126162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7729)","md5":"e26f3685e1f46cbb03ae7ade7eb3c42f","sha1":"362527522c335c5152a1ffe8405e997c78fcf224","sha256":"e9eb5abcad6e36dc929eef80f276079a6a808c89ffe45158a9a7dc65c2480d23","sha512":"de094197a5d57960612fe81594e3daa2403084fb15e1cacb612ea0cca74f69da68ab2a36dea9567d87d07d73fc2e556bf1c8dbccadd54584bd889966a52dee12","ssdeep":"768:WzaVEWDvdUeVIJfb3B/ioD2L6Ujw3Vv8ZvRujjUPEJfJmrzyFAgFvqU3rwIC43Kj:WcJdUUIB38Y5yH2J7lcE1TSB1DR","tlshash":"0dc37317ba9042187903c1ba1dff7b5e3935a0074d84ef9bbdcd2560df8b2a2e891764","first_seen":"2026-02-02T12:28:56.07974Z","last_seen":"2026-02-02T15:23:15.203976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/BCKR%20_%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Distribution_files/sprite.svg","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:48.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /BCKR%20_%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20Distribution_files/sprite.svg HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:48 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 10460\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QbuZVWtdd7JB3u%2BI5%2BmEYWvzxhylkL59vwzHRFGY%2FHosvdFnC3r6fC8Nqa2mzh7W5b%2BcZ%2BCq4F6zzdknlJHFbx3JawztXJ8pywc7clxjNc5%2BEl3VAqM%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c7aafa37b800afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":126162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (7729)","md5":"e26f3685e1f46cbb03ae7ade7eb3c42f","sha1":"362527522c335c5152a1ffe8405e997c78fcf224","sha256":"e9eb5abcad6e36dc929eef80f276079a6a808c89ffe45158a9a7dc65c2480d23","sha512":"de094197a5d57960612fe81594e3daa2403084fb15e1cacb612ea0cca74f69da68ab2a36dea9567d87d07d73fc2e556bf1c8dbccadd54584bd889966a52dee12","ssdeep":"768:WzaVEWDvdUeVIJfb3B/ioD2L6Ujw3Vv8ZvRujjUPEJfJmrzyFAgFvqU3rwIC43Kj:WcJdUUIB38Y5yH2J7lcE1TSB1DR","tlshash":"0dc37317ba9042187903c1ba1dff7b5e3935a0074d84ef9bbdcd2560df8b2a2e891764","first_seen":"2026-02-02T12:28:56.07974Z","last_seen":"2026-02-02T15:23:15.203976Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/becker-logo.jpg","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:48.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /becker-logo.jpg HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:48 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49790\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\netag: \"697e2f99-c27e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 10461\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cu7B2GKNxGEzB2nHlHUkv9a5wGBCuwvPiiiPVKJhDm4jX1iuO1bPz4WPCqtjHNMUNublyvNsQ%2FdGvbktrTBstx6D1iTj9tlIx6yUss7p%2FXF2ZQMXhE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c7aafa7fc110afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49790,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 5.0.3], baseline, precision 8, 400x400, components 3","md5":"f69d0572010c89a64c875ae853bf085d","sha1":"c49eb9d402ff4336a9eee7b86c59f949514159ba","sha256":"91ae61ed9ade99ea9db91c6868cbdfddfb25f8e66b1aa70e422c103e67796d46","sha512":"6075c9324c09a87d9570f31f4587fd203337e5a94e3c86359c8bb4c7aee661b1f5dd9b25ec505735e4f1f09fe88854eaaa84b6b8b4bdcc4dcb1300d02d1f8b60","ssdeep":"1536:fiBgneoaPW1QGy6hAGGEcnR24ANdgw4WroOdeplInu:pCGrWEvbswBZcpiu","tlshash":"f923f2d5a7641bd0dca0227c384415faf005fc46e7dc93968c561e297988fd4e988afd","first_seen":"2026-02-02T12:28:56.08647Z","last_seen":"2026-02-02T15:23:15.201106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:48.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://justinsun-allocation.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 17:24:55 GMT\r\nexpires: Thu, 28 Jan 2027 17:24:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 424673\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-16T08:31:05.874203Z","times_seen":259815,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":136,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"justinsun-allocation.xyz/svelte.js","fqdn":"justinsun-allocation.xyz","domain":"justinsun-allocation.xyz","tld":"xyz"},"ip":{"addr":"172.67.221.208","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://justinsun-allocation.xyz/","date":"2026-02-02T15:22:47.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"justinsun-allocation.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 31 Jan 2026 16:27:45 GMT","end":"Fri, 01 May 2026 17:24:07 GMT"},"fingerprint":{"sha1":"0B:A0:76:62:B2:0B:DE:0D:2B:72:26:16:91:DF:20:46:F0:FB:89:6C","sha256":"77:94:26:D9:A3:59:BC:E2:40:A6:20:BF:E0:AC:0E:7B:B9:E7:29:27:95:B9:FC:C0:28:0B:6A:14:8E:75:BE:BC"}}},"request":{"raw":"GET /svelte.js HTTP/1.1\r\nHost: justinsun-allocation.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://justinsun-allocation.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Feb 2026 15:22:47 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 31 Jan 2026 16:36:41 GMT\r\netag: W/\"697e2f99-3303b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 10460\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kl%2FoKnO6ZwDTxU22Xzm2iJE4rNpcaNQ32GvI5jQalHjn%2B3sEjNhpDuhyZCV3UydV2BIpAQakV9yXgjVUS%2FrF1LPz13V15PoI9RNgjUwWgPvzljgFQE8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c7aafa08b670afe-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3343282,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e1154161e0c9104fe96fbc0acdeea536","sha1":"c462a5f1cc1cb9344f9da8a21ce93e15e251fc11","sha256":"941d9d92bab7bd305bbe1baea340c0e842424cf6edd86ac04eb1e73746b842d7","sha512":"879cb1bce80f8d10f533078588fdad38b19d0606a32e93295fa6033049d115ce32c16ef1354b186576d0acc72484cfdf50747ace2fd8f551892b145227118af8","ssdeep":"24576:h2tEK1Gpm6zF1D07FC+C0CpCwCAveULOiCRCzCWCvCkfDQFfgKroUT9FusNFhiOV:h86cI5v4Q65O","tlshash":"1e259343a2d0386645d39fb27a2750caec2d8bef618c5ab9b44dfc3878e4154d6ec670","first_seen":"2026-02-02T12:28:56.08203Z","last_seen":"2026-02-02T15:23:15.213037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-02","alert":"Sinkholed","trigger":"justinsun-allocation.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}