{"report_id":"0580b8cc-4db6-4caa-a789-207af2dd9f21","version":6,"status":"done","tags":[],"date":"2025-10-23T12:53:25Z","url":{"schema":"http","addr":"safeoffers.pro/a/1wVvWHXOxfpo94","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"172.67.217.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"vnljag.hottzone.com/?s1=206556\u0026s2=1993479\u0026s3=105604\u0026s5=backuser\u0026click_id=mlClick-oLYFTPiM\u0026iexpp=1\u0026j1=1\u0026utm_source=c44213fa2bf7a303\u0026ban=other","fqdn":"vnljag.hottzone.com","domain":"hottzone.com","tld":"com"},"title":"vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM"},"submit":{"url":{"schema":"http","addr":"safeoffers.pro/a/1wVvWHXOxfpo94","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"172.67.217.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-27T12:53:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"vnljag.hottzone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-19T22:12:30.612025Z","alert_count":0,"request_count":2,"received_data":81924,"sent_data":1108,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vnljag.hottzone.com","ip":{"addr":"52.19.138.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2025-10-13","domain_rank":0,"first_seen":"2025-10-19T21:38:28.723942Z","last_seen":"2025-10-19T21:38:28.723942Z","alert_count":1,"request_count":1,"received_data":20080,"sent_data":622,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-19T22:12:35.4735Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"safeoffers.pro","ip":{"addr":"104.21.53.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-07","domain_rank":0,"first_seen":"2025-08-23T05:53:33.392506Z","last_seen":"2025-10-06T17:57:36.001325Z","alert_count":0,"request_count":5,"received_data":42337,"sent_data":2672,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-dimi.akamaized.net","ip":{"addr":"2.23.13.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2014-03-18","domain_rank":1026219,"first_seen":"2022-07-07T13:18:25Z","last_seen":"2025-10-20T21:26:14.105116Z","alert_count":0,"request_count":5,"received_data":457029,"sent_data":2348,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safeoffers.pro/a/1wVvWHXOxfpo94","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"104.21.53.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"babc0b4f08a7009b111017280135c655","sha1":"c5e78b82b85514d9e07e352560e808c09616f592","sha256":"0e18093a96f50b734e14a433cc9625aa91c97c0ee9d12216cec3c0efd797f196","sha512":"17c8fd5b1f4252e07e5270d7a0f1c35d9c533f27f5e7c795252a440647002b9b9d3df569abd753d74693dd47341fd209aea9018cb0e5039babe20f4eca7448af","ssdeep":"","tlshash":"87c080f78f7140945d704cd1455b4656c2e3151f8e04c04cfeea73414f5792375c05c5","size":175,"data":"","first_seen":"2025-10-23T12:53:29.784616Z","last_seen":"2025-10-23T12:53:29.784616Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safeoffers.pro/js/envoirment.js?id=a535a99b3fccb8f0756c","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"104.21.53.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"444d7cee5ae9f9da5ca41e3862efad24","sha1":"b08a6d107a3dbad917fce3c279765edad3b4e597","sha256":"b09b2ea740c4fe8d5af47fdf87193465fc381fcffaee56a5e1a80380151eba81","sha512":"5ebeb9b00eb9c827fa883c75b935b820bf2741890ce630e197e8af16026f02dd4e988b839a5f4257c5937dfe478a8581ab9f5a4d31eb023790933a76c2c5d6b1","ssdeep":"384:HCHRnoLghXQxSCNO/Xb/DgTjwt9fEYgALYivE3b5IORv1QpjXuBsb8UeKrFsBn0k:HCHRnCtS/XAiaALYZryOTQpzaUeTXx","tlshash":"fbe21b5d75db20394372b6e4212fd408b07a5a80704d8880ebbad9942df9e5b713ffe9","size":32760,"data":"","first_seen":"2025-06-01T07:02:28.681765Z","last_seen":"2025-12-03T06:37:48.804531Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","fqdn":"vnljag.hottzone.com","domain":"hottzone.com","tld":"com"},"ip":{"addr":"52.19.138.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d3c7c3c27dc9e2df3a98908abb130ef","sha1":"09327f6f76d600889d6415da3a0137409d7c53e0","sha256":"59f805a9f99dd76670b34fa34d6d6e09cc8d2efb7a4fb864eed037e6ab2462ba","sha512":"81f173ab62dd9066482020d13e73a2dcf67acbfcd04e8d54293ff87ed0ef1b2482da8a349031f1fa87c34a227288bcceb99570437e16b317bc1559f9dec537ff","ssdeep":"","tlshash":"91410dba3eeb1b751d5b74b84baae9423e71800342099da5b9cc13030f51ba503f1a96","size":2190,"data":"","first_seen":"2025-10-23T12:53:29.785728Z","last_seen":"2025-10-23T12:53:29.785728Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dimi.akamaized.net/landings/268891/1716819952/js/translate.js?1716819952","fqdn":"cdn-dimi.akamaized.net","domain":"akamaized.net","tld":"net"},"ip":{"addr":"2.23.13.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ac774f9a5e22aed765762171a8b8bc5","sha1":"b87808379dca662589ecbd62d552ce9f67e0e7db","sha256":"0272395e2269e2f48e635e7cc2c1cdfe0ed8ad52b3a5a11a689f7786ce1a3fd5","sha512":"9da4bffb43db71e039ade8d7145ff17a0c230b10092b91122a83a79ab0859fd54057cf8e0deb7b1fd4c6f93708e9791d7fc4357194623d5bdb589b1eb6340fff","ssdeep":"768:6ChV1E85v6agnGmT7iIq/7FQP8QAA5K7OShlcNgaZcdIcHQrX4+zW3aAj:6Chn5vlSUt8Kyilc+aZcdnQrXxzC","tlshash":"08336fa53836570dc432f2069c406826ee5b475fae02dce630fe15262fb577283c75ea","size":51197,"data":"","first_seen":"2023-03-07T12:02:29Z","last_seen":"2026-04-05T11:30:31.858554Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dimi.akamaized.net/landings/268891/1716819952/js/scripts.js?1716819952","fqdn":"cdn-dimi.akamaized.net","domain":"akamaized.net","tld":"net"},"ip":{"addr":"2.23.13.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"206fe4e6097b200ebf9d87ebd64561bd","sha1":"079cb4678d4de456ed9e700f73d2535de8f259ab","sha256":"2da5ff5670e0df2633303fa033736cccfec0d63bee72a604b960256b63dbb496","sha512":"443b8db71487c25ebd30cff945c16b90ff101376ae30feaa1eada7ad4e2e019e5971011b42e369a126c0dbe4341b12497f79fcaf59c8297761f5603dd2286f9d","ssdeep":"1536:JPZEy/VeCbTgONfbiw6vCMI2wXjyi1gMKPBnbaDZALpf9hU2AwQodeLaG+8GQtvI:OiqnyALpI89GLLLa98Hrw","tlshash":"3ce3a2c9bef338539673a4bc4aaf9109b075856b340ccc50b85cd4e46f64a5920ebfad","size":154549,"data":"","first_seen":"2024-08-19T18:18:19.407292Z","last_seen":"2026-04-05T11:30:31.875963Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","fqdn":"vnljag.hottzone.com","domain":"hottzone.com","tld":"com"},"ip":{"addr":"52.19.138.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a938447730e5c6250892d97a2d3761c3","sha1":"305f45d4121b267a6154bf8f6fea7545f1be70b1","sha256":"6fa9d0c58780372c4f61af48870feb41194353e250c88bd5c3a408536fc080ec","sha512":"3865bb562be5c0e9a02fd96b27262a2e9d0b8f15013689408af7eee88da3cc40f5d1ea6f2d8a977a20f31a75fe505b2c40f8931a4b4273585bbc9e4af89e5044","ssdeep":"","tlshash":"9481db5e12e314369273f1384fafa11832764057140ddd0a7f1d5700afa1a3d8be5faa","size":4012,"data":"","first_seen":"2025-10-23T12:53:29.787872Z","last_seen":"2025-10-23T12:53:29.787872Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","fqdn":"vnljag.hottzone.com","domain":"hottzone.com","tld":"com"},"ip":{"addr":"52.19.138.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"78a93fba834e51562cc0c1643de4a304","sha1":"2bf106e16eb1752230a8499285b73ae6d8dcbcc2","sha256":"d684c6105ece5706298f7778d19bc9881449a39196f92c000254f4ce6fdd368e","sha512":"c39e9046f82f671fd428b4374c39e3f559d816c495e4cadc5477d91f7502467aee06a91fd13ca882f68c417309be3b061f64dc57109574ff3eeb90a7183d1c34","ssdeep":"","tlshash":"0651003d2da2702da15370282e5f984c7175422b6025d944fe0e96906f50bbaa8eefce","size":2524,"data":"","first_seen":"2023-06-30T16:46:16Z","last_seen":"2026-05-16T21:13:01.314812Z","times_seen":4725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","fqdn":"vnljag.hottzone.com","domain":"hottzone.com","tld":"com"},"ip":{"addr":"52.19.138.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9320f4c96e69f35f385a133e36bbd45b","sha1":"1a8a6158a2943e5365e77252699c086679e59096","sha256":"49b4b8d0ea6f5e9f18d0b2a583888720be163311f5c18203dec0d7dd23f2fddd","sha512":"3f4a7f3c5d803c5c3338218c19480095acf7d8fed89818b6ffe3ff71b90c6eb70a79155fa9b01f397abd8a34cce46517862e0a576d0de16261903ef3fd63abdb","ssdeep":"","tlshash":"07117b6905aa1470452bb075ab8ee1c936f7746709099c50bd1c068e9fa0eb91ff4be4","size":858,"data":"","first_seen":"2024-07-29T15:17:13Z","last_seen":"2026-05-16T21:13:01.315414Z","times_seen":3787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","fqdn":"vnljag.hottzone.com","domain":"hottzone.com","tld":"com"},"ip":{"addr":"52.19.138.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"introduction_type":"scriptElement","is_inline":true,"md5":"522b35233b3dbd11374f2d7acb571eb9","sha1":"ba49e8c8378f1ec3395445ad0909f5e433c80351","sha256":"032101819a4943d9af33f1a28cc73002da18ff81b58c8bb63e836eee4d8f7bc5","sha512":"8b6ac9cbfaac9ee0cd3883437a8a7e0c6e3fa1986d4f79d71a87b46d2476155267a25819214be319cafb5d4425ba3b3ea0db293f7e492373381cae3897fffd80","ssdeep":"","tlshash":"b2e0c0f20cab050d4c24044ba39c8c536eb518834c546454f054230e0b9298733608f9","size":337,"data":"","first_seen":"2025-10-23T12:53:29.790223Z","last_seen":"2025-10-23T12:53:29.790223Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"safeoffers.pro/inactiveprogram","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"104.21.53.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safeoffers.pro/a/1wVvWHXOxfpo94","date":"2025-10-23T12:53:03.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeoffers.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 18:04:23 GMT","end":"Sat, 03 Jan 2026 19:02:46 GMT"},"fingerprint":{"sha1":"25:87:FF:FB:AD:08:07:6F:D1:D1:F3:7D:C2:19:EB:51:9F:13:17:8A","sha256":"DF:AC:5B:C9:3B:F7:44:26:EC:4A:FD:14:CC:FE:91:EA:60:1F:9E:F4:FC:B3:E0:20:47:7F:0D:5A:3D:F1:8F:AA"}}},"request":{"raw":"GET /inactiveprogram HTTP/1.1\r\nHost: safeoffers.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://safeoffers.pro/a/1wVvWHXOxfpo94\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: 11868452804c8a2bb86650b580125ff5=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 23 Oct 2025 12:53:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5zvYTnXgNAr90cFuExb6LrucPA%2FS7AztPPXKfTLoZDGDtS7gGHDp01l2aoWqGP6yGS5BSwg9VY%2F9mSy%2BGXzSycWnu%2B472Tb4vw54tJGQ\"}]}\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9931600b1dd5783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2134,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"95e9f5a3e5328b5fc9ec07454d7a3605","sha1":"c7f044fa836535a6fa9d2cfab9f3c18882ffa73e","sha256":"cccb0db6dcd69a31d175820c82e0c9960f52f07c1a52beb9efe3c1c62e1ec69b","sha512":"cc7fb990437a1643db8a23e68e11da33366d451e369d4a4edf8cd6bdca07e396a0c90ae2fcb81bbfd0ff245e5631d8f4c6f85db1586a329a44d59530060e3db5","ssdeep":"","tlshash":"9a41571b58f0202961a3d1b61af5790dbea0920bd50acc94f8adc6ac5fd5fc8c693988","first_seen":"2025-05-20T05:00:42.087435Z","last_seen":"2026-05-16T04:56:25.222938Z","times_seen":396,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dimi.akamaized.net/landings/268891/1716819952/js/translate.js?1716819952","fqdn":"cdn-dimi.akamaized.net","domain":"akamaized.net","tld":"net"},"ip":{"addr":"2.23.13.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","date":"2025-10-23T12:53:04.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /landings/268891/1716819952/js/translate.js?1716819952 HTTP/1.1\r\nHost: cdn-dimi.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vnljag.hottzone.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: B3fYvcYMKI2Rg+9r662BVnICqso8YRRq6ihbJ+qpGfFgeh2456vwKLUmvfc4laVRyJhnEh2yt/w=\r\nx-amz-request-id: GMR1VJ1CZ00PSH4Y\r\nLast-Modified: Mon, 27 May 2024 14:25:55 GMT\r\nETag: \"5ac774f9a5e22aed765762171a8b8bc5\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: text/javascript\r\nServer: AmazonS3\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nDate: Thu, 23 Oct 2025 12:53:04 GMT\r\nContent-Length: 15775\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":51197,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5ac774f9a5e22aed765762171a8b8bc5","sha1":"b87808379dca662589ecbd62d552ce9f67e0e7db","sha256":"0272395e2269e2f48e635e7cc2c1cdfe0ed8ad52b3a5a11a689f7786ce1a3fd5","sha512":"9da4bffb43db71e039ade8d7145ff17a0c230b10092b91122a83a79ab0859fd54057cf8e0deb7b1fd4c6f93708e9791d7fc4357194623d5bdb589b1eb6340fff","ssdeep":"768:6ChV1E85v6agnGmT7iIq/7FQP8QAA5K7OShlcNgaZcdIcHQrX4+zW3aAj:6Chn5vlSUt8Kyilc+aZcdnQrXxzC","tlshash":"08336fa53836570dc432f2069c406826ee5b475fae02dce630fe15262fb577283c75ea","first_seen":"2023-03-07T12:02:29Z","last_seen":"2026-04-05T11:30:31.858554Z","times_seen":42,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":82,"dns":35,"connect":3,"send":0,"wait":9,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","date":"2025-10-23T12:53:04.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vnljag.hottzone.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Oct 2025 23:38:54 GMT\r\nexpires: Thu, 22 Oct 2026 23:38:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 47650\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-16T22:09:36.563591Z","times_seen":829107,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":69,"dns":1,"connect":7,"send":0,"wait":14,"receive":5,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safeoffers.pro/js/envoirment.js?id=a535a99b3fccb8f0756c","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"104.21.53.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safeoffers.pro/a/1wVvWHXOxfpo94","date":"2025-10-23T12:53:03.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeoffers.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 18:04:23 GMT","end":"Sat, 03 Jan 2026 19:02:46 GMT"},"fingerprint":{"sha1":"25:87:FF:FB:AD:08:07:6F:D1:D1:F3:7D:C2:19:EB:51:9F:13:17:8A","sha256":"DF:AC:5B:C9:3B:F7:44:26:EC:4A:FD:14:CC:FE:91:EA:60:1F:9E:F4:FC:B3:E0:20:47:7F:0D:5A:3D:F1:8F:AA"}}},"request":{"raw":"GET /js/envoirment.js?id=a535a99b3fccb8f0756c HTTP/1.1\r\nHost: safeoffers.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safeoffers.pro/a/1wVvWHXOxfpo94\r\nCookie: 11868452804c8a2bb86650b580125ff5=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 23 Oct 2025 12:53:03 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 09 Oct 2025 11:09:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 5903\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\netag: W/\"68e797dc-7ff8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvKHcATwWIVoYNLkP7Z8v89OPPvx3fAefApWSY0%2FiRdtcRgdBqI7P1rAQw%2BWrbnJTQrOq4wANnyYV9Fxxbk9r2Fs2pOnR4vFTYdGlkGg\"}]}\r\ncf-ray: 99316005bce4783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32760,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32753)","md5":"444d7cee5ae9f9da5ca41e3862efad24","sha1":"b08a6d107a3dbad917fce3c279765edad3b4e597","sha256":"b09b2ea740c4fe8d5af47fdf87193465fc381fcffaee56a5e1a80380151eba81","sha512":"5ebeb9b00eb9c827fa883c75b935b820bf2741890ce630e197e8af16026f02dd4e988b839a5f4257c5937dfe478a8581ab9f5a4d31eb023790933a76c2c5d6b1","ssdeep":"384:HCHRnoLghXQxSCNO/Xb/DgTjwt9fEYgALYivE3b5IORv1QpjXuBsb8UeKrFsBn0k:HCHRnCtS/XAiaALYZryOTQpzaUeTXx","tlshash":"fbe21b5d75db20394372b6e4212fd408b07a5a80704d8880ebbad9942df9e5b713ffe9","first_seen":"2025-06-01T07:02:28.681765Z","last_seen":"2025-12-03T06:37:48.804531Z","times_seen":256,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safeoffers.pro/favicon.ico","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"104.21.53.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safeoffers.pro/a/1wVvWHXOxfpo94","date":"2025-10-23T12:53:03.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeoffers.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 18:04:23 GMT","end":"Sat, 03 Jan 2026 19:02:46 GMT"},"fingerprint":{"sha1":"25:87:FF:FB:AD:08:07:6F:D1:D1:F3:7D:C2:19:EB:51:9F:13:17:8A","sha256":"DF:AC:5B:C9:3B:F7:44:26:EC:4A:FD:14:CC:FE:91:EA:60:1F:9E:F4:FC:B3:E0:20:47:7F:0D:5A:3D:F1:8F:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: safeoffers.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safeoffers.pro/a/1wVvWHXOxfpo94\r\nCookie: 11868452804c8a2bb86650b580125ff5=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: cloudflare\r\ndate: Thu, 23 Oct 2025 12:53:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private, must-revalidate\r\nlocation: https://safeoffers.pro/inactiveprogram\r\npragma: no-cache\r\nexpires: -1\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vqv3CCG%2F%2BG3l40h5VT6iIJzxmomcOdywOcehlEHWbQydHaUo8QOBDFt6uKNN2TRuuKPlJKNC8DcL81TCdNoBVAXnx2BPgPRi%2FG541boL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 99316005fce9783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2134,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-16T22:14:49.392477Z","times_seen":15300628,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safeoffers.pro/finger","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"104.21.53.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safeoffers.pro/a/1wVvWHXOxfpo94","date":"2025-10-23T12:53:03.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeoffers.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 18:04:23 GMT","end":"Sat, 03 Jan 2026 19:02:46 GMT"},"fingerprint":{"sha1":"25:87:FF:FB:AD:08:07:6F:D1:D1:F3:7D:C2:19:EB:51:9F:13:17:8A","sha256":"DF:AC:5B:C9:3B:F7:44:26:EC:4A:FD:14:CC:FE:91:EA:60:1F:9E:F4:FC:B3:E0:20:47:7F:0D:5A:3D:F1:8F:AA"}}},"request":{"raw":"POST /finger HTTP/1.1\r\nHost: safeoffers.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 1293\r\nOrigin: https://safeoffers.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safeoffers.pro/a/1wVvWHXOxfpo94\r\nCookie: 11868452804c8a2bb86650b580125ff5=11868452804c8a2bb86650b580125ff5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 23 Oct 2025 12:53:04 GMT\r\ncontent-type: application/json\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHC02avCgbaLSQ24O%2BZ4uZotfZ9lHFsSbwdtw9oR7J%2Fv4%2Fh2qMtIJJ66oPBcoPN3K8RApCVePrh2vJYQaRduNUIGadKmXnyk9u%2F65sTz\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9931600b2dd7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5820854f62a6eb3d38ba7ba0d1b3ea75","sha1":"639df0b84fe699b4a290a713fd6b9a94bd4deb95","sha256":"912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d","sha512":"4452c0a26fa81357f95bf6160c3f5d35ff39f62e03d5faa1e69eb9dfdcb2c83eda4235463ee4065dceb534cc497891a05535467337ad84693e5fa48c317dbbbb","ssdeep":"","tlshash":"f67000020000208008803c0000000a203ae00aa0822a00c0802c00288e08088f08a000","first_seen":"2023-03-13T15:21:35Z","last_seen":"2026-05-16T20:21:31.394128Z","times_seen":90657,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":188,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","fqdn":"vnljag.hottzone.com","domain":"hottzone.com","tld":"com"},"ip":{"addr":"52.19.138.177","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-23T12:53:04.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.hottzone.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Oct 2025 07:34:43 GMT","end":"Mon, 12 Jan 2026 07:34:42 GMT"},"fingerprint":{"sha1":"BE:BD:E6:08:C4:F6:A5:3F:12:AC:E9:C8:97:BD:1E:3B:B1:9E:CA:09","sha256":"75:5E:C7:AF:69:3E:9D:24:B5:35:A4:A9:52:16:BC:0B:BF:65:4F:AB:B8:F8:CF:72:82:06:C0:13:A1:2F:21:1D"}}},"request":{"raw":"GET /?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM HTTP/1.1\r\nHost: vnljag.hottzone.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://safeoffers.pro/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 23 Oct 2025 12:53:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: unique_id=68fa25300009dbe7; Path=/; Expires=Mon, 22 Dec 2025 12:53:04 GMT; Secure; SameSite=None\nunique_id2=68fa2530000ba1a7; Path=/; Expires=Wed, 21 Jan 2026 12:53:04 GMT; Secure; SameSite=None\n68fa2530000ba1a7_c=1; Path=/; Expires=Wed, 21 Jan 2026 12:53:04 GMT; Secure; SameSite=None\nref_token=206556; Path=/; Expires=Sat, 22 Nov 2025 12:53:04 GMT; Secure; SameSite=None\nimpression=; Path=/; Expires=Thu, 23 Oct 2025 12:53:04 GMT; Secure; SameSite=None\n68fa2530000ba1a7_sl=[268891]; Path=/; Expires=Thu, 06 Nov 2025 12:53:04 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19360,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (531)","md5":"300d3c0ec3d66e9bb756040d8366db56","sha1":"e888a186586906e550c5ca9e1ebe58e8f9972138","sha256":"42690ca519c975df59d1d92a96aaeff5f2c9148eb1ef047c91380f753b2ccd4c","sha512":"12b7fb462f78def619d9b1231aa27d3bb3066a5dd572826b5b5f7c5d8bc1a28bba06805ab0218109f18c1be9498c89163ee3559e0dcd03a61fd0b9fdf7f87253","ssdeep":"192:Pk7s9xQ+C0qLliMzseMUbRuCrdCjXcCFci3ciiXtg01yS9J7yySCWKSUAiQ/v:s7sLQz3R3g01AKSUhQ/v","tlshash":"929274751fe7303a053360f84b7beb2875b25177c21a8d04799c070a6f80fa95f956ab","first_seen":"2025-10-23T12:53:29.778036Z","last_seen":"2025-10-23T12:53:29.778036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":114,"dns":1,"connect":35,"send":0,"wait":55,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-23","alert":"Sinkholed","trigger":"vnljag.hottzone.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dimi.akamaized.net/landings/268891/1716819952/js/scripts.js?1716819952","fqdn":"cdn-dimi.akamaized.net","domain":"akamaized.net","tld":"net"},"ip":{"addr":"2.23.13.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","date":"2025-10-23T12:53:04.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /landings/268891/1716819952/js/scripts.js?1716819952 HTTP/1.1\r\nHost: cdn-dimi.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vnljag.hottzone.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: phIy7SptIGyAkdg01Aaj0Eh02hrb0uTGOjit2BCliMAt21Gt9pwmyV7Rirn3VSxYnApv/XtozJA=\r\nx-amz-request-id: GMR2YDPKJR8CNFKB\r\nLast-Modified: Mon, 27 May 2024 14:25:55 GMT\r\nETag: \"206fe4e6097b200ebf9d87ebd64561bd\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: text/javascript\r\nServer: AmazonS3\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nDate: Thu, 23 Oct 2025 12:53:04 GMT\r\nContent-Length: 38085\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":154549,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (730)","md5":"206fe4e6097b200ebf9d87ebd64561bd","sha1":"079cb4678d4de456ed9e700f73d2535de8f259ab","sha256":"2da5ff5670e0df2633303fa033736cccfec0d63bee72a604b960256b63dbb496","sha512":"443b8db71487c25ebd30cff945c16b90ff101376ae30feaa1eada7ad4e2e019e5971011b42e369a126c0dbe4341b12497f79fcaf59c8297761f5603dd2286f9d","ssdeep":"1536:JPZEy/VeCbTgONfbiw6vCMI2wXjyi1gMKPBnbaDZALpf9hU2AwQodeLaG+8GQtvI:OiqnyALpI89GLLLa98Hrw","tlshash":"3ce3a2c9bef338539673a4bc4aaf9109b075856b340ccc50b85cd4e46f64a5920ebfad","first_seen":"2024-08-19T18:18:19.407292Z","last_seen":"2026-04-05T11:30:31.875963Z","times_seen":19,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":80,"dns":37,"connect":3,"send":0,"wait":10,"receive":2,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:400,500,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","date":"2025-10-23T12:53:04.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 14:34:12 GMT","end":"Wed, 24 Dec 2025 14:34:11 GMT"},"fingerprint":{"sha1":"A8:1F:72:36:24:F2:F6:E0:7B:67:5F:39:3B:77:D6:8D:FC:AA:91:DF","sha256":"C0:8F:C7:95:96:3C:18:D4:60:5F:92:EC:FE:5D:AB:58:62:6D:05:D5:A1:3F:B1:EC:B0:88:5F:E3:9E:21:52:BF"}}},"request":{"raw":"GET /css?family=Roboto:400,500,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn-dimi.akamaized.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Oct 2025 12:53:04 GMT\r\ndate: Thu, 23 Oct 2025 12:53:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"227c49935c94e2db746d5483119e3eda","sha1":"8698bd6466a7746aefaa8a78ae05feeb2e3db075","sha256":"f30a2f101b045d24748cdbb5e2082e3216ae8ecfcc2f091af638786d3eced120","sha512":"4a7f23e91bff114b72ba6fce5028fbe508f1bc345dd766a3d248746f017c7234a4dadafa6bac9398b2a755205b7539688081b92137bc13dd9384b1049a6a8468","ssdeep":"384:8wfMw1wWw6wyhw/qY4XwNwtwiwfDwOwdwBwyaw/qY4QwGwmw4wfdwkwDw3wyQw/P:8JKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVl","tlshash":"c872eca1041740009b839ce223cebf35fe5f92117141d0b9abfd9b6badcbc66526936d","first_seen":"2025-09-09T02:34:37.720999Z","last_seen":"2025-11-18T23:04:34.411089Z","times_seen":2605,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":139,"dns":0,"connect":14,"send":0,"wait":34,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dimi.akamaized.net/images/favicon.ico","fqdn":"cdn-dimi.akamaized.net","domain":"akamaized.net","tld":"net"},"ip":{"addr":"2.23.13.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","date":"2025-10-23T12:53:04.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /images/favicon.ico HTTP/1.1\r\nHost: cdn-dimi.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vnljag.hottzone.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 3PLd1JbxzMUZnvLfJ08LlqJVa0X1bm3g8lDKKuDaPcpHRGpUOyvL763tb+Zgy/zeSb8kMvb/P10=\r\nx-amz-request-id: 2XWP9N688THY1C8H\r\nLast-Modified: Wed, 07 Nov 2018 08:41:38 GMT\r\nETag: \"4cdf3256cd7b8ec3917adb79d6bf457e\"\r\nAccept-Ranges: bytes\r\nContent-Type: image/x-icon\r\nServer: AmazonS3\r\nContent-Length: 4103\r\nDate: Thu, 23 Oct 2025 12:53:04 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"4cdf3256cd7b8ec3917adb79d6bf457e","sha1":"bc615337e9223183a126c8fb649774866fb53e69","sha256":"fbfff44a653dc193b93620f1035d221d3aaddf3238742270b3385482986ef7f0","sha512":"2bcd90a667b80393690e244a979e36e9f482b419e52302571a41412aac296aac1d58f81787b38d00a00257dca8bd3dce7cfe6ab8ef12aa3a91e0801ee3c3f21a","ssdeep":"96:LSDZ/I09Da01l+gmkyTt6Hk8nT2JCkun8i01FZZN:LSDS0tKg9E05T23un8h5N","tlshash":"2e818daf99b0d47f7938fa400dce8281e279256c197637ad94e5c5ee00a7b031bb0232","first_seen":"2023-04-08T14:37:37Z","last_seen":"2026-05-16T21:32:18.188774Z","times_seen":9044,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dimi.akamaized.net/landings/268891/1716819952/css/style.css?1716819952","fqdn":"cdn-dimi.akamaized.net","domain":"akamaized.net","tld":"net"},"ip":{"addr":"2.23.13.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","date":"2025-10-23T12:53:04.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /landings/268891/1716819952/css/style.css?1716819952 HTTP/1.1\r\nHost: cdn-dimi.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vnljag.hottzone.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: JuWIxK0XnfrCIXePQNoZxyGzvgkEGnUlatRSgH6Z4QgKucnpfY8TOk5nMq/rEHZnf0JESi7Z990=\r\nx-amz-request-id: 8X6BQBC6WDVDZBYX\r\nLast-Modified: Mon, 27 May 2024 14:25:55 GMT\r\nETag: \"10e70e8af8335be1ef3455ee37405951\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: text/css\r\nServer: AmazonS3\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nDate: Thu, 23 Oct 2025 12:53:04 GMT\r\nContent-Length: 1388\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4900,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"10e70e8af8335be1ef3455ee37405951","sha1":"1cb40bf426015fb6abb3c06253f32a68fc8f4a95","sha256":"31363c4b19b05ccc8f29f403a39f1a3c19dd7a36da8db30694f2894405429946","sha512":"dcbe2f70ea31a2d3f6f03b79904d487b08023277ae87987fac7ba730ad9ad0993aab9985b853834a7681e866716b3c06a88e314c74a0c640a266059f98404061","ssdeep":"96:iKDZCHLUDAsvM2GEby3CR/RGYQlLkALg9sFiN9AYA0IEpA0Ix7dnXjB30TIxcINZ:TMF2GJS6OdmtEg7XjB2wX0Sv","tlshash":"05a1cee66bf1610db12ac8517a877fa933586007d5dfcaedafa8701cef815d6416130c","first_seen":"2024-08-19T18:18:19.405862Z","last_seen":"2026-04-05T11:30:31.876746Z","times_seen":17,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":82,"dns":39,"connect":1,"send":0,"wait":4,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-dimi.akamaized.net/landings/268891/1716819952/images/sexy_9.jpg","fqdn":"cdn-dimi.akamaized.net","domain":"akamaized.net","tld":"net"},"ip":{"addr":"2.23.13.58","port":443,"asn":20940,"as":"Akamai International B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","date":"2025-10-23T12:53:04.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /landings/268891/1716819952/images/sexy_9.jpg HTTP/1.1\r\nHost: cdn-dimi.akamaized.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://vnljag.hottzone.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 1HVZyuzRIEQdYct94kwDp7gWSlLuk7SLaF0T5UczgSDF9yD8meyt7zG/A+AVRp9VBwuI37isqWA=\r\nx-amz-request-id: WE4CA6EKDTJ4JNW0\r\nLast-Modified: Mon, 27 May 2024 14:25:54 GMT\r\nETag: \"ce559eacc2c84ecdae78f6aa0932a9dd\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: image/jpeg\r\nServer: AmazonS3\r\nContent-Length: 240063\r\nDate: Thu, 23 Oct 2025 12:53:04 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":240063,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=547, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=450], progressive, precision 8, 450x547, components 3","md5":"ce559eacc2c84ecdae78f6aa0932a9dd","sha1":"396f765a25f53d25caa53d5a89c0dd405e471fce","sha256":"5d4b73fd7202e526c99636f60a0ce0c41a8a6101a6eed5e8fc74090842771efc","sha512":"3784a3fe6b5be7fbd4e7d031b1429b4b347cbdaab3c44c18c4b3d7a7c10ef035bc0d77306b53e449121313feb433dd89b6741d818b7f27e25e2ef306ba7e48d2","ssdeep":"6144:3Ly3FtmTWI5jd8yx72o4gYBNQ1qaUVtulrkl4pXu23Kj:3e3QW8hT72o4giN8qaECzX2j","tlshash":"85341229770b0e57f8d0597ef9c98394991049212b439907368c7853bfb9c82bef7932","first_seen":"2023-06-27T14:29:48Z","last_seen":"2026-04-05T11:30:31.879442Z","times_seen":42,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://vnljag.hottzone.com/?utm_source=c44213fa2bf7a303\u0026ban=other\u0026j1=1\u0026s1=206556\u0026s2=1993479\u0026s3=105604\u0026click_id=mlClick-oLYFTPiM","date":"2025-10-23T12:53:04.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"89:22:0A:7D:C4:DA:9A:62:E8:BB:1D:75:F2:AF:6C:80:09:53:D0:9F","sha256":"3E:15:EC:D6:31:6A:14:01:07:F9:F2:65:18:42:B3:08:7B:47:93:0C:CE:2C:93:2D:DA:E4:21:74:79:B6:F0:6F"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://vnljag.hottzone.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Oct 2025 23:38:54 GMT\r\nexpires: Thu, 22 Oct 2026 23:38:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 47650\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-16T22:09:36.563591Z","times_seen":829107,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":62,"dns":1,"connect":7,"send":0,"wait":8,"receive":9,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safeoffers.pro/a/1wVvWHXOxfpo94","fqdn":"safeoffers.pro","domain":"safeoffers.pro","tld":"pro"},"ip":{"addr":"104.21.53.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-23T12:53:02.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeoffers.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 18:04:23 GMT","end":"Sat, 03 Jan 2026 19:02:46 GMT"},"fingerprint":{"sha1":"25:87:FF:FB:AD:08:07:6F:D1:D1:F3:7D:C2:19:EB:51:9F:13:17:8A","sha256":"DF:AC:5B:C9:3B:F7:44:26:EC:4A:FD:14:CC:FE:91:EA:60:1F:9E:F4:FC:B3:E0:20:47:7F:0D:5A:3D:F1:8F:AA"}}},"request":{"raw":"GET /a/1wVvWHXOxfpo94 HTTP/1.1\r\nHost: safeoffers.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 23 Oct 2025 12:53:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, no-store, private\r\nx-robots-tag: noindex, nofollow\r\npragma: no-cache\r\nexpires: -1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdfjAj%2B%2BILDPHbaASRF3%2F%2FO%2Fm9A7N67XpkWPXkv40swsgIVFgBGgjhha6pggEGmkAIjPvkprc26Kt1vq1X%2FnJD%2FwDzDJrB%2BTzopGXw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nset-cookie: 11868452804c8a2bb86650b580125ff5=11868452804c8a2bb86650b580125ff5; HttpOnly; SameSite=Lax; Secure; Path=/; Max-Age=31536000; Expires=Fri, 23 Oct 2026 12:53:02 GMT\r\ncf-ray: 99316003fe7356a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"b359678f269e25805b9fe3fe8ed7b8c9","sha1":"746d23c0bf7a095f634dbabbc77f96eb261fd84e","sha256":"796360d0ee747880a97e384f37b87ce2c0f46f9da883c7f79f6b8504f161b4a3","sha512":"c51548b3c4d66f15679710e082418c9dc10cdf0d5d582708640b96c279a838063037cc8109917bc28dc80a00496dfebc5dc832f2b9c6ff11997d4812d33fc192","ssdeep":"","tlshash":"903184f32cb690695613c7f106fbf51c91a3120fda44c464fdae92581f04ba549e2b8c","first_seen":"2025-10-23T12:53:29.783466Z","last_seen":"2025-10-23T12:53:29.783466Z","times_seen":1,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":36,"dns":17,"connect":1,"send":0,"wait":110,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}