{"report_id":"0eedb163-6966-437b-a1fc-e21238ccf433","version":0,"status":"done","tags":[],"date":"2026-10-07T15:48:46Z","url":{"schema":"https","addr":"appjniwia.live/","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"appjniwia.live/","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"title":"Appjniwia: See Their Real Best Friends 👀","dom":{"size":17761,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (17745), with no line terminators","md5":"f41424aa2f08b1aafb5f2ac0b3d3da72","sha1":"4ccf619ab2d953467f9f97e46dea9480b20cb8b4","sha256":"8c2aef2818330d1c63aedf3e3aec63aa0b23888b772d1c4a235b02a8ae632e94","sha512":"9165bc77399442262c693508619dd16e1414b816909f7454cb9619415ba06679202623c5392f10f52450134cd1737d743835a6c8f5e24d75e425408be6bedea6","ssdeep":"384:3t1OG1OyOofKheuDGtE8vz0z34LU0b7/ZWfbSzUrqLmQRn1MJc3yVjSCxQS3BJoG:3tj19uDGtE8vz0z34LU0b7/ZWfbSzUrl","tlshash":"fc826425530d687bf36b02fee3087f71103f20eac7a92118a020157e1976e9b6a771f8","dom_hash":"domhash81a29d95d9391eef624331128a6a1db2","first_seen":"2026-10-07T12:50:48.892929Z","last_seen":"2026-10-07T15:48:46.522211Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"appjniwia.live/","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T15:48:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"appjniwia.live","ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-07T12:50:45.092796Z","last_seen":"2026-10-07T12:50:45.092796Z","alert_count":9,"request_count":9,"received_data":114578,"sent_data":4404,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"appjniwia.live/js/script.js","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ead052ccb74079e4de512eb7b99aa66","sha1":"6881cc8e520fc32a70bccd8597d40cc95da647d1","sha256":"d460dee9c75866f2e02d44c16f1f3b95273c31b2ff0c693cbc9d2d8f25bca704","sha512":"52dd43b8ba267322c7b0a4f061b03a4e530ef15ecbea5fd3e64ec034c3011209b89dd8c925c7da852497b22c6015c2d827f6f39fb37bd95fdffbfd5c253aff45","ssdeep":"","tlshash":"edf0f97f356e23324c2b26d61c6a9f862f142126d843c52418adca917f24d440dea5ec","size":645,"data":"","first_seen":"2026-10-07T12:50:48.913733Z","last_seen":"2026-10-07T15:48:46.528108Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"appjniwia.live/img/favicon.ico","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appjniwia.live/","date":"2026-10-07T15:48:17.531Z","timestamp":1791388097531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appjniwia.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6E0kqDxsDt7dj6s8eMvEanABXRh0A1IgV%2BADaqd%2BaPb5N1j8cBTGZwS6KJCu8W03tVtd39jte3%2Fk8dSRBFw0OurjuVMj%2FJHDWeLWVBY8zBUcuJ32GJ%2FDcTzWytFnVUcAiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/vnd.microsoft.icon\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\netag: W/\"b00f847fda156653f5baf76876748363\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a46e0c999a33569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4356,"size_decoded":5234,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"d4aa66d3a6a28edcc847ebafd8ae54e9","sha1":"732c3806f0cf2dc81d8b22ef4b34e593a2837d6e","sha256":"035ee4cc9a7f6b79fa31e8c23ce389e173285068ce365908afd3cac30d6b7180","sha512":"a6f24b73ed7b054d2a809769d4b6cf535b00eb64d51ab2210ebd77e0898717b69daa9108801d1d24028753b4b03979a4a81cac4cd41196eb347dcf9c406ef8e5","ssdeep":"96:0hSQmwgL/j4YORkdG3y4FhT5je4DiQ6epXBwiSKOVhTURA/1:iLmbH4fY4FhT5vDiNed+r1VFURq1","tlshash":"7d917dd39a9eee3ec38511334a52cb3580f58bad21ed9a484456a4f61735c01b8c159b","first_seen":"2026-10-07T12:50:48.902999Z","last_seen":"2026-10-07T15:48:46.524213Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appjniwia.live/","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T15:48:17.065Z","timestamp":1791388097065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dqxapr7%2FUExU1TuixUTPf0NWjcF9dkXmslOoRQJ%2BQbnpAA3DcI7NBijUrU7aRFUJko7%2FA9d7nFm3%2BoWbJzT5GC3aUDkyYZcP7%2F%2FLgm0%2BYTU2bDOLK1uV%2FmlUPULh6T4sqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a46e0c96c879c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9080,"size_decoded":3657,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9048)","md5":"2e0b5cec13489df2b302df44c3f97bf4","sha1":"f8e79192de330da6f50fd82e056bee4b5c24c5c1","sha256":"8865f0c5467e3b4c8eee0d6bcb1715eb14b98bf867d80e95daed1276e0da35ae","sha512":"bbf3bd2477afe5d2f013e20788039233e12c3cb5e4014c8e7dc10afa1b064b168a9463055be1948dc64fd5bea148c950cb9e7f5f11edbad6d223a1396ce9775d","ssdeep":"96:j3AOG2n1CGoG/F0XqF1Omqu1OqAqfdOFeo5LXulAyMrhsF0VHtA4Z4X4FE7t46sb:jIaF1OPu1OolO0Kh5tADfu3CYHbRp","tlshash":"0b129833822c743ed36b478cb28e3633723e40d88b45612465982af99d66f9b2b63754","first_seen":"2026-10-07T12:50:48.906881Z","last_seen":"2026-10-07T15:48:46.525765Z","times_seen":3,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":70,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appjniwia.live/js/script.js","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://appjniwia.live/","date":"2026-10-07T15:48:17.365Z","timestamp":1791388097365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appjniwia.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=li1DL2GyvUiHdidukaG4jNnbYo5TCV%2FrOXKN72a8ov3xDPVkk34cDBuBzjXkTf4X%2Fmi9jYAllJ2T8KZw18tzcApLJ%2BauX25QL2jLtGflYVad0JQtqXj1z4GFEmOz8WdS7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\netag: W/\"d49d4364b3ceb08b65c7e664ee70fc7e\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a46e0c988a04569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":645,"size_decoded":1195,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"5ead052ccb74079e4de512eb7b99aa66","sha1":"6881cc8e520fc32a70bccd8597d40cc95da647d1","sha256":"d460dee9c75866f2e02d44c16f1f3b95273c31b2ff0c693cbc9d2d8f25bca704","sha512":"52dd43b8ba267322c7b0a4f061b03a4e530ef15ecbea5fd3e64ec034c3011209b89dd8c925c7da852497b22c6015c2d827f6f39fb37bd95fdffbfd5c253aff45","ssdeep":"","tlshash":"edf0f97f356e23324c2b26d61c6a9f862f142126d843c52418adca917f24d440dea5ec","first_seen":"2026-10-07T12:50:48.913733Z","last_seen":"2026-10-07T15:48:46.528108Z","times_seen":3,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appjniwia.live/img/logo.webp","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://appjniwia.live/","date":"2026-10-07T15:48:17.370Z","timestamp":1791388097370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET /img/logo.webp HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appjniwia.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ecE%2Be8spTVaSqPlVcY8%2FrMpfbs%2FOPycOsHNyxYfccjQdNl6IYC88EItGhC2Ijzz0y4rUmh5oudDeutO63K1QMbpM%2B0HXer%2F8U4h75ZIuQBs8FNy7on7Qf%2Fm8ubaJ9LUuHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7c2b0a21ea74ee86466ce1ce01b8e99f\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=5,i\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a46e0c989a07569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1012,"size_decoded":1898,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5bce53ea377c781cb7da86edb3b4f6ee","sha1":"077e7fa5359d78f4cbc811e8f3fab1e3d38297b6","sha256":"1910c8ee80fd78a910cb88d590896e2f03d34bdbb19163d5cea1fdb6c2fd2587","sha512":"ba46f88c961ee4f4d32f91184f366b05047d5b5b7faf55311a372cea672a92bbad055145c4f842affcd607c2f745e00492a17efc4e114cbe218ed43c6819bf43","ssdeep":"","tlshash":"f711d582bfdca409c85be4608d462b1c0d3a9e5b874bc53380aaacc20035a6592b8a08","first_seen":"2026-10-07T12:50:48.916877Z","last_seen":"2026-10-07T15:48:46.529436Z","times_seen":3,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appjniwia.live/fonts/barlow-v13-7cHqv4kjgoGqM7E3_-gs51os.woff2","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://appjniwia.live/","date":"2026-10-07T15:48:17.475Z","timestamp":1791388097475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET /fonts/barlow-v13-7cHqv4kjgoGqM7E3_-gs51os.woff2 HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://appjniwia.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D7kJdUazhlQpk5V0wfxFzr2SVMbVKvwZK1uNCaZD5DcaYa5Wjhl8qrRYlEunhtk2eF%2Bz%2B53dLX6a4BKECxgbf4%2BoaEAVWSVSOId6WQePz7VV9byNkuL8cS1CGrJMwgdz7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"21bb74235eeb459acc54109193fa0450\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\nage: 10685\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a46e0c993a1f569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22008,"size_decoded":22893,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22008, version 1.0","md5":"8e986e86d57eb493631f911cb433dff4","sha1":"ad8e9490a983a615bfe43dcd4ad332e611178948","sha256":"cd759df8ef9efc98fee14307b4eb5ba27f08b1f8f2f3ad2872432e25c89907a8","sha512":"55a554f7435bccb7f6fb0b6f9dd76b2981ef737f3cfc50fa9ea494e9ae2f6029a0bc45cf8e9b0e18e2a4423226c8410557979957742417ecdebd241850e1dfa3","ssdeep":"384:HnbuSqWLlaBJfhZSLrvfIk+tB8PHGCGWVigZo7whJ8jyBzae6lRLbxwugfYaH0ph:7KWLlaTZS3b+tBCiWVrZiwhu4glRpVgc","tlshash":"6ba2e1c9c4f59d27f6ce1671ee042bd1600b21dd6b12c1879a1dc25bfd536ab2e8cd08","first_seen":"2025-09-11T19:45:57.911584Z","last_seen":"2026-10-13T05:12:46.745854Z","times_seen":7654,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appjniwia.live/css/style.css","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://appjniwia.live/","date":"2026-10-07T15:48:17.363Z","timestamp":1791388097363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appjniwia.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3pGaUg0fpJAOSUrYqXaOgcILc5mH2JLzAvaG4PLOIcbJL%2FmWDpeBWFbD6soDhFQnwN5A4MrZ07mOc92oM0zOQpDhOksouRRYclGnO7OJ%2Bkl2Ew9wPga5gJk%2FeGt2ZcwcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\netag: W/\"5b6fe7f8abe7ba3e327c63a019875555\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a46e0c988a03569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4873,"size_decoded":2593,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4873), with no line terminators","md5":"8b544f7a8ac93faba2f1063b909ab61b","sha1":"c0366b5fd6ef6a0d5e99a1084d2bdbe1fd0b9662","sha256":"1c8608deaebed8649a592fa6b40e0df2c317eb9fdc0ab6ca5090bce2dc4b2ff8","sha512":"57247613d7419161c1e08105944592bd9f1ec1c219ce13391671754abb982b876d69633a3753892358c6c6443548e1dbfe0203450ce3f4ad6f261dd29db3ef67","ssdeep":"96:8BfqqqhLSfngszeMvdsYtwsUlcBCcCwdSGuAPDXgRg/cn1:mbqRS/gsz/dsYahlcBCc/C2XgRCW1","tlshash":"94a1b6908a95611ce4678783fdc82bec3224c5076c2798def756214e46cb3ff1399a5a","first_seen":"2026-10-07T12:50:48.910142Z","last_seen":"2026-10-07T15:48:46.532261Z","times_seen":3,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appjniwia.live/fonts/antonio-v22-gNMEW3NwSYq_9WD3yHQiFQ.woff2","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://appjniwia.live/","date":"2026-10-07T15:48:17.477Z","timestamp":1791388097477,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET /fonts/antonio-v22-gNMEW3NwSYq_9WD3yHQiFQ.woff2 HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://appjniwia.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drh6O1QyN5BcLeY5KOh5cpkUbHLlYmEwSzka%2BSegtu5le9ahbs%2F%2BvRP3OviS5GiQ1jIQxa0nkS5Gv8CQN4DNELrf9WEcVIJxRB8GeqiERkYWaElUUELv7jvJIHd8V%2FB6dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"a31ed50f313093b1b5d4a2f80b07d1ac\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\nage: 10685\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a46e0c993a21569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26592,"size_decoded":27479,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26592, version 1.0","md5":"9ffb4e65d3fabc3e6b4d5d592ba92226","sha1":"6723345bc609421681cb916105476c4cc3f92db1","sha256":"82661feca9e5b933308629a630caa991566250273379a213b6af257fbdfaa71a","sha512":"875d8c78514e049f096b0a14b842b7a8e5fda5cdf82e834dab85409017abee37006801f2d966731a7de9f82761dcaf0fbd41577d055c03c8993cf3cfebdab03d","ssdeep":"384:M71UJO6FUW3VVcdSpjAjWf33IucscRM+lDgary6sSfUHx1NYmdMCEocIR4yf:M71UJv53V/rydgAFsSfUHxjnJEo/ayf","tlshash":"17c2f2433d9f606c935b88b2b069b596875810b4e3a1763bddc967146ff0cf19ad2070","first_seen":"2025-06-04T00:24:55.422247Z","last_seen":"2026-10-11T22:28:05.547288Z","times_seen":610,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appjniwia.live/fonts/antonio-v22-gNMEW3NwSYq_9WD3yHQiFQ.woff2","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://appjniwia.live/","date":"2026-10-07T15:48:17.478Z","timestamp":1791388097478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET /fonts/antonio-v22-gNMEW3NwSYq_9WD3yHQiFQ.woff2 HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://appjniwia.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=drh6O1QyN5BcLeY5KOh5cpkUbHLlYmEwSzka%2BSegtu5le9ahbs%2F%2BvRP3OviS5GiQ1jIQxa0nkS5Gv8CQN4DNELrf9WEcVIJxRB8GeqiERkYWaElUUELv7jvJIHd8V%2FB6dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"a31ed50f313093b1b5d4a2f80b07d1ac\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\nage: 10685\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\ncf-ray: a46e0c993a22569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26592,"size_decoded":27479,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26592, version 1.0","md5":"9ffb4e65d3fabc3e6b4d5d592ba92226","sha1":"6723345bc609421681cb916105476c4cc3f92db1","sha256":"82661feca9e5b933308629a630caa991566250273379a213b6af257fbdfaa71a","sha512":"875d8c78514e049f096b0a14b842b7a8e5fda5cdf82e834dab85409017abee37006801f2d966731a7de9f82761dcaf0fbd41577d055c03c8993cf3cfebdab03d","ssdeep":"384:M71UJO6FUW3VVcdSpjAjWf33IucscRM+lDgary6sSfUHx1NYmdMCEocIR4yf:M71UJv53V/rydgAFsSfUHxjnJEo/ayf","tlshash":"17c2f2433d9f606c935b88b2b069b596875810b4e3a1763bddc967146ff0cf19ad2070","first_seen":"2025-06-04T00:24:55.422247Z","last_seen":"2026-10-11T22:28:05.547288Z","times_seen":610,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"appjniwia.live/img/apple-touch-icon.png","fqdn":"appjniwia.live","domain":"appjniwia.live","tld":"live"},"ip":{"addr":"104.21.91.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://appjniwia.live/","date":"2026-10-07T15:48:17.529Z","timestamp":1791388097529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appjniwia.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 16:49:58 GMT","end":"Fri, 25 Dec 2026 17:49:56 GMT"},"fingerprint":{"sha1":"A0:0D:FA:B6:ED:88:EF:3E:37:29:F6:1D:B6:D7:07:65:52:E8:7A:3C","sha256":"0A:D6:3B:38:8A:BA:F7:C0:D4:CB:BE:D9:DA:38:45:5F:97:8C:B4:8D:C7:F2:8B:B7:F4:B5:13:6B:BE:3D:01:98"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: appjniwia.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://appjniwia.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWXNU5MDcfAdZqGIKrSfwXLa%2Bus8z%2Fbeo9l7tXdbnxrLPDRJYOpe2eb2VoJI%2F69z2ksVfEH6ZKGz1dbc632P1aNuxc%2FSCsZkEbBCy5BA3hamOCfqd%2BEpQa8tIQ9sHN0xCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"6cd38d4cce57981dddcbe19b4ebccd0f\"\r\nreferrer-policy: no-referrer-when-downgrade\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ndate: Wed, 07 Oct 2026 15:48:17 GMT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a46e0c998a32569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11454,"size_decoded":12341,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGB, non-interlaced","md5":"48db24b3150473dd1c4762319de96953","sha1":"1046512ff8371386edcd93e89b322bfde4d2e020","sha256":"9fd97ec6bf6dd3b9db09409912776af7f96651f9ca9948f49820dd1abfe34065","sha512":"1e69c251d5811ca5c3c06a00757d04232823b6fdf0b6b29fdc382811fe0c16becc8c44b28e9b8bdfe9f639e9e3979cee30948257f21c9c7c4782066117a538f9","ssdeep":"192:u3UGi5AYyoEJprqZN5luiFj4YdHL86Lkj/Fww2m7A+dyADDWnHb0qefO:uQ5AYyoEXrUIiyYy6wj/FT2yA+0sDWnF","tlshash":"aa32afe0a391eec4ec15a93f58ee48abc13d6607b6e918d4fd44e109dda3764314c3c1","first_seen":"2026-10-07T12:50:48.898531Z","last_seen":"2026-10-07T15:48:46.535164Z","times_seen":3,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"appjniwia.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}