{"report_id":"1b139411-0779-4ac9-963d-b129320329e7","version":6,"status":"done","tags":[],"date":"2025-10-12T18:23:56Z","url":{"schema":"http","addr":"wellnessreboot.store/track/click.php?id=eyJlIjogImRuYXJhbmpvQGV1cm9idXNjci5jb20iLCAiYyI6ICIyMDI1MTAxMjEyMDcxMSJ9\u0026url=aHR0cHM6Ly9ycy1zdHJpcGUuYmFsYW5jZWRsaXZpbmdndWlkZS5zdG9yZS9icmFuZGluZy8_dXRtX3NvdXJjZT1jb250ZW50c3RyaXBlJnV0bV9jYW1wYWlnbj1vd182MjQ1NSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PWxvZ28mb3dfdHlwZT1kZnA","fqdn":"wellnessreboot.store","domain":"wellnessreboot.store","tld":"store"},"ip":{"addr":"77.223.214.236","port":0,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"setup.jeeng.com/preferences","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"title":"OpenWeb - Email Privacy Preferences"},"submit":{"url":{"schema":"http","addr":"wellnessreboot.store/track/click.php?id=eyJlIjogImRuYXJhbmpvQGV1cm9idXNjci5jb20iLCAiYyI6ICIyMDI1MTAxMjEyMDcxMSJ9\u0026url=aHR0cHM6Ly9ycy1zdHJpcGUuYmFsYW5jZWRsaXZpbmdndWlkZS5zdG9yZS9icmFuZGluZy8_dXRtX3NvdXJjZT1jb250ZW50c3RyaXBlJnV0bV9jYW1wYWlnbj1vd182MjQ1NSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PWxvZ28mb3dfdHlwZT1kZnA","fqdn":"wellnessreboot.store","domain":"wellnessreboot.store","tld":"store"},"ip":{"addr":"77.223.214.236","port":0,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-16T18:23:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"rs-stripe.balancedlivingguide.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"wellnessreboot.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"setup.jeeng.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-12-03","domain_rank":0,"first_seen":"2021-04-05T18:21:41Z","last_seen":"2025-10-10T08:01:35.321423Z","alert_count":0,"request_count":18,"received_data":518965,"sent_data":7612,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"rs-stripe.balancedlivingguide.store","ip":{"addr":"20.225.97.235","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2025-09-30","domain_rank":0,"first_seen":"2025-10-06T13:29:22.677983Z","last_seen":"2025-10-06T13:29:22.677983Z","alert_count":1,"request_count":1,"received_data":1781,"sent_data":606,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wellnessreboot.store","ip":{"addr":"77.223.214.236","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2025-10-12","domain_rank":0,"first_seen":"2025-10-12T18:23:56.881282Z","last_seen":"2025-10-12T18:23:56.881282Z","alert_count":1,"request_count":1,"received_data":1892,"sent_data":780,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"branding.revenuestripe.com","ip":{"addr":"3.167.2.104","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2014-05-11","domain_rank":387868,"first_seen":"2016-02-23T11:23:33Z","last_seen":"2025-10-10T08:01:35.861415Z","alert_count":0,"request_count":1,"received_data":2055,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/index-BxxuJBYH.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89df45119b7cd9645bfcf2706809281a","sha1":"14cb857593c770ff279ce5e66805a0d8339ccd32","sha256":"2be0557795cfbbcf4b287ed5b9dee10643569f2f7422777b4cabefe5edd457f9","sha512":"10b12a549d23207818dc4231e9427980710447dfe31bdf252e57e1a0ae8d8b011e99e57e49873b340a3923d2dd181ee10502bf144b7a16f20f4a5486c376faf5","ssdeep":"6144:/WZDWQvK4Soxhli8nGvXYXJ4XQBsbpDkZmD:uNjh262z","tlshash":"73645aec32a9b575a7a306f5407f1106f33d2916680d8460b124edaa36f9805d2bbffd","size":311621,"data":"","first_seen":"2025-08-29T10:48:53.573915Z","last_seen":"2026-04-04T12:32:44.208803Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/NavigationCustomer-DdZ_mVH7.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7505048ad695d5ceff2799e958c2da35","sha1":"2c8f43929f97e5dea723aacae95335b2f4be1d89","sha256":"c41edeee4babcd60630979361599f8d2b0e55a7ebbd26e137c4e2ed616cafea2","sha512":"10d57a830bb8446d3ff013e61fdeb93d42a84647c2edbc418e989e0b7022c004e75c9c55d92434e7fb7fe8bac79bee9834267aa5e337e2c16b9341870a0b28b7","ssdeep":"","tlshash":"25214b0cf064effded2a08d69e5e9825740b0ee8d72f49e1d0bc643509684553a0b3ce","size":1416,"data":"","first_seen":"2025-08-29T10:48:53.56751Z","last_seen":"2026-04-04T12:32:44.206761Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/useTitle-1ewhGaJC.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"109fbb593640b5a3a49fa8f6bbaad143","sha1":"ca142fc5ee97b74ec8ef1acfa239cb4a21b783fb","sha256":"05dad20d8a6838b3edeed0b5876623a875d86ad0ac4ed3b23b18c01a04c04c35","sha512":"2c3a614e9c337e953b11a0e3099d5e1be00837e4f755a4ae06af40df2276db87054f84b14dad014e2fa487ff6de0e6218b77c601506c01eba0995da88d0a884b","ssdeep":"","tlshash":"3fd0127305825cb8464054942df6c9f43a345a2c3683a558413d094e2b65885c5c9a67","size":197,"data":"","first_seen":"2025-08-29T10:48:53.569913Z","last_seen":"2026-04-04T12:32:44.207459Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/disclosure-izhTDKdH.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"827842cb80c2841c6c4bb4a46f719655","sha1":"61a7f6df2539e02f94a4f3651520a0b1c19fb45c","sha256":"2159a7441eda8b5537933ee98fb13ffba41c673c01cffefb84ade65946ce2db9","sha512":"ba569cf5e64411a2034eaac32ec934a86da1bf17eeab610f6d3060312362fab3aa8fdf6272b0c701c70b1e2ea64cbedd0fe095725b298d465fb0ee180b8a6c73","ssdeep":"96:Ym3STN0uHgBYHyosjxjqfGZpHdPoPAh4bGzphZ4lCGLhurwH:/3I1HyosjxwgpB8AhN1hZ4QGLh8wH","tlshash":"5381b8a9f6a0df70e7aa28d588331601ef141e552b172044a16ecaedf1ed000e27dbf7","size":4176,"data":"","first_seen":"2025-08-29T10:48:53.571107Z","last_seen":"2026-04-04T12:32:44.200097Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/use-resolve-button-type-CQZVQlVu.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"208472cd8ff64a0327885b002a2a1db3","sha1":"6133240bb63d2ae79e910132d1c30fb961036b3d","sha256":"a305b93f2b5500da39844656c7298a31348121fc206fc0022af149d39bebdf82","sha512":"d77c2a0355a24066990abcd2b5f9830d86dd53fe1689949f29477466b135b70fc45488566cc833e3480001fe01e1fa36ec77cd219d829f32712b4221b0110cd3","ssdeep":"","tlshash":"1be0abc86142637ce79d1018b007b81a70bf3139424b3b6082ad41b92ead88885bfa1e","size":404,"data":"","first_seen":"2025-08-29T10:48:53.5726Z","last_seen":"2026-04-04T12:32:44.210083Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/Preferences-DrnaCQzy.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"66b08ca662b5044b518e67f89b0190d6","sha1":"b255fd6b89347e3930a1b7b04258d78ac3e1f1d7","sha256":"9f1288b9d31e32f96377a88a5e923f3fc6440c0dc4c82f277a8039a130fac820","sha512":"d2a3e07f1d1c011e562619df396519f6213a2c53ff81c43e0ac7201784241cdca451daf0a165a1f017ed55263b91734a14e502033a32474ad3cd6a513b3881ea","ssdeep":"96:rlRAmrLgs4hQHL2puy2BrSZTV2CL2wHo0wxG9p4R3OS2Jt:rlK4Lgs4hPpuZSv2CLRHDp4R310","tlshash":"6ec17329d240a7ef796a04d53a2fe208704f135ec6bf44b1b45e641a1338fa7ba077c9","size":6033,"data":"","first_seen":"2025-08-29T10:48:53.565788Z","last_seen":"2026-04-04T12:32:44.202949Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/logo-jade-500-dark-DpnZ3eMz.png","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/logo-jade-500-dark-DpnZ3eMz.png HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/index-BxxuJBYH.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:35.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/index-BxxuJBYH.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 85150\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:38 GMT\r\netag: W/\"14c9e-197faadb6d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":311621,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37510)","md5":"89df45119b7cd9645bfcf2706809281a","sha1":"14cb857593c770ff279ce5e66805a0d8339ccd32","sha256":"2be0557795cfbbcf4b287ed5b9dee10643569f2f7422777b4cabefe5edd457f9","sha512":"10b12a549d23207818dc4231e9427980710447dfe31bdf252e57e1a0ae8d8b011e99e57e49873b340a3923d2dd181ee10502bf144b7a16f20f4a5486c376faf5","ssdeep":"6144:/WZDWQvK4Soxhli8nGvXYXJ4XQBsbpDkZmD:uNjh262z","tlshash":"73645aec32a9b575a7a306f5407f1106f33d2916680d8460b124edaa36f9805d2bbffd","first_seen":"2025-08-29T10:48:53.573915Z","last_seen":"2026-04-04T12:32:44.208803Z","times_seen":96,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":568,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/Preferences-DrnaCQzy.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:35.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/Preferences-DrnaCQzy.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1913\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:38 GMT\r\netag: W/\"779-197faadb6d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6033,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4626)","md5":"66b08ca662b5044b518e67f89b0190d6","sha1":"b255fd6b89347e3930a1b7b04258d78ac3e1f1d7","sha256":"9f1288b9d31e32f96377a88a5e923f3fc6440c0dc4c82f277a8039a130fac820","sha512":"d2a3e07f1d1c011e562619df396519f6213a2c53ff81c43e0ac7201784241cdca451daf0a165a1f017ed55263b91734a14e502033a32474ad3cd6a513b3881ea","ssdeep":"96:rlRAmrLgs4hQHL2puy2BrSZTV2CL2wHo0wxG9p4R3OS2Jt:rlK4Lgs4hPpuZSv2CLRHDp4R310","tlshash":"6ec17329d240a7ef796a04d53a2fe208704f135ec6bf44b1b45e641a1338fa7ba077c9","first_seen":"2025-08-29T10:48:53.565788Z","last_seen":"2026-04-04T12:32:44.202949Z","times_seen":96,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/NavigationCustomer-DdZ_mVH7.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:35.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/NavigationCustomer-DdZ_mVH7.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 543\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:38 GMT\r\netag: W/\"21f-197faadb6d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1416,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1415)","md5":"7505048ad695d5ceff2799e958c2da35","sha1":"2c8f43929f97e5dea723aacae95335b2f4be1d89","sha256":"c41edeee4babcd60630979361599f8d2b0e55a7ebbd26e137c4e2ed616cafea2","sha512":"10d57a830bb8446d3ff013e61fdeb93d42a84647c2edbc418e989e0b7022c004e75c9c55d92434e7fb7fe8bac79bee9834267aa5e337e2c16b9341870a0b28b7","ssdeep":"","tlshash":"25214b0cf064effded2a08d69e5e9825740b0ee8d72f49e1d0bc643509684553a0b3ce","first_seen":"2025-08-29T10:48:53.56751Z","last_seen":"2026-04-04T12:32:44.206761Z","times_seen":96,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/use-resolve-button-type-CQZVQlVu.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:35.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/use-resolve-button-type-CQZVQlVu.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 404\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:35 GMT\r\netag: W/\"194-197faadab18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (403)","md5":"208472cd8ff64a0327885b002a2a1db3","sha1":"6133240bb63d2ae79e910132d1c30fb961036b3d","sha256":"a305b93f2b5500da39844656c7298a31348121fc206fc0022af149d39bebdf82","sha512":"d77c2a0355a24066990abcd2b5f9830d86dd53fe1689949f29477466b135b70fc45488566cc833e3480001fe01e1fa36ec77cd219d829f32712b4221b0110cd3","ssdeep":"","tlshash":"1be0abc86142637ce79d1018b007b81a70bf3139424b3b6082ad41b92ead88885bfa1e","first_seen":"2025-08-29T10:48:53.5726Z","last_seen":"2026-04-04T12:32:44.210083Z","times_seen":96,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/useTitle-1ewhGaJC.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:35.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/useTitle-1ewhGaJC.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 197\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:35 GMT\r\netag: W/\"c5-197faadab18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"109fbb593640b5a3a49fa8f6bbaad143","sha1":"ca142fc5ee97b74ec8ef1acfa239cb4a21b783fb","sha256":"05dad20d8a6838b3edeed0b5876623a875d86ad0ac4ed3b23b18c01a04c04c35","sha512":"2c3a614e9c337e953b11a0e3099d5e1be00837e4f755a4ae06af40df2276db87054f84b14dad014e2fa487ff6de0e6218b77c601506c01eba0995da88d0a884b","ssdeep":"","tlshash":"3fd0127305825cb8464054942df6c9f43a345a2c3683a558413d094e2b65885c5c9a67","first_seen":"2025-08-29T10:48:53.569913Z","last_seen":"2026-04-04T12:32:44.207459Z","times_seen":96,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/logo-jade-500-dark-DpnZ3eMz.png","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/logo-jade-500-dark-DpnZ3eMz.png HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 36135\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:35 GMT\r\netag: W/\"8d27-197faadab18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 178, 8-bit/color RGBA, non-interlaced","md5":"bb64f41a787e102d42d3236a3ff82afe","sha1":"3e55b9b5dd4c111e6940eaaa482c85db22ce21a8","sha256":"fd342fdef8cb8de7f346012e2cf1597b084466ce75e299585d22e4211157b016","sha512":"bad698125fc98cdad9f2e8e54c764ea0b8e1b23c39cc7dd9cce2a48015e1f588c6967efb38da4e4e65b5a716f2aece23b5c3eaeaf0824d1db2ad4a81e5a677f5","ssdeep":"768:wANbAo8RLNGG1fZAIUBGKILEtSrh58Te2l/AV2qbTxU1vjMQy+boF8:JYRLHAIULyEtE/8/A2qXxUljMF+bF","tlshash":"bbf2f1b75246943da3314c93a8d5ab7988116fc14263ad39769ff1ff47e904b42cb40b","first_seen":"2024-11-12T18:13:50.766917Z","last_seen":"2026-04-04T12:32:44.211848Z","times_seen":103,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":274,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rs-stripe.balancedlivingguide.store/branding/?utm_source=contentstripe\u0026utm_campaign=ow_62455\u0026utm_medium=email\u0026utm_content=logo\u0026ow_type=dfp","fqdn":"rs-stripe.balancedlivingguide.store","domain":"balancedlivingguide.store","tld":"store"},"ip":{"addr":"20.225.97.235","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T18:23:33.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rs-stripe.balancedlivingguide.store","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 03:03:34 GMT","end":"Wed, 31 Dec 2025 03:03:33 GMT"},"fingerprint":{"sha1":"26:1E:5B:D6:A0:5C:E7:0D:45:A1:50:2E:D5:22:35:6C:5E:51:B7:2E","sha256":"A1:3B:2A:61:B2:00:AB:97:12:00:DC:44:7A:9E:C6:27:76:74:B5:64:CA:42:9E:61:63:58:96:2C:62:D1:F0:87"}}},"request":{"raw":"GET /branding/?utm_source=contentstripe\u0026utm_campaign=ow_62455\u0026utm_medium=email\u0026utm_content=logo\u0026ow_type=dfp HTTP/1.1\r\nHost: rs-stripe.balancedlivingguide.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ncache-control: private\r\ncontent-type: text/html\r\nlocation: https://branding.revenuestripe.com/\r\nrequest-context: appId=cid-v1:71cb0741-0ab0-4052-8b9d-7d9ee84d94b7\r\ndate: Sun, 12 Oct 2025 18:23:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":1528,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":879,"timings":{"blocked":378,"dns":121,"connect":123,"send":0,"wait":123,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"rs-stripe.balancedlivingguide.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/index-C1gN15aH.css","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:35.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/index-C1gN15aH.css HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:35 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-length: 11895\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:38 GMT\r\netag: W/\"2e77-197faadb6d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94886,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"97234589a3a9aed7e30ef62e901cd4a9","sha1":"92cd7a6fc4c842ccd3696b6a6058fff6b9b9459a","sha256":"1b7636a2d0d345c93dea9a686da3223a0e56dca9f1ef16ed678180cb23a5874b","sha512":"d125de142b1a2744d3be1c62011d3e19060ef4fd62fed694c88dac9a841977b57c4d4090f6ad7a9280e04820dab50838db43bb614eb15908c45b4d29fb57bafb","ssdeep":"768:QR6mN0hFV0jYZNUrBSFMXB2eE8i6YKRltSXJQa4T:Q8tfV0jNB2eE76YKRlt7T","tlshash":"6b93612dab54113b3c3791e8d6a8e99db31671d0ef795beaec916210dec67b30c43128","first_seen":"2025-06-15T09:05:03.13454Z","last_seen":"2026-04-04T12:32:44.205107Z","times_seen":98,"resource_available":false,"data":null}},"time_used":665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/apple-touch-icon-CdXI0Q86.png","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/apple-touch-icon-CdXI0Q86.png HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1956\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:35 GMT\r\netag: W/\"7a4-197faadab18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1956,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"a1faf37fa3af13751308dbbcbe355b8e","sha1":"c850db9f67e84b8226d65bbbb9e714ec434fd1ed","sha256":"558cb452fa043bf4c7cf82e4815b87681ec921c2ff27b00c2115cba1d41962cc","sha512":"2ad2736e3bd6706a29e99fa2a98f091cb48964998fea9bcdcf6d986c33d4fb70ee6746bd0c234d67a517a92d09015ddd4d4adda47e13d0a963324865f3ba359d","ssdeep":"","tlshash":"ac41e6b5d8b24d81cba40ea3b07a27642b5dd41b35f84cab855dc8bd4a367c00605fb6","first_seen":"2024-11-12T18:13:50.762171Z","last_seen":"2026-04-04T12:32:44.200886Z","times_seen":103,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/NavigationCustomer-DdZ_mVH7.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/NavigationCustomer-DdZ_mVH7.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 543\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:38 GMT\r\netag: W/\"21f-197faadb6d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1416,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1415)","md5":"7505048ad695d5ceff2799e958c2da35","sha1":"2c8f43929f97e5dea723aacae95335b2f4be1d89","sha256":"c41edeee4babcd60630979361599f8d2b0e55a7ebbd26e137c4e2ed616cafea2","sha512":"10d57a830bb8446d3ff013e61fdeb93d42a84647c2edbc418e989e0b7022c004e75c9c55d92434e7fb7fe8bac79bee9834267aa5e337e2c16b9341870a0b28b7","ssdeep":"","tlshash":"25214b0cf064effded2a08d69e5e9825740b0ee8d72f49e1d0bc643509684553a0b3ce","first_seen":"2025-08-29T10:48:53.56751Z","last_seen":"2026-04-04T12:32:44.206761Z","times_seen":96,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/inter-latin-400-normal-BT1H-PT_.woff2","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/inter-latin-400-normal-BT1H-PT_.woff2 HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21564\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:35 GMT\r\netag: W/\"543c-197faadab18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21564,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21564, version 1.0","md5":"73aaa95eab3115ea5a1e5c1cf16ea645","sha1":"2f00c608a688cd2b2e6ad37637726b0e081da1c7","sha256":"2301bb030a2bcaa9c763cc4771bd717aac16709c29eaba00673fcbe7cdf99a59","sha512":"687974f4b96baea3f1c7aa31bf779e631165d0c928a0d006576034477f6de591b446d2683296ff3a52bed9450c43d6284f1c660e860db23465fe499b9fc3a42f","ssdeep":"384:pgDlU89jza9uLqHuvsA+8CTPBBAx+ARBoxlBmZtsoP0uq8A82ALgnCfkhon:pu5RaeqOvJ+FyBgBToqtvygnWkho","tlshash":"f0a2dfc24c303ab9c8965478c290779ff6cd903fb3bb64e5191ba1a6b8d1845d13f899","first_seen":"2023-09-16T16:47:56Z","last_seen":"2026-04-05T14:20:42.528413Z","times_seen":4970,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wellnessreboot.store/track/click.php?id=eyJlIjogImRuYXJhbmpvQGV1cm9idXNjci5jb20iLCAiYyI6ICIyMDI1MTAxMjEyMDcxMSJ9\u0026url=aHR0cHM6Ly9ycy1zdHJpcGUuYmFsYW5jZWRsaXZpbmdndWlkZS5zdG9yZS9icmFuZGluZy8_dXRtX3NvdXJjZT1jb250ZW50c3RyaXBlJnV0bV9jYW1wYWlnbj1vd182MjQ1NSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PWxvZ28mb3dfdHlwZT1kZnA","fqdn":"wellnessreboot.store","domain":"wellnessreboot.store","tld":"store"},"ip":{"addr":"77.223.214.236","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T18:23:33.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wellnessreboot.store","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Oct 2025 09:35:21 GMT","end":"Sat, 10 Jan 2026 09:35:20 GMT"},"fingerprint":{"sha1":"E2:14:C3:94:77:3A:EA:A5:BB:96:E8:91:1D:91:53:D3:E9:AD:48:4B","sha256":"2A:89:CA:02:99:9A:60:FE:33:95:7F:30:98:02:E8:E5:3A:D2:D4:B4:77:62:30:6D:49:C9:81:59:BA:05:99:C2"}}},"request":{"raw":"GET /track/click.php?id=eyJlIjogImRuYXJhbmpvQGV1cm9idXNjci5jb20iLCAiYyI6ICIyMDI1MTAxMjEyMDcxMSJ9\u0026url=aHR0cHM6Ly9ycy1zdHJpcGUuYmFsYW5jZWRsaXZpbmdndWlkZS5zdG9yZS9icmFuZGluZy8_dXRtX3NvdXJjZT1jb250ZW50c3RyaXBlJnV0bV9jYW1wYWlnbj1vd182MjQ1NSZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jb250ZW50PWxvZ28mb3dfdHlwZT1kZnA HTTP/1.1\r\nHost: wellnessreboot.store\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sun, 12 Oct 2025 18:23:33 GMT\r\nServer: Apache/2.4.52 (Ubuntu)\r\nLocation: https://rs-stripe.balancedlivingguide.store/branding/?utm_source=contentstripe\u0026utm_campaign=ow_62455\u0026utm_medium=email\u0026utm_content=logo\u0026ow_type=dfp\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1528,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T13:47:07.33171Z","times_seen":13377129,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":107,"dns":61,"connect":19,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-12","alert":"Sinkholed","trigger":"wellnessreboot.store","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"branding.revenuestripe.com/","fqdn":"branding.revenuestripe.com","domain":"revenuestripe.com","tld":"com"},"ip":{"addr":"3.167.2.104","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T18:23:34.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"branding.revenuestripe.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Mon, 07 Apr 2025 00:00:00 GMT","end":"Thu, 07 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3E:A1:76:4D:65:7F:60:43:EC:47:1D:60:5B:AC:84:41:E4:F8:B8:09","sha256":"70:47:A1:A8:51:18:2C:0F:5D:64:FB:70:C6:7E:D8:CA:A2:58:D3:B3:92:5E:FA:29:FA:A3:C0:FF:F9:AC:1D:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: branding.revenuestripe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 1528\r\nlast-modified: Mon, 19 Aug 2024 17:20:01 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 22 Sep 2025 08:46:34 GMT\r\netag: \"542e2d2c4703a84c13470c6287450f90\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c99d057689db169d0b27b6e562e255c2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: Mw6hDhpGH6NrcQq3EEguALelsxxM8Ibe6EL-tC-5aKPyfdygl_7RpA==\r\nage: 1762621\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1528,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"542e2d2c4703a84c13470c6287450f90","sha1":"73b6457b609c5a79dd8f90005ad109610d1242ce","sha256":"dec9a3a815436c7c878ef690b88235cc8aa4c95b770cd7fe9ecf61de378279fd","sha512":"59639a0a088e62f18bab0f3b6efdcc88ff1c14ad1591187dedeb8b4ce9f54731e3007aba74cb9b4956ce9c3699d7d7f2e0875bcdef6ad53ed105a0f881572276","ssdeep":"","tlshash":"bf310196c6f34546a33284303bfb73155a26d10b985adc64be8c135ccfc5e9196e738d","first_seen":"2024-11-12T18:13:50.743721Z","last_seen":"2026-04-04T12:32:44.204021Z","times_seen":103,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":284,"dns":27,"connect":1,"send":0,"wait":5,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/preferences","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-12T18:23:34.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /preferences HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 2338\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npermissions-policy: browsing-topics=()\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2338,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1324)","md5":"dd4b97129c9bc79db4aba458e9d3e2a4","sha1":"f0a84d7a43270887372fd84225372186525fab71","sha256":"812191bb68da74d0391ec074d33874d75d9f7442780816c05e84f6afc9afa5ab","sha512":"757838e390cc2fe8cb300c6f2bcb65530a8165359a19d94d2ca0462f04cab4af9b9b141f5dffa4c5b355ffa1fa0e4627b89b687375d56ad81e283a9dcdd24a4a","ssdeep":"","tlshash":"5741ed9c4491488fe52152261ba0b25cc93132dbdfe21e587def702d6fe0da94aa20a8","first_seen":"2025-08-29T10:48:53.577185Z","last_seen":"2026-04-04T12:32:44.198641Z","times_seen":96,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":295,"dns":55,"connect":94,"send":0,"wait":96,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/disclosure-izhTDKdH.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:35.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/disclosure-izhTDKdH.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1479\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:38 GMT\r\netag: W/\"5c7-197faadb6d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4176,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (4175)","md5":"827842cb80c2841c6c4bb4a46f719655","sha1":"61a7f6df2539e02f94a4f3651520a0b1c19fb45c","sha256":"2159a7441eda8b5537933ee98fb13ffba41c673c01cffefb84ade65946ce2db9","sha512":"ba569cf5e64411a2034eaac32ec934a86da1bf17eeab610f6d3060312362fab3aa8fdf6272b0c701c70b1e2ea64cbedd0fe095725b298d465fb0ee180b8a6c73","ssdeep":"96:Ym3STN0uHgBYHyosjxjqfGZpHdPoPAh4bGzphZ4lCGLhurwH:/3I1HyosjxwgpB8AhN1hZ4QGLh8wH","tlshash":"5381b8a9f6a0df70e7aa28d588331601ef141e552b172044a16ecaedf1ed000e27dbf7","first_seen":"2025-08-29T10:48:53.571107Z","last_seen":"2026-04-04T12:32:44.200097Z","times_seen":96,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/Preferences-DrnaCQzy.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:35.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/Preferences-DrnaCQzy.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1913\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:38 GMT\r\netag: W/\"779-197faadb6d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6033,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (4626)","md5":"66b08ca662b5044b518e67f89b0190d6","sha1":"b255fd6b89347e3930a1b7b04258d78ac3e1f1d7","sha256":"9f1288b9d31e32f96377a88a5e923f3fc6440c0dc4c82f277a8039a130fac820","sha512":"d2a3e07f1d1c011e562619df396519f6213a2c53ff81c43e0ac7201784241cdca451daf0a165a1f017ed55263b91734a14e502033a32474ad3cd6a513b3881ea","ssdeep":"96:rlRAmrLgs4hQHL2puy2BrSZTV2CL2wHo0wxG9p4R3OS2Jt:rlK4Lgs4hPpuZSv2CLRHDp4R310","tlshash":"6ec17329d240a7ef796a04d53a2fe208704f135ec6bf44b1b45e641a1338fa7ba077c9","first_seen":"2025-08-29T10:48:53.565788Z","last_seen":"2026-04-04T12:32:44.202949Z","times_seen":96,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/useTitle-1ewhGaJC.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/useTitle-1ewhGaJC.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 197\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:35 GMT\r\netag: W/\"c5-197faadab18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text","md5":"109fbb593640b5a3a49fa8f6bbaad143","sha1":"ca142fc5ee97b74ec8ef1acfa239cb4a21b783fb","sha256":"05dad20d8a6838b3edeed0b5876623a875d86ad0ac4ed3b23b18c01a04c04c35","sha512":"2c3a614e9c337e953b11a0e3099d5e1be00837e4f755a4ae06af40df2276db87054f84b14dad014e2fa487ff6de0e6218b77c601506c01eba0995da88d0a884b","ssdeep":"","tlshash":"3fd0127305825cb8464054942df6c9f43a345a2c3683a558413d094e2b65885c5c9a67","first_seen":"2025-08-29T10:48:53.569913Z","last_seen":"2026-04-04T12:32:44.207459Z","times_seen":96,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/use-resolve-button-type-CQZVQlVu.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/use-resolve-button-type-CQZVQlVu.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 404\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:35 GMT\r\netag: W/\"194-197faadab18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (403)","md5":"208472cd8ff64a0327885b002a2a1db3","sha1":"6133240bb63d2ae79e910132d1c30fb961036b3d","sha256":"a305b93f2b5500da39844656c7298a31348121fc206fc0022af149d39bebdf82","sha512":"d77c2a0355a24066990abcd2b5f9830d86dd53fe1689949f29477466b135b70fc45488566cc833e3480001fe01e1fa36ec77cd219d829f32712b4221b0110cd3","ssdeep":"","tlshash":"1be0abc86142637ce79d1018b007b81a70bf3139424b3b6082ad41b92ead88885bfa1e","first_seen":"2025-08-29T10:48:53.5726Z","last_seen":"2026-04-04T12:32:44.210083Z","times_seen":96,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/favicon-16x16-C-uYKiH6.png","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/favicon-16x16-C-uYKiH6.png HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 720\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:35 GMT\r\netag: W/\"2d0-197faadab18\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"e3a28ba3accd045295d6b96847642e24","sha1":"891aea0536f6b2b04af4e9ee16c77f1501dc5dd7","sha256":"9e7c35235dcf4a102e7a931dca4fc567e36ac4f468c2694e68455d12081c8574","sha512":"ed55424207a6e70bd84f30f424b1aa6e83dc6dc8766f9317adaa066144c1dd9fac99c5df007fbddaa9f3a13a8d514a6b4b049aeda997995ebbae4d0b5966ea80","ssdeep":"","tlshash":"b40183c0d4adef60841a0d1332a137049f78cf5337241248a6d8f0080538b802408e93","first_seen":"2024-11-12T18:13:50.764724Z","last_seen":"2026-04-04T12:32:44.210984Z","times_seen":103,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"setup.jeeng.com/assets_frontend/disclosure-izhTDKdH.js","fqdn":"setup.jeeng.com","domain":"jeeng.com","tld":"com"},"ip":{"addr":"3.232.151.98","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://setup.jeeng.com/preferences","date":"2025-10-12T18:23:36.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tools.jeeng.dev","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Thu, 01 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"82:36:36:0D:5F:B4:C9:F9:DF:3B:44:86:F9:62:15:ED:1A:9A:FB:FA","sha256":"2B:05:C1:60:47:51:61:93:32:98:95:F5:1D:AD:46:30:9E:70:FC:00:D6:20:C6:51:C5:8E:3D:4B:55:F3:6B:43"}}},"request":{"raw":"GET /assets_frontend/disclosure-izhTDKdH.js HTTP/1.1\r\nHost: setup.jeeng.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 12 Oct 2025 18:23:36 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 1479\r\nserver: nginx\r\ncontent-security-policy: default-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev;connect-src 'self' auth.powerinbox.com powerinbox.auth0.com powerinbox-test.auth0.com setup.jeeng.com tools.jeeng.dev stripe.rs-stripe.com securepubads.g.doubleclick.net global.ketchcdn.com *.fontawesome.com;script-src 'self' assets.jeeng.dev setup.jeeng.com tools.jeeng.dev cdn.powerinboxedge.com cdn.tailwindcss.com global.ketchcdn.com cdn.ketchjs.com kit.fontawesome.com 'unsafe-inline' 'unsafe-eval';img-src 'self' data: blob: https: http:;worker-src 'self' blob: tools.jeeng.dev;font-src 'self' data: https: http:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Fri, 11 Jul 2025 18:09:38 GMT\r\netag: W/\"5c7-197faadb6d0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4176,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (4175)","md5":"827842cb80c2841c6c4bb4a46f719655","sha1":"61a7f6df2539e02f94a4f3651520a0b1c19fb45c","sha256":"2159a7441eda8b5537933ee98fb13ffba41c673c01cffefb84ade65946ce2db9","sha512":"ba569cf5e64411a2034eaac32ec934a86da1bf17eeab610f6d3060312362fab3aa8fdf6272b0c701c70b1e2ea64cbedd0fe095725b298d465fb0ee180b8a6c73","ssdeep":"96:Ym3STN0uHgBYHyosjxjqfGZpHdPoPAh4bGzphZ4lCGLhurwH:/3I1HyosjxwgpB8AhN1hZ4QGLh8wH","tlshash":"5381b8a9f6a0df70e7aa28d588331601ef141e552b172044a16ecaedf1ed000e27dbf7","first_seen":"2025-08-29T10:48:53.571107Z","last_seen":"2026-04-04T12:32:44.200097Z","times_seen":96,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
