{"report_id":"1c6e9977-2716-4022-98b0-faaf7fca0911","version":0,"status":"done","tags":[],"date":"2026-10-14T19:47:12Z","url":{"schema":"http","addr":"jurnper.exchange/","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":0,"asn":54290,"as":"Hostwinds LLC.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"jurnper.exchange/","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"title":"Jumper Exchange | Smart App for the Universal Market","dom":{"size":19678,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (664)","md5":"e7a1386bff97c99bab7a7938449c07fb","sha1":"bad7f1bb271ba78520906826e52ce8d508dc6fae","sha256":"371c463128efd432a4aa42e97c7e27f89ac8db5b113b323d29edbeb71ace3c2b","sha512":"7ae84a46069094c345e9096a895cd6de092493c5f0286da967a0a7daaf80ef835f5d22029d9733a09792858a3a6528b3c5508e00c9b4e2da4475309ea0b291d2","ssdeep":"192:oHsUWdj3X8h6G90sgQZyYDnJ4qmATaCeZPXES8QTZKbDor/mtEja1FfB6QT8bzJ7:oM1j3sYSZbfuCeVESg3SXjgB6QXq","tlshash":"6e92b71363d922710e4601b22ac673e1da09c15bc3ea1525b7bd858c3f81959cafbbbd","dom_hash":"domhash57f45fb37017318530c035e94ce58087","first_seen":"2026-10-14T19:47:20.777389Z","last_seen":"2026-10-14T19:47:20.777389Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jurnper.exchange/","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":0,"asn":54290,"as":"Hostwinds LLC.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-18T19:47:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"jurnper.exchange","ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-14T19:47:14.463074Z","last_seen":"2026-10-14T19:47:14.463074Z","alert_count":16,"request_count":8,"received_data":219363,"sent_data":4034,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jurnper.exchange/index.css","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jurnper.exchange/","date":"2026-10-14T19:46:03.795Z","timestamp":1792007163795,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jurnper.exchange","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:37:52 GMT","end":"Tue, 05 Jan 2027 17:37:51 GMT"},"fingerprint":{"sha1":"71:F3:7F:00:F4:DE:0F:18:58:E0:D3:35:D3:F4:13:A4:C1:2B:FA:A0","sha256":"7A:FB:75:CA:30:67:1E:B2:66:14:5E:51:5D:75:04:3F:D9:C6:56:20:62:6D:29:17:7A:17:97:E3:5F:77:3B:14"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: jurnper.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jurnper.exchange/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Wed, 14 Oct 2026 19:46:03 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 13 Jun 2026 23:05:35 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a2de23f-44a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1098,"size_decoded":784,"mime_type":"text/css","magic":"ASCII text","md5":"fc90662460a4cd738f72b25400b523b9","sha1":"841b9848b88bce8699857497ee2f5401e5b02d66","sha256":"a4b46888c0c3b1a046446614021987b5cd831dc78078e04e2a25ccaff65a04b3","sha512":"a2274b32ef3deaf60a048b23ae4659894c26e33d374f9059d7c3388b27b8d8c9ae32bd7cc38d0a8bb5c1d57102ec7bae08e5067f81ca79202b37a77b67148d1a","ssdeep":"","tlshash":"cf118014d7e32d16f046c4982afa92903b5d254b458acb2d3a6db758cf0e6608572d94","first_seen":"2026-07-20T11:22:02.999262Z","last_seen":"2026-10-14T19:47:20.781893Z","times_seen":7,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jurnper.exchange/img/jumper.jpeg","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jurnper.exchange/","date":"2026-10-14T19:46:03.800Z","timestamp":1792007163800,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jurnper.exchange","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:37:52 GMT","end":"Tue, 05 Jan 2027 17:37:51 GMT"},"fingerprint":{"sha1":"71:F3:7F:00:F4:DE:0F:18:58:E0:D3:35:D3:F4:13:A4:C1:2B:FA:A0","sha256":"7A:FB:75:CA:30:67:1E:B2:66:14:5E:51:5D:75:04:3F:D9:C6:56:20:62:6D:29:17:7A:17:97:E3:5F:77:3B:14"}}},"request":{"raw":"GET /img/jumper.jpeg HTTP/1.1\r\nHost: jurnper.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jurnper.exchange/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Wed, 14 Oct 2026 19:46:04 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 07 Oct 2026 18:17:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6ac68cbc-160f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5647,"size_decoded":5596,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 597x335, components 3","md5":"20a51a2dcbe62030db12640c9a15b428","sha1":"03bf80b33323c4173757d05a0e3a0652e40f4dc8","sha256":"d6f5ff6939b9dc2987a14ddf35fdaf375bb05a016d104131832fe19654238928","sha512":"d1ea8509eaf97d504d26a747e7e8c6f072a6fa66f113cde652124e826e4a7622cfe280f68bb92bfd84c54eed8260b8be4db4ca589e4259b5c69752ce73f152f6","ssdeep":"96:iOFte9MDcwNXplHwqJGHpWj5QckKjT1UAFInh2P7XALfQw31PJ0rU8e:tvDcw9jrGHLG1Lsh2PL0fQKx5","tlshash":"20c1ae56e750f232fe7528f045c39b8633a1a684628e47239b195cc0f8f43d40d780e3","first_seen":"2026-10-14T19:47:20.786397Z","last_seen":"2026-10-14T19:47:20.786397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":131,"dns":0,"connect":143,"send":0,"wait":143,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jurnper.exchange/img/jumper-ui.webp","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jurnper.exchange/","date":"2026-10-14T19:46:03.801Z","timestamp":1792007163801,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jurnper.exchange","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:37:52 GMT","end":"Tue, 05 Jan 2027 17:37:51 GMT"},"fingerprint":{"sha1":"71:F3:7F:00:F4:DE:0F:18:58:E0:D3:35:D3:F4:13:A4:C1:2B:FA:A0","sha256":"7A:FB:75:CA:30:67:1E:B2:66:14:5E:51:5D:75:04:3F:D9:C6:56:20:62:6D:29:17:7A:17:97:E3:5F:77:3B:14"}}},"request":{"raw":"GET /img/jumper-ui.webp HTTP/1.1\r\nHost: jurnper.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jurnper.exchange/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Wed, 14 Oct 2026 19:46:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 50438\r\nLast-Modified: Wed, 07 Oct 2026 18:17:32 GMT\r\nConnection: keep-alive\r\nETag: \"6ac68cbc-c506\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50438,"size_decoded":50680,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08cd028b6c3ed468f9cf687f037c0508","sha1":"dce3ba1e519d55b48d060dcb8b61a743c20694b3","sha256":"83e1c6a8160840ae59fac04f0377b601cdcf8914428b937d9b0aaac396697552","sha512":"f9d67b41808fa2b63a36131b1eb050fe60aa88b933751a0fa0e889df7fc6131e14607fe5c6240b0e31663b99e2592906f79d064abf93814f7275a9fd219186f7","ssdeep":"768:ApEbYy1UB5DHQb6ElPZw7fnPJmU8zEbsiymLckgh6nD9dhAb5c9nm+F:ApEbJW5TQbrxZamU2iymvgS9dhTX","tlshash":"2733f1a06317703ef37318fcfd63a69093687d622114d54db85c19aa2f58a981aea10e","first_seen":"2026-10-14T19:47:20.795242Z","last_seen":"2026-10-14T19:47:20.795242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":131,"dns":0,"connect":143,"send":0,"wait":286,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jurnper.exchange/img/move-deploy-manage.jpeg","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jurnper.exchange/","date":"2026-10-14T19:46:03.802Z","timestamp":1792007163802,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jurnper.exchange","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:37:52 GMT","end":"Tue, 05 Jan 2027 17:37:51 GMT"},"fingerprint":{"sha1":"71:F3:7F:00:F4:DE:0F:18:58:E0:D3:35:D3:F4:13:A4:C1:2B:FA:A0","sha256":"7A:FB:75:CA:30:67:1E:B2:66:14:5E:51:5D:75:04:3F:D9:C6:56:20:62:6D:29:17:7A:17:97:E3:5F:77:3B:14"}}},"request":{"raw":"GET /img/move-deploy-manage.jpeg HTTP/1.1\r\nHost: jurnper.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jurnper.exchange/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Wed, 14 Oct 2026 19:46:04 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Wed, 07 Oct 2026 18:17:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6ac68cbc-5b80\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23424,"size_decoded":23298,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1128x191, components 3","md5":"6849989664e74ce5401d4b43d0c1039b","sha1":"a82af07fabeaed8e6104fe4e0e5fcd48302d05f9","sha256":"599306e320c3c0e63b2bc8c32dd59241ea190a8e16f8bbc1e9bd88afcd3f90af","sha512":"9a4624e73a7b3f8f08a2281859117402e03af118259035fa4e39c5f91e39480897b065d6db72f9d414358b23298a7c06724e3e9e6486f9979bc76e8a3b1251b1","ssdeep":"384:MZIgGIr944zErwKNN1lIt7fLk6q+gkTVhz8jLhiADQRwEXtdqQEeH1vEhZLal7OA:YIg3944YtXeDndTfo/hicawE9dqQHvHL","tlshash":"c2b2d00167ef3e92fa6676b02425bd825fd89b41c248c38b9b9c485186b1fd3e947317","first_seen":"2026-10-14T19:47:20.798774Z","last_seen":"2026-10-14T19:47:20.798774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":719,"timings":{"blocked":131,"dns":0,"connect":143,"send":0,"wait":287,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jurnper.exchange/img/best-route.png","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jurnper.exchange/","date":"2026-10-14T19:46:03.804Z","timestamp":1792007163804,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jurnper.exchange","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:37:52 GMT","end":"Tue, 05 Jan 2027 17:37:51 GMT"},"fingerprint":{"sha1":"71:F3:7F:00:F4:DE:0F:18:58:E0:D3:35:D3:F4:13:A4:C1:2B:FA:A0","sha256":"7A:FB:75:CA:30:67:1E:B2:66:14:5E:51:5D:75:04:3F:D9:C6:56:20:62:6D:29:17:7A:17:97:E3:5F:77:3B:14"}}},"request":{"raw":"GET /img/best-route.png HTTP/1.1\r\nHost: jurnper.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jurnper.exchange/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Wed, 14 Oct 2026 19:46:04 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 07 Oct 2026 18:17:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6ac68cbc-1244e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74830,"size_decoded":75124,"mime_type":"image/png","magic":"PNG image data, 1200 x 630, 4-bit colormap, non-interlaced","md5":"37203ffc1552cb9598ed2010acc75732","sha1":"875071e831243f1711500758f590238dba8fddad","sha256":"56cc8d0b0c913e28fa881e5883c77d8f09d8b0573739470be571f9c2d5475c66","sha512":"23048794c0b9b18dd509d328d214e9fc9a3abd22732f6362297a77b5d24e02ab3b7d5f1b3d64452f6ea16ba35e05b0d3f7effbc1f8a4f2718bfe29385eb1a79a","ssdeep":"1536:XbWo5szqJ42ci6dzfH/i2y06Sxi6Yyq7YjsfVlGY8FsxSzHCaVy:XbWNgFci6dzffVtnILYjsfVkR5zHCaVy","tlshash":"6d730269e2e68cca8334d4e136edfdb45ff5a47b9a10bb4d86efdd053941006c511513","first_seen":"2026-10-14T19:47:20.801574Z","last_seen":"2026-10-14T19:47:20.801574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":562,"timings":{"blocked":131,"dns":0,"connect":143,"send":0,"wait":145,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jurnper.exchange/logo512.png","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jurnper.exchange/","date":"2026-10-14T19:46:04.344Z","timestamp":1792007164344,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jurnper.exchange","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:37:52 GMT","end":"Tue, 05 Jan 2027 17:37:51 GMT"},"fingerprint":{"sha1":"71:F3:7F:00:F4:DE:0F:18:58:E0:D3:35:D3:F4:13:A4:C1:2B:FA:A0","sha256":"7A:FB:75:CA:30:67:1E:B2:66:14:5E:51:5D:75:04:3F:D9:C6:56:20:62:6D:29:17:7A:17:97:E3:5F:77:3B:14"}}},"request":{"raw":"GET /logo512.png HTTP/1.1\r\nHost: jurnper.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jurnper.exchange/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Wed, 14 Oct 2026 19:46:04 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 07 Oct 2026 18:17:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6ac68cc4-6a3d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27197,"size_decoded":26638,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c71599e14b35037c4d752137fdd9076e","sha1":"5b36ec27b9c72d9f93466aad9febc2c5472871b5","sha256":"9ef971955ecaed0d27b16a3c322cced638b12044bb846829e81d18f3de896c7a","sha512":"c9937c47b4c7029b4e9e8b5468dfbaecc582e4cdbfb0416afe3ca655eafa02e57baede425fc4d5717661e2e0e5fc86ea9822f5546401a3f2d87c76411bf206b8","ssdeep":"384:1v8orA6khawveC4Gmvi7io7wdgyLqBiw0qXsau+7UNgjXWT8M7Ymc5rFp:1ksA6khneC4VvaCTqrXC+7qWYYx5xp","tlshash":"16c2d153d8480c39bb147f06058275dab74e74acbc185925df891a0c9c96b2f87f3aae","first_seen":"2026-10-14T19:47:20.804694Z","last_seen":"2026-10-14T19:47:20.804694Z","times_seen":1,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jurnper.exchange/favicon.ico","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jurnper.exchange/","date":"2026-10-14T19:46:04.345Z","timestamp":1792007164345,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jurnper.exchange","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:37:52 GMT","end":"Tue, 05 Jan 2027 17:37:51 GMT"},"fingerprint":{"sha1":"71:F3:7F:00:F4:DE:0F:18:58:E0:D3:35:D3:F4:13:A4:C1:2B:FA:A0","sha256":"7A:FB:75:CA:30:67:1E:B2:66:14:5E:51:5D:75:04:3F:D9:C6:56:20:62:6D:29:17:7A:17:97:E3:5F:77:3B:14"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jurnper.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jurnper.exchange/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Wed, 14 Oct 2026 19:46:04 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 15086\r\nLast-Modified: Wed, 07 Oct 2026 18:17:40 GMT\r\nConnection: keep-alive\r\nETag: \"6ac68cc4-3aee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15086,"size_decoded":15330,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"0584683d6e9a093e066554004c7f4557","sha1":"66f9962588db2e44a3368691a759a2916bc65586","sha256":"5fbe8b8dc741a4d27a4b4c364e7467da35a806546dca2c13b028e43626f8085d","sha512":"e178706f30fcc69ea73aa1d895434bb9ff4a0d9f10d902e0d50e545fbc04d876a53d96cecddedf50c3f0e38d6ad1a177e824c8e6720e424b92aa0bb633310cab","ssdeep":"96:j+Ana+NNWNNNNNN/NNNNNNN5NNNNNNNMNNNNNNNR5NNNNNNNMNNNNNNNUNNNNNNL:j+fY+DmXS4IGnXVqCxTz/I6pd","tlshash":"a4629f5263d465e8e99c3b7d93c6aa7c05128c8f7762face7575bc06a813341cd72d00","first_seen":"2026-02-12T22:02:46.087753Z","last_seen":"2026-10-14T19:47:20.806787Z","times_seen":19,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":143,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jurnper.exchange/","fqdn":"jurnper.exchange","domain":"jurnper.exchange","tld":"exchange"},"ip":{"addr":"104.168.132.201","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T19:46:02.647Z","timestamp":1792007162647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jurnper.exchange","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 17:37:52 GMT","end":"Tue, 05 Jan 2027 17:37:51 GMT"},"fingerprint":{"sha1":"71:F3:7F:00:F4:DE:0F:18:58:E0:D3:35:D3:F4:13:A4:C1:2B:FA:A0","sha256":"7A:FB:75:CA:30:67:1E:B2:66:14:5E:51:5D:75:04:3F:D9:C6:56:20:62:6D:29:17:7A:17:97:E3:5F:77:3B:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jurnper.exchange\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.5\r\nDate: Wed, 14 Oct 2026 19:46:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6941\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19695,"size_decoded":7152,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (664)","md5":"ca9dce46379af689d2a926bf62bbdbc5","sha1":"1eb2b4edc6804b1cda2681b20511542f1228620e","sha256":"9026ca55e2e013324597b1012a7efb523f6456ba105a6f72c199b66d3e24816b","sha512":"31689a4e6dc99d17542e46922ae64ce6082a8ffe8bc9f2b5fe6caef644ed0999b83a7fee6fb9887aff40081df3727a07d0d723b049fdd00281036dd2514ab235","ssdeep":"192:GHsUWdj3X8h6G90sgQZyYDnJ4qmATaCeZPXES8QTZKbDor/mtEja1FfB6QT8bzJ/:GM1j3sYSZbfuCeVESg3SXjgB6QXy","tlshash":"0e92b71363d922710e4601b22ac673e1da09c15bc3ea1525b7bd858c3f81959cafbbbd","first_seen":"2026-10-14T19:47:20.809955Z","last_seen":"2026-10-14T19:47:20.809955Z","times_seen":1,"resource_available":true,"data":null}},"time_used":977,"timings":{"blocked":0,"dns":260,"connect":143,"send":0,"wait":283,"receive":0,"ssl":291},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"jurnper.exchange","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}