{"report_id":"208793eb-0761-4662-9e8a-8f318c169769","version":6,"status":"done","tags":[],"date":"2025-10-02T19:27:22Z","url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"title":"Jito Foundation | Solana Liquid Stake Pool: Non-Custodial Liquid Staking"},"submit":{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-06T19:27:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"jitoclaim.pages.dev","ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-10-02T19:27:22.75392Z","last_seen":"2025-10-02T19:27:22.75392Z","alert_count":0,"request_count":18,"received_data":1972435,"sent_data":8134,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"corsproxy.io","ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-30","domain_rank":175528,"first_seen":"2016-05-19T01:27:08Z","last_seen":"2025-09-30T09:21:57.534043Z","alert_count":0,"request_count":2,"received_data":4003,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2025-09-30","domain_rank":0,"first_seen":"2025-10-02T16:26:18.788343Z","last_seen":"2025-10-02T16:26:18.788343Z","alert_count":7,"request_count":7,"received_data":346705,"sent_data":4855,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"846f83cad28aa07f55ba94b96133b937","sha1":"dd86fd25dc930308e3ab1e3d9f3be832a482e7fc","sha256":"a73582e75762a671403b66128a2630bc5901ac56eb67d4b6991155f79e443ba6","sha512":"728b5940b24c71e1fab303f9a52e12e0ef8f827b06e629c30ef9857fff15c2d926cdbb5f57c6f598e4bfcb4cdb19e2840e5e005d0f9e760aaaeb49cc2f15c2df","ssdeep":"6144:9X1a3UHJWYTmpC289Hgm0Fn7e/LV35ePgPuc:9wemEL9Hgmoe/LV35ePgPuc","tlshash":"1354101ae7a911aa83a990d2df628df7b4dcbd10435e17bdb8d6f361e004cf091e568c","size":299708,"data":"","first_seen":"2025-10-02T19:27:27.663299Z","last_seen":"2025-10-04T13:21:25.492936Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/jquery.js","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2442916ae5a79e71183cdf913566c90f","sha1":"5ca408825bc6a37191d05709b5c42cf9c8722430","sha256":"90db435beb66d79d24214d6d71318b6ccf0a692c8cb7c7c0b48531796789b97e","sha512":"2d52f965ae91d3842d41a138ab95a85ce60a94f1410e90e34887e57fe8ff0e5dea46910059cd6c9b2d1d6375b77a68f30c05f4facf0c0fe632672aab15c7c157","ssdeep":"3072:gXn1aXUTTT3lVLN9IBhxWoLnveRn9ERyNqrpaudgfHLV35ePgPuV:Gn1aXUHDPIran9Iyqrrdg/LV35ePgPuV","tlshash":"7d54211ae7e911ab836990c2df628df7b4dcb910035e07adb9d6f3a6e004cf451e568c","size":305579,"data":"","first_seen":"2025-10-02T19:27:27.640167Z","last_seen":"2025-10-04T13:21:25.490964Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com/@v1/cdn/js/pizzicato.custom.js?t=29323887","fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","domain":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c71366aae03eb4d838255aa2e77e2cc3","sha1":"6d93f8558577a45dee46cf6fb2ac5d27e6ebeccf","sha256":"696b50d684cebccdda6bcad719eba66c7d93022124fb4b9a3adbee694cf0cae1","sha512":"c0675adc878f11a3bf6353934175c5434be7578a8f24fd286b495aaef851b9b7979e0ea620c14e10b106d33961cf67749741ce965ec16ae9bea4c8a7cbb7994d","ssdeep":"6144:Us6RWbpP47Mhk6p1ZsJzO3fXexpHnwufOICuc:R68tPseWCvXexpeIRc","tlshash":"e4748c917280617916634f9a41bf094ab238f1207409492cf79cc8d72bb99dad9bff7c","size":340454,"data":"","first_seen":"2025-10-01T18:50:55.262206Z","last_seen":"2025-10-03T15:28:21.156101Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/images/9.svg","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/images/9.svg HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qC41sGI9UhVakwc5kS7%2BuoUvEV5NGCoLH2B174swyTAEt4zmyywoEs6IAMt1H2EmSmfOfjmYfVslKoQ1eeFkPOjP%2FiuUDyQ608uGaYsA8MOPQSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1e038d3c2f963ad39bf02a4c47303f4f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98869836a98b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"534496dd27e9a44d52d4bc11dd49132f","sha1":"8f868c8d5190f5fbe998df0743d6bc5ab164bfc7","sha256":"6ec66891d0b2efbe2d319ea18ef7ea9bcf76b4b214d4a0f4f93412d5c914875f","sha512":"bf0867588e23c97c5c48d7189f812770f7081e30c8ed9412f8559e4205a1eee1c0d7bd19af0bbbcfc2e808627ee503342b53322086872feeec794e7226a64fb9","ssdeep":"","tlshash":"072105d9528c56cc76420b00ea537275d57f30fb2335dfa443654b72370425d656bcd0","first_seen":"2025-09-16T05:04:38.666474Z","last_seen":"2026-05-07T11:37:05.382783Z","times_seen":30,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/fonts/2.otf","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/fonts/2.otf HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitoclaim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: font/otf\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6ITPAxopVkjdfriv5AzZV6BFlZ8kits37oN9wigie7dhyFixfJzsSdvfbLlC1JvCQXbUpDKsDv2hLgTupOhp2Cg8nxBc0o5erpJ2Fy2bOM5ytM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b19abaf623a2ad432e191929425d22ac\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 988698379bcb23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122080,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"79b6167962ee95a91f64e8bd218d6fec","sha1":"2f08ac4aedccab83ff7aa5d74a0cbbbdf8789862","sha256":"94252cc23a51ebcab1826a001a10d364a22ae296f0ec9484fa3ef105ca48fcfa","sha512":"6c188d51703886b47afe6472954046e7b6355aa0fe10e4413d0ae3ae85424d8712cdeaf893c456da1fc8de3d5fd4396575cd113eb687c94cea18622ab9735c58","ssdeep":"3072:xzVgDN0A/odKaqukENZKhB4Y3Dy/NADm+5xTf1bs0:vaqA/odKaqukUa4iD4NA3tbt","tlshash":"e0c31a065b896565cad40a36c4eecfe70bb3dddc1c1816864ad226444ffcfd2da223e9","first_seen":"2023-04-15T15:59:13Z","last_seen":"2026-07-23T18:06:49.16667Z","times_seen":167,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:00.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 23:42:06 GMT","end":"Thu, 25 Dec 2025 00:42:04 GMT"},"fingerprint":{"sha1":"0C:CD:24:B7:B0:CE:FE:13:D4:74:92:88:E5:8A:19:06:1B:6E:63:58","sha256":"0A:01:7A:C2:3C:74:E6:03:26:29:BB:69:4E:28:E2:F1:01:93:57:7A:C8:02:E9:3E:47:23:C2:D6:66:65:DA:08"}}},"request":{"raw":"POST /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 130\r\nOrigin: https://jitoclaim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 19:27:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncf-ray: 9886983cefc5723c-OSL\r\ncf-cache-status: DYNAMIC\r\nallow: OPTIONS, POST, GET\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, s-maxage=0, proxy-revalidate, no-transform\r\ncontent-encoding: gzip\r\nexpires: 0\r\nvary: *, Accept-Encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nsurrogate-control: no-store\r\nx-cache-buster: 1759433220842_35o35ux\r\nx-cache-status: DYNAMIC\r\nx-client-country: NO\r\nx-client-ip: 82.148.169.64\r\nx-original-url: https://api.mainnet-beta.solana.com/\r\nx-proxy-contact: support@corsproxy.io\r\nx-proxy-mode: cloudflare-snippets\r\nx-proxy-region: unknown\r\nx-proxy-response: true\r\nx-proxy-service: CORS Proxy\r\nx-proxy-time: 197ms\r\nx-proxy-version: 2.1.1\r\nx-proxy-website: https://corsproxy.io\r\nx-ratelimit-conn-limit: 40\r\nx-ratelimit-conn-remaining: 39\r\nx-ratelimit-connrate-limit: 40\r\nx-ratelimit-connrate-remaining: 39\r\nx-ratelimit-endpoint-limit: unlimited\r\nx-ratelimit-endpoint-remaining: -1857\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-method-limit: 30\r\nx-ratelimit-method-remaining: 29\r\nx-ratelimit-pubsub-limit: 5\r\nx-ratelimit-pubsub-remaining: 5\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 2025-10-02T20:27:00.842Z\r\nx-ratelimit-rps-limit: 100\r\nx-ratelimit-rps-remaining: 99\r\nx-ratelimit-tier: free\r\nx-report-abuse: abuse@corsproxy.io\r\nx-request-id: 32f68a0e-5453-44d3-acef-4826689f7523\r\nx-rpc-node: sxb1\r\nx-timestamp: 1759433220842\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uZddUb3YOfKPdvXq0S9MRe7fMnCIEEU6HaGsvyZJFmzict0j%2B5G8cmGbE7ts2RG8cNNNzrD7gMQEdjC6WVaJEmtqPvEyGduv13TtnXikDL50BnRbYcmhb8G0Pjd%2FOA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: *\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1607\u0026min_rtt=848\u0026rtt_var=560\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=4078\u0026recv_bytes=1552\u0026delivery_rate=2941096\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=e4fbf5ed6fac9ae2\u0026ts=240\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"56bce40aa73ca73829d475b18f439368","sha1":"dfe263c8ad8194817ed7349d30a60741ac2e2e51","sha256":"25ec21899a53206f47422f4415c008baeef586e96e80b6a0177cad3ce75b7da5","sha512":"910683051908e403b49595d1efb4a3b8242cf970ca38a82955455a4c3d00721d915b529adcdb7fac323269e2dd69c696875181c8084cb1a490902bb133732ca7","ssdeep":"","tlshash":"a4e07d943d4b1fb599e94b438231329db2925819e7008a4e13e5151463c95dd608bdb7","first_seen":"2025-10-02T19:27:27.620663Z","last_seen":"2025-10-02T19:27:27.620663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/images/10.webp","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/images/10.webp HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 58934\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"07143ea979b9366d6e0bdf6494e718f6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVUgGNJO7Cjqh%2FtzhOnd6JZm%2B2vPGk7MbFvb9jibtrLS6KSjUOR6RcvQrpiQ1uHye8AQtfCSACjfV0Dygj52N0Ismj9lQfhWI7E8ekx%2BiNm3fj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98869836a99023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea1793806a8272d597abee097b2a450a","sha1":"e0a99368ec3eecd775739bce511ec4dde2d2448a","sha256":"84327dc75eb976007bd5e2772054c2003b0a74cc346abe99f0c3ce1f00883935","sha512":"01ddbbddda82312339b65aa0e00566048485b75db833d879d0861f83c5d9d759d6a3030710a52834123e594bef94ffd40e8abef324d1fa4a145a1629f1466e59","ssdeep":"1536:fcDmXmgSZ+TDa0bSclYI6jF9CRaxHyFGzD:f2mX7HhSclcF9AyH7H","tlshash":"4143f292e43a72e425645a70dd03f0827b4ad692adbe2ccbfa4b73b48d6595a0f4c430","first_seen":"2025-09-16T05:04:38.710342Z","last_seen":"2026-01-03T00:05:16.318334Z","times_seen":11,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/css/stylesheet_0.css","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/css/stylesheet_0.css HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitoclaim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6KdmrrCggHhQYNc55shcOlIvzNfmGzvBmcRSfLnW2efWWqKgZzADgtCBVYEwhiWeaAdD9hc4%2F%2F2F%2FRn0UHdmZ1O7T0m75GZizNUy6chNchlRrFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ab8329a947a2cb6afc364cb1ce337c09\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 988698370a5223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":825,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (825), with no line terminators","md5":"1e796fcb2e1e3e4824147867f7ea3b76","sha1":"fee633606a3d4f41028aec672d7c0daf06e9e983","sha256":"ac83e262902459efcbba55083ba45b4c790c91a8a3a68c4eccb1c8540d97d16f","sha512":"7fc1727c7487e333f584344e6aeb83b7469172a447e5d0512c72a20536b89c571f75a2967f4f66c96f6a9681424a15ac3bdb512ab0f88bebef4e656eb7bdf9c0","ssdeep":"","tlshash":"55012b3009257805d2f74c7234c87803180dd05492d76913e61e1af85ff996b63a7729","first_seen":"2025-10-02T19:27:27.627541Z","last_seen":"2025-10-04T13:21:25.489293Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com/@v1/services/connector?referrer=jitoclaim.pages.dev","fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","domain":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:06.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 16:33:14 GMT","end":"Mon, 29 Dec 2025 16:33:13 GMT"},"fingerprint":{"sha1":"B8:EF:D8:61:7C:EE:FE:BE:0C:39:8D:A9:AB:C4:B7:4A:90:23:48:1C","sha256":"0E:10:CD:15:B1:6C:81:9A:32:50:6D:A6:8C:45:EE:7A:55:AB:26:20:56:25:BE:AD:E9:DB:98:E5:2E:6A:48:06"}}},"request":{"raw":"GET /@v1/services/connector?referrer=jitoclaim.pages.dev HTTP/1.1\r\nHost: awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiWXpXQ21KdzU5SCIsImdyb3VwX2lkIjoxMDcwMTI1LCJpYXQiOjE3NTk0MTc3Mzh9.nnmChGNofXrDlC9yKU8yuiUqOpnQPBYlyxwz-FIByKQ\r\nX-Direction-Safe: 1759433226254\r\nX-Scale-Referrer: jitoclaim.pages.dev/checker/\r\nX-Auth-Key: %2BAlxUSE%2FHhw%2BkHYAfHcnSd2we%2Ft2a1olqhjY52t1ZHY%3D\r\nOrigin: https://jitoclaim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 19:27:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4573440\r\ncdn-uid: 0ffde545-b904-4074-8d94-cea6964d565a\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\netag: W/\"188-OUq6O7ki0l609uHfQCvg3dvFLOw\"\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/02/2025 19:27:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9c7b7869e96d57c14e9364485a641dd8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":392,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"82f6a6bb3193a9b2834aad14a199b762","sha1":"394aba3bb922d25eb4f6e1df402be0dddbc52cec","sha256":"87cd9d57b27f696215e540b1c9fd920e2a35b574fecdd7329d2ac2f6d4a81176","sha512":"6b7ecbe1746adbe7de40cc7fe4dc7689e3561c31d9ede41fa44a721f83b59a4888a4a6b392edb3e9d917d9921df69c520bd000106d5096027591f7a3d723f216","ssdeep":"","tlshash":"a9e0f1034c76fb2f93a21b0061134738fd0a696b8bb843a5f354432ad91156502e07f1","first_seen":"2025-10-02T19:27:27.630586Z","last_seen":"2025-10-02T19:27:27.630586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/images/8.webp","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/images/8.webp HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2940\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"468123614554c8f561be32c52855c154\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2FrmiSPcQSnCCpkOObFsv4QMdu3iZ3NRBSl%2Fzt1%2Fi5fM%2BTIV4KQAJkZGuVPCcJvI55IKcMBwuCJoBqai6qfwHQI%2FUe1pBRvwZxmCVdfdJl%2FRYbM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98869836997d23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a5defe887b8885a85605f60696b182d","sha1":"1854b73c927bda4e2e70d47006c3103f4d315e8d","sha256":"6f5750f164472da57c5e6dcf87b9dbd38f9a1c5622c25085b7d10db6f93212fb","sha512":"3707680110d072a4abe9012c1393ab45a1d98e7bb482a169b6cd822dcaf481c03b82b2362b66c38d6d5ef6a45ab31cb78a922af3153276d364a9f246b6baa80a","ssdeep":"","tlshash":"6c515ba0f24c028dc3bdaea1415d1b23337f914058aaddd3b2abfd24a724964e5a5c54","first_seen":"2025-09-16T05:04:38.703268Z","last_seen":"2026-02-14T05:05:28.515885Z","times_seen":15,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/images/19.svg","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/images/19.svg HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfTHKbcHKS1NXHHd%2F9e9g%2FFW8PGBuCvK76N5nM2w%2F%2FB9UmHGm4d1nOvNv6CwVjY837q5v9qJEKbYAa0xRmdET51XKjx42vq2GSTBRckwlV7tYlk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"25b643669ab212a8e5d52c53567b4801\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98869836a99223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2144,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"834cd58e861bd3583776581efe19e599","sha1":"b7a20f08b98bc38e0f02c51281bb43384c26ef6e","sha256":"55f2993465f0c2dd69954aa62246f257bba78d250031e21e52183e09ba51f8f1","sha512":"6f5a162545f9c49bb3092160dbd3900e103bf026478f24a4e9082ceb40a8f71c7c59167553a5e8fbbc496cde2abec6c7fdc3ea75cafd4f78bc12840852c3876c","ssdeep":"","tlshash":"014140de77b084e9dfc49adafe113448325fb5be7a168300d049af1ca8aa498a015dd9","first_seen":"2025-09-16T05:04:38.700417Z","last_seen":"2026-05-13T12:57:16.632445Z","times_seen":42,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/fonts/1.otf","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/fonts/1.otf HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitoclaim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: font/otf\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxQV1JTpRFMrAbCnFX3yzn4dTla87lLqv8tQ4uh4ouxV1jZHfl56AzT5uAG8MaCnWgeFrBbCVdFdfRvaRhwDWn5IuiNt7Jcju1dbFBevjaFR%2FiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"170d83d4936355a8ace7310ea649a97e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 988698379bc923eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118852,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"844324dc83d98980285a9ab8f3dcb5f0","sha1":"23c5509c167f7fb3985302a148e5d97d74f573df","sha256":"cdd8de1c7cb7a759b53d2830e8000f32e91c40337829c9d398d9b6cf55e5bae8","sha512":"00f5e77506719666e8c8296adfb9928aa8ff69ec5b0f43ca725d8289add8e032fbff6f4c80e79847291767c002eb18c50a4473609ed5a0ac7101775dd990a0ca","ssdeep":"1536:dwHtDhkyml/y/uNHMmrSuDH47MN3I2zkFTOVKbx7Zjp/Xotk17u4javdK7fgsQyi:fPxymNmCY7QY2zmNXNu4GvdK7fgsti","tlshash":"43c32a025bc95a64cec40a36c4eecbe30bb3dddc1d2816865ad216455ffcf92d6123ea","first_seen":"2023-04-15T15:59:13Z","last_seen":"2026-07-23T18:06:49.163232Z","times_seen":261,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com/@v1/services/temp-link/create?referrer=jitoclaim.pages.dev","fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","domain":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:06.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 16:33:14 GMT","end":"Mon, 29 Dec 2025 16:33:13 GMT"},"fingerprint":{"sha1":"B8:EF:D8:61:7C:EE:FE:BE:0C:39:8D:A9:AB:C4:B7:4A:90:23:48:1C","sha256":"0E:10:CD:15:B1:6C:81:9A:32:50:6D:A6:8C:45:EE:7A:55:AB:26:20:56:25:BE:AD:E9:DB:98:E5:2E:6A:48:06"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=jitoclaim.pages.dev HTTP/1.1\r\nHost: awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiWXpXQ21KdzU5SCIsImdyb3VwX2lkIjoxMDcwMTI1LCJpYXQiOjE3NTk0MTc3Mzh9.nnmChGNofXrDlC9yKU8yuiUqOpnQPBYlyxwz-FIByKQ\r\nX-Direction-Safe: 1759433226247\r\nX-Scale-Referrer: jitoclaim.pages.dev/checker/\r\nX-Auth-Key: 2hhI%2BhRQ1uRMqzsKkuVpLBn%2B32kqumh%2F38kPJdArDWo%3D\r\nX-Auth-Key-V2: yio06G26P%2FsE%2BDFJu1v5tGDkiq5bfV9ryqz2ko9vrws%3D\r\nContent-Length: 1719\r\nOrigin: https://jitoclaim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 19:27:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4573440\r\ncdn-uid: 0ffde545-b904-4074-8d94-cea6964d565a\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\ncontent-encoding: br\r\netag: W/\"252-sv9JbFkiaKnlR7EaB85KwFY8lK8\"\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/02/2025 19:27:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8297031c23702f53a96ff9d315f0eb5e\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":594,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6a833bb905cb9bcb5b69ec4ffc549fc8","sha1":"b2ff496c592268a9e547b11a07ce4ac0563c94af","sha256":"939537386478de550c33585c903ae9d8a2ba93f5fdc578e9dac0df759b8011c0","sha512":"2508b13ebc5046e9c3b5b12edc4a121cdeadb42f2dfbbe579070d98c45e8a9e8aa5c672a519ed0595c0afa2e7432d114e1dab8a517f1ddee2006c18bfb3365bd","ssdeep":"","tlshash":"8ff096d952816d8265f8ac6832f203094e0785801afede28c336e081150d16e517e92d","first_seen":"2025-10-02T19:27:27.636678Z","last_seen":"2025-10-02T19:27:27.636678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fpizzicato.custom.js\u0026t=29323886","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /config.php?s=%2F%40v1%2Fcdn%2Fjs%2Fpizzicato.custom.js\u0026t=29323886 HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1rHiKJxAavgHLDslW7nfWdvHp5ZyUk4W%2Bn%2FilvDOqna4iwy05Pdi7RbF8trecfNihAfj6Q%2BlKFMQqrOY1AjYkwOPQK3UEVSuMKDrGjKEOp2J1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8fd729daf59a3bc1df967cae8f18b54e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 988698376b6723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com/@v1/services/connector?referrer=jitoclaim.pages.dev","fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","domain":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:06.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 16:33:14 GMT","end":"Mon, 29 Dec 2025 16:33:13 GMT"},"fingerprint":{"sha1":"B8:EF:D8:61:7C:EE:FE:BE:0C:39:8D:A9:AB:C4:B7:4A:90:23:48:1C","sha256":"0E:10:CD:15:B1:6C:81:9A:32:50:6D:A6:8C:45:EE:7A:55:AB:26:20:56:25:BE:AD:E9:DB:98:E5:2E:6A:48:06"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=jitoclaim.pages.dev HTTP/1.1\r\nHost: awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nOrigin: https://jitoclaim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 02 Oct 2025 19:27:06 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4573440\r\ncdn-uid: 0ffde545-b904-4074-8d94-cea6964d565a\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 10/02/2025 19:27:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e46f4de7bf13e2a2fa755867bdcc3113\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/jquery.js","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/jquery.js HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: application/x-javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wTfrmMQXTL06rfj2%2BHM4LfACfTIn3DNMed3VnGCkfOnXV0nfo%2BLQ%2FvrSHsZoos2lCaIVMMeCqmyqmEgZmaHmeCUddRiBobPsglkMsnDvjDlQf6s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1a6d10031daaa628804a32b89fec2ab1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98869836997623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305579,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"2442916ae5a79e71183cdf913566c90f","sha1":"5ca408825bc6a37191d05709b5c42cf9c8722430","sha256":"90db435beb66d79d24214d6d71318b6ccf0a692c8cb7c7c0b48531796789b97e","sha512":"2d52f965ae91d3842d41a138ab95a85ce60a94f1410e90e34887e57fe8ff0e5dea46910059cd6c9b2d1d6375b77a68f30c05f4facf0c0fe632672aab15c7c157","ssdeep":"3072:gXn1aXUTTT3lVLN9IBhxWoLnveRn9ERyNqrpaudgfHLV35ePgPuV:Gn1aXUHDPIran9Iyqrrdg/LV35ePgPuV","tlshash":"7d54211ae7e911ab836990c2df628df7b4dcb910035e07adb9d6f3a6e004cf451e568c","first_seen":"2025-10-02T19:27:27.640167Z","last_seen":"2025-10-04T13:21:25.490964Z","times_seen":4,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/images/7.svg","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/images/7.svg HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vuiQmaOC3lgPOCMP6ytFOJaosPwEeusxWgBgLglASq3S7z7DE0MdlEswXtdiNEGIadGTPsJjDVa6yJzUSjtKDpNmiKyqH%2Fn1lWddpcnOVQr%2Fy%2Fk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"12115890e6c419be3b56954c2fed52c4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98869836997c23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1673,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"597050b5e30cc8ad0e0fdd7edfc633a1","sha1":"c175cfdc83ad0b913f4901e30c9fa2ce6a86b607","sha256":"1d8dd3613cf2cdf42f75270c15511e0bef121cb2660c9d917e41ccae67898b06","sha512":"0fbfe13ab0b295ef82004df57edf385f390044ed5091fe8e14a4f87ea931d97fc3d1410a54ec74f77138dad4e39d4f5f0f283145c91e422b061647187a174e3e","ssdeep":"","tlshash":"c93110e493d041a491062bb44618e433ec1f31fd66a28abcc5b8be417c8b46e890edce","first_seen":"2025-09-19T02:32:18.942138Z","last_seen":"2026-06-29T00:40:53.536559Z","times_seen":55,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/fonts/4.woff2","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/fonts/4.woff2 HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://jitoclaim.pages.dev/checker/css/stylesheet_0.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-length: 36932\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"72cb9e44846c4f179109b1305313edbd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwtq6yexsxpDPus0bUj%2BNRdq7luUbCOpI6ugJ8LoDm5qkR49ZNqWwhfgsTbqPnhB4tU56XYYsUvuGIImL7eav9b1BfzsqErTcm6AwYm%2FmSPHjXI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 988698379bcc23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-28T18:29:35.09348Z","times_seen":31327,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"corsproxy.io/?https://api.mainnet-beta.solana.com","fqdn":"corsproxy.io","domain":"corsproxy.io","tld":"io"},"ip":{"addr":"172.67.73.211","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"corsproxy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 23:42:06 GMT","end":"Thu, 25 Dec 2025 00:42:04 GMT"},"fingerprint":{"sha1":"0C:CD:24:B7:B0:CE:FE:13:D4:74:92:88:E5:8A:19:06:1B:6E:63:58","sha256":"0A:01:7A:C2:3C:74:E6:03:26:29:BB:69:4E:28:E2:F1:01:93:57:7A:C8:02:E9:3E:47:23:C2:D6:66:65:DA:08"}}},"request":{"raw":"OPTIONS /?https://api.mainnet-beta.solana.com HTTP/1.1\r\nHost: corsproxy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://jitoclaim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 02 Oct 2025 19:27:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cLuSePFsJGSQISTkW7Jtlh6YzxrjmMc23R3xK%2BtP9ICKKCml%2Bod1%2Fn38ugQQYfRAQct4oZhHs5ksP732jh7SOmHfkHW7fqbIq5uc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate, private, max-age=0, s-maxage=0, proxy-revalidate, no-transform\r\nexpires: 0\r\nvary: *, accept-encoding\r\npragma: no-cache\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH\r\naccess-control-max-age: 86400\r\nsurrogate-control: no-store\r\nx-cache-buster: 1759433220620_zg771rs\r\nx-request-id: 10738f0a-1e0f-4712-b427-f5f74df2dc99\r\nx-timestamp: 1759433220620\r\nstrict-transport-security: max-age=2592000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: 9886983cdf93723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":1610,"timings":{"blocked":800,"dns":789,"connect":2,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:06.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 02 Oct 2025 19:27:06 GMT\r\ndate: Thu, 02 Oct 2025 19:27:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51955a067b2f96efe49c2412a4c8c713","sha1":"44103446803299fdae2aa9fdf4c21af4e90fe450","sha256":"2598c04bc6015e0fdad9381928b8238d997efd88a0e450042a60e9d59435f915","sha512":"ca70f49f25ca02d0491518a04e3fdd3c9cb9d35a573ecae94d1bf8fe184ee1ceb53b623b4ba9bf2faf7ee4e321d30fb57954326ac064cdd7605b031355ef680b","ssdeep":"192:vywfydyGy63gy/yFVyR73xpmj3U8fHiyYwyNFyuy3uySRk73vO6u8:vtfcHjg8ciIShwCFnbL8B","tlshash":"2002ff91056be504ea431cc627cf7e369e8e62667081d1797ffe2cd9aceac22132475c","first_seen":"2025-09-11T02:59:26.857486Z","last_seen":"2026-07-26T09:03:56.64244Z","times_seen":914,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":53,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/images/12.svg","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/images/12.svg HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CibA0oCRtecP%2B8gU1HaH%2By7GdMd71VsPlBota6efD%2FKBOJ0v%2BvsjP2G2u2iWCp%2BPIlWKtmXcjvgMq9OIIDG5e2HcvBH7xyh%2BxpMaFJMG0LbmbDM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e47d28ea1c56fcb5d8f961988348d79f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98869836a99123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":856,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92cf0703ae33978436aac8f308d18464","sha1":"74f8ee89ac90097f7e205dbf81f3aabe28801632","sha256":"d4bf5a7beaf428fc2c7cfdf3789b2fcfdbbee00653f6c5886a1b4bbbf7981073","sha512":"8e32b337654e4bfd33800c53883257c87cd3f685d6f9270bd6d630c9479e6136d48afee90328c512eecb17a5f4573b2b1f25f8f16ca37d398e31934afb236c0f","ssdeep":"","tlshash":"ee111edaf3cc0d6dee07d788cb217530909b62731cc64054a9009bb1962a22d65efec4","first_seen":"2025-09-16T05:04:38.698746Z","last_seen":"2026-05-07T11:37:05.442335Z","times_seen":25,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/images/5.ico","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/images/5.ico HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g59XJR78EDplENIbn1zzwesGMtZe9z5a0gi35XvP20AdXrNIn6hfo4VowvzBewI8bMhpyGQWLLPvCBVy0iIQOAMxOBaAemBHTXzJtPg2UTQGCrY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"577d5ff7f3ea6bd4e4cb879ba98ec74f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 988698376b6323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22382,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dfa170c4e71d08415c03ecc44ac8a8ea","sha1":"4014e39c3797c5f33b4c449bf2dee00acea8441d","sha256":"3dcff0e2fbcdf97a708579c536bc5356b1aa1b7250ff6051d624b1826e7a7869","sha512":"d84bd37b118ff5db04a1ba41722ccf47bec0fbbd78b9b38c2b08632156ba266823defebdaf307014972b0acfce8815d4199808381aabcc290abd7108e040d205","ssdeep":"96:o/rSpUQ8RSxoSv5gJCJcI5VcNzNesBxcEj1moK2as+oxO3BLmKX8ZM1:Iibwoc+9V6LLZmaaexQf8ZM1","tlshash":"77a2b49606504c22db1d52f0ab8bcafe22736d792732960dd4fa7d7339ba2470c2145d","first_seen":"2025-07-16T14:09:54.336258Z","last_seen":"2026-06-29T00:40:53.533802Z","times_seen":74,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com/@v1/cdn/js/pizzicato.custom.js?t=29323887","fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","domain":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:00.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 16:33:14 GMT","end":"Mon, 29 Dec 2025 16:33:13 GMT"},"fingerprint":{"sha1":"B8:EF:D8:61:7C:EE:FE:BE:0C:39:8D:A9:AB:C4:B7:4A:90:23:48:1C","sha256":"0E:10:CD:15:B1:6C:81:9A:32:50:6D:A6:8C:45:EE:7A:55:AB:26:20:56:25:BE:AD:E9:DB:98:E5:2E:6A:48:06"}}},"request":{"raw":"GET /@v1/cdn/js/pizzicato.custom.js?t=29323887 HTTP/1.1\r\nHost: awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 19:27:06 GMT\r\ncontent-type: text/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4573440\r\ncdn-uid: 0ffde545-b904-4074-8d94-cea6964d565a\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\ncache-control: no-store, must-revalidate, no-cache\r\ncontent-encoding: br\r\netag: W/\"531e6-bZP4VYV3pF3uRs9vsqxdJ+br7M8\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=pizzicato.custom.js\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/02/2025 19:27:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9459fbc907e22d3189d5ac1ad338559d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":340454,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65428)","md5":"c71366aae03eb4d838255aa2e77e2cc3","sha1":"6d93f8558577a45dee46cf6fb2ac5d27e6ebeccf","sha256":"696b50d684cebccdda6bcad719eba66c7d93022124fb4b9a3adbee694cf0cae1","sha512":"c0675adc878f11a3bf6353934175c5434be7578a8f24fd286b495aaef851b9b7979e0ea620c14e10b106d33961cf67749741ce965ec16ae9bea4c8a7cbb7994d","ssdeep":"6144:Us6RWbpP47Mhk6p1ZsJzO3fXexpHnwufOICuc:R68tPseWCvXexpeIRc","tlshash":"e4748c917280617916634f9a41bf094ab238f1207409492cf79cc8d72bb99dad9bff7c","first_seen":"2025-10-01T18:50:55.262206Z","last_seen":"2025-10-03T15:28:21.156101Z","times_seen":14,"resource_available":true,"data":null}},"time_used":10240,"timings":{"blocked":5044,"dns":5038,"connect":1,"send":0,"wait":152,"receive":0,"ssl":4},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-02T19:26:59.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/ HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IGa56i%2FcAUNEI%2BOhNUfalXpWYu%2FbohPpDIcV2DP5n73mpHzCqfN4ziEu7UwAnJiA7LNpDYNQhvSI9YHFtUvl7g%2FoD%2FQWs1X951bQK121eDI%2BPQiqZBPyq%2FEBDaXoSjisNZui%2F2oa\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98869835aa6956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1500\u0026min_rtt=642\u0026rtt_var=614\u0026sent=7\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=3197\u0026recv_bytes=1134\u0026delivery_rate=3127429\u0026cwnd=253\u0026unsent_bytes=0\u0026cid=34ba64327a868928\u0026ts=110\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":989743,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (24201)","md5":"437f1fbec552c59aad40e75f85e255dd","sha1":"da6995a2409125bf75b4f13bef687ad422e4e00d","sha256":"0f99a979f418f89bffadc2b6fd520367af77bbeaecfbae627023977047f0b711","sha512":"f802bbd97b11a2f66719e816bdd176a9c0abb1b675296e32128b3aa08d172c61e5e95f672f008d5b433b1e2bc4500d3617eafe75c71b8c0df55e21464cb810a4","ssdeep":"12288:u4YB2idFz5SHsbcwprzRv8ArA8AzAzABA8AvcwprzRvlnSHSX2bidQ4YBaa:u73FAHsoERvxUxMMaxkERvlSHSGqQ7aa","tlshash":"fa25f2bc3509859b8b0517c8e5e7a52cac6832efccc5d098f7583256356ef98b73a087","first_seen":"2025-10-02T19:27:27.647841Z","last_seen":"2025-10-04T13:21:25.484579Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":11,"dns":1,"connect":2,"send":0,"wait":103,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/css/stylesheet_1.css","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/css/stylesheet_1.css HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wxk%2FstGZwLxRFQ18e85bQuc7XO8yRpp6FLF6kiikDUPp1wopTDTq1%2BJ0eNS%2B2F13JQ%2BdIyAOBP%2F%2BKt87LUGu7ZLbioRk5dMxSAO60FlEdjg1ZYk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a04e691813bbcdce6c60e3a21b6cd75b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98869836997723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31434,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (31434), with no line terminators","md5":"b76f4d6040b3384dc2bfb8b8d393b51f","sha1":"043e76dd0bf4a1bae5af1a739cee23951bc617fa","sha256":"b722e575c547a8d31c1b64de9af8f7ff8f625f6fae71cb80cfd1f8ddc3864c4a","sha512":"2b886c67849ae8bb709164fbfedea46d663f7cc4468a2ec6fd1cfd9dc6465f4a4feb51698fcfd3fe8314ef0ac2a80f7235c3be96b9810858e9db19fd7d48fc2a","ssdeep":"384:sz1ng+xMpP0nAJNg1YXId3JYgLL1rIqBUiPuU9e0Bk1EP:sJGPfJ+1YYd5NrHvGU9e0BX","tlshash":"f6e2b69d5f16103e6c2345f2d0e4aeacd12be5c1ef265adfba4316018bd03e72ab2715","first_seen":"2025-10-02T19:27:27.651606Z","last_seen":"2025-10-04T13:21:25.485867Z","times_seen":4,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/fonts/0.otf","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/fonts/0.otf HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitoclaim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: font/otf\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Go5I4dySkMvP3%2FAilBkRkc5NFoxxxynpx%2FyT3oYeE6MLpA4DDtrIUTJCpS7loNnV%2BQaZzv0p9Q5%2FUlkSil99LslW35xLfoJS5Wu4m37uV8TKYq0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3e5e47fe904ae90d3d15b197d9dc646f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 988698379bc523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123040,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"8b596560260fe8d7fbb96e368603800f","sha1":"71c14766339bed3fddc7bbec1e042e4f3c81b980","sha256":"d35e8cdca0b54583100a7f06ad585cbab52e2617498dc19bdaee95d313a526ad","sha512":"5943f0fd0dc9812aff1e000bedc2c6e4f40ee420be2e653424174e7a66522f746a503c7240dae2fd1be03c38cea3da288317ece6507999a3b8d5dcb84a8f219e","ssdeep":"1536:exHXDdexq4y/1Gv5MjHt1FHQJgZE3cjmexwlGJaVfEguFq+lnofSa4G6nsb:HM/1o50HQJgZEGme9SEgUofSass","tlshash":"bcc32b026b8929a5ced40936c4eecfd30bb39ddc1c1817865ad226455ffcbd2d6223e9","first_seen":"2023-07-03T04:30:13Z","last_seen":"2026-07-23T18:06:49.17743Z","times_seen":78,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com/@v1/log/join","fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","domain":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:06.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 16:33:14 GMT","end":"Mon, 29 Dec 2025 16:33:13 GMT"},"fingerprint":{"sha1":"B8:EF:D8:61:7C:EE:FE:BE:0C:39:8D:A9:AB:C4:B7:4A:90:23:48:1C","sha256":"0E:10:CD:15:B1:6C:81:9A:32:50:6D:A6:8C:45:EE:7A:55:AB:26:20:56:25:BE:AD:E9:DB:98:E5:2E:6A:48:06"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nOrigin: https://jitoclaim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 02 Oct 2025 19:27:06 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4573440\r\ncdn-uid: 0ffde545-b904-4074-8d94-cea6964d565a\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 10/02/2025 19:27:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 79efc9c2426d12ae281068a06246a9cf\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com/@v1/log/join","fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","domain":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:06.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 16:33:14 GMT","end":"Mon, 29 Dec 2025 16:33:13 GMT"},"fingerprint":{"sha1":"B8:EF:D8:61:7C:EE:FE:BE:0C:39:8D:A9:AB:C4:B7:4A:90:23:48:1C","sha256":"0E:10:CD:15:B1:6C:81:9A:32:50:6D:A6:8C:45:EE:7A:55:AB:26:20:56:25:BE:AD:E9:DB:98:E5:2E:6A:48:06"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: jitoclaim.pages.dev/checker/\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiWXpXQ21KdzU5SCIsImdyb3VwX2lkIjoxMDcwMTI1LCJpYXQiOjE3NTk0MTc3Mzh9.nnmChGNofXrDlC9yKU8yuiUqOpnQPBYlyxwz-FIByKQ\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://jitoclaim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 02 Oct 2025 19:27:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 32\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4573440\r\ncdn-uid: 0ffde545-b904-4074-8d94-cea6964d565a\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ncache-control: no-cache\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 10/02/2025 19:27:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7d89cd877b5921d7c40421fa3660868b\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com/@v1/services/temp-link/create?referrer=jitoclaim.pages.dev","fqdn":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","domain":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:27:06.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 16:33:14 GMT","end":"Mon, 29 Dec 2025 16:33:13 GMT"},"fingerprint":{"sha1":"B8:EF:D8:61:7C:EE:FE:BE:0C:39:8D:A9:AB:C4:B7:4A:90:23:48:1C","sha256":"0E:10:CD:15:B1:6C:81:9A:32:50:6D:A6:8C:45:EE:7A:55:AB:26:20:56:25:BE:AD:E9:DB:98:E5:2E:6A:48:06"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=jitoclaim.pages.dev HTTP/1.1\r\nHost: awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nOrigin: https://jitoclaim.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Thu, 02 Oct 2025 19:27:06 GMT\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4573440\r\ncdn-uid: 0ffde545-b904-4074-8d94-cea6964d565a\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, PATCH, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 86400\r\ncache-control: no-cache\r\ncdn-proxyver: 1.37\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 10/02/2025 19:27:06\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b0e90593dee46f1c32b6ceef57762e29\r\ncdn-status: 204\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-02","alert":"Sinkholed","trigger":"awdjlmjorhutqpsavhkpwxapllubbylmrlteyg.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/images/6.webp","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/images/6.webp HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20386\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"59338d3ef558fcadd8094b057edb845b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hb5nSN0Im2Zx2T%2FAFFnte%2FmWPZNQENddvHXx%2FZ6yWEKh9PjLftNpkosQkHkCrVYiNeZTb6jDHqT1%2BjDDw5NGihBOUqlXxj4bb%2B6mbxAlRTESD%2FY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98869836997b23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20386,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c4869f94c27ccebeb1fe6d3759e1d74","sha1":"1eaef9c80fb5a9fd2b800187c1d46152677b16ff","sha256":"88378676d9fac133f20b1ed8929c4c2c089916d49d529a333780e9bbdcbc0b8b","sha512":"74a478d9900c36b3c3418c0ecb1c787ebe07b3d5da3111df1297244b392bca2f12b201dc7313eedca26a82b4ff2761494c42a8be516acfdcde2b866ac3402cce","ssdeep":"384:xOmEt48JM/L6CAnW0AncZaKNipMFuP4dVtgjTg53zW3TAu4NL:xHK48JM/TAnW0qcZaGiOnjtgU5jC34NL","tlshash":"3392bf5697a5f48cddbdb03f00970009640ec995608555baeb0f2fcbbbf116ee17602b","first_seen":"2025-09-20T17:18:32.652251Z","last_seen":"2026-02-14T05:05:28.50545Z","times_seen":14,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitoclaim.pages.dev/checker/fonts/3.otf","fqdn":"jitoclaim.pages.dev","domain":"jitoclaim.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.176","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jitoclaim.pages.dev/checker/","date":"2025-10-02T19:26:59.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitoclaim.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 16:01:47 GMT","end":"Wed, 31 Dec 2025 16:40:59 GMT"},"fingerprint":{"sha1":"3C:D9:1B:8B:AA:CA:BA:D7:2B:A7:7B:FD:EA:F4:1F:26:96:1A:53:00","sha256":"8C:BF:52:D8:F1:84:93:00:75:30:E9:E6:E1:74:10:68:AF:02:54:23:F1:09:0D:9A:44:E7:24:7A:AC:34:5E:B2"}}},"request":{"raw":"GET /checker/fonts/3.otf HTTP/1.1\r\nHost: jitoclaim.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitoclaim.pages.dev/checker/css/stylesheet_1.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 02 Oct 2025 19:26:59 GMT\r\ncontent-type: font/otf\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"cea7919393eef44a9af518a549f99955\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fd2lhMZoj33lbEV5klGN09s%2F%2FJLxrLCfDgdmsXeksIvK8z84JWDajCo341UHPHl6d2tt3jwq2bmr611nU0RHF%2F4BvP3oCfOy55OR%2BcSDheerEtfMUiGP0CIC1lrPnWyWjWON05o%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 988698379bd623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1042\u0026min_rtt=825\u0026rtt_var=73\u0026sent=350\u0026recv=101\u0026lost=0\u0026retrans=0\u0026sent_bytes=383104\u0026recv_bytes=9399\u0026delivery_rate=64993200\u0026cwnd=73200\u0026unsent_bytes=0\u0026cid=85bd16a29037be2c\u0026ts=266\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119176,"size_decoded":0,"mime_type":"font/otf","magic":"OpenType font data","md5":"3ab5a6301d79b3e3e3afeca89c2d1695","sha1":"4f2ce3d81d3cfb85ac46d73b024b0f626765a06c","sha256":"0b9aa117448147a616b62314d1c8dc1c0d1215ae36b280d50579d451fadfdf94","sha512":"8242d373a90ecada58f2bf17ad02298e61fbf960f5eb8f0b166780de9b97bb3dfb0c4f0bb3399ca9fed328c614ded4718a34eeb7c5a2004098d3dceaf81711a8","ssdeep":"1536:5sHFDzgw1dm3WWHXWtvyDEAdv7/0TD35VH2P/CfppTP4flXW+W66:igxWWHBtdITD3UC/gflXO66","tlshash":"d0c32c025b892564cad41936c4efcfe74bb3dddd5d2802864ac226450ffcfa2d6223e9","first_seen":"2023-04-15T15:59:13Z","last_seen":"2026-07-24T21:38:52.51418Z","times_seen":209,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}