{"report_id":"283f164c-8aa9-4732-ab11-507ea940c6f3","version":6,"status":"done","tags":[],"date":"2025-09-21T23:28:29Z","url":{"schema":"http","addr":"jitorpcvalidation-4fd.pages.dev","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"title":"Blockchain Rectification"},"submit":{"url":{"schema":"http","addr":"jitorpcvalidation-4fd.pages.dev","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.46.213","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T23:28:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-21T23:28:08Z","timestamp":1758497288,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":37864,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-21T23:28:08.088318+0000\",\"flow_id\":797418828872834,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":37864,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"jitorpcvalidation-4fd.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":933,\"bytes_toclient\":3291,\"start\":\"2025-09-21T23:28:08.081026+0000\"}}"}],"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"phishtank","sensor_type":"Blocklist","title":"PhishTank","description":"PhishTank","scan_date":"2025-09-21","alert":"Phishing - Other","trigger":"jitorpcvalidation-4fd.pages.dev/","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-09-21T22:12:37.870013Z","alert_count":0,"request_count":2,"received_data":815356,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"jitorpcvalidation-4fd.pages.dev","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-09-21T23:28:30.365703Z","last_seen":"2025-09-21T23:28:30.365703Z","alert_count":25,"request_count":12,"received_data":306281,"sent_data":6117,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-09-21T23:28:08Z","timestamp":1758497288,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.18","port":37864,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2025-09-21T23:28:08.088318+0000\",\"flow_id\":797418828872834,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":37864,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"jitorpcvalidation-4fd.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":933,\"bytes_toclient\":3291,\"start\":\"2025-09-21T23:28:08.081026+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-24T10:52:03.335954Z","times_seen":46079,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"22b3711f2a60c020fb164a3d8a76e819","sha1":"e5377a58a7e197bc113dac654b015c80f353bc9b","sha256":"a49775df689fd112455521a48e50ce0d382d118938519691f8ce2c6989a63caf","sha512":"0a4bd0fcb790bb97e3b8c243ce8261dafe6dd0817919686c3d1f9ada733c8ca4129235664b2870cb41badc43e1d06a1576c4324477bfd5dc25e311c3578a8dd9","ssdeep":"","tlshash":"e41174ab62b2173412b718661b0bb7a9327240531188de083f4d83519fb8b9b94b3bc7","size":1041,"data":"","first_seen":"2025-09-21T11:41:07.025463Z","last_seen":"2025-09-21T23:28:34.419825Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff5992264c64bfde0f34d966e334d8c1","sha1":"6fad09fbe25fad6fec535d7722769d3d84ab6198","sha256":"2aef174931dee79c46048d965a85a8c002317eb941b0c5591d671e59e7499e5d","sha512":"9a2ff1aa50d913828ca7037a49f5101a731123b2725a30f85d938bfb0e09021d97b449dcd42150b6681acdf1f73ae1a60cdc1d639b11ba9e5b1a4540d9a61e7a","ssdeep":"192:3fON3Oj9enSFBYBOBKBBCeIC9O8j7M6HUbrezSljuz6:P0SFR+ij60byzsiG","tlshash":"afd1525824b731bb45b7a9bf7b8b6146363500073006ee953e1c83980f9993696f37de","size":6413,"data":"","first_seen":"2025-08-22T11:31:18.147735Z","last_seen":"2025-09-21T23:28:34.421956Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:08.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 04:42:37 GMT","end":"Sun, 26 Oct 2025 05:42:34 GMT"},"fingerprint":{"sha1":"A9:2C:36:C2:5B:79:EB:33:93:88:54:08:DE:EC:77:65:7B:80:68:B3","sha256":"18:96:B7:DD:E9:B4:31:CC:9A:C7:1C:44:AF:F5:7E:C1:6C:25:F1:75:D6:6E:9A:7E:86:AC:B9:F8:49:97:6D:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 21 Sep 2025 23:28:08 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::w9x2m-1758495898396-17c06299dc75\r\nvary: accept-encoding\r\nage: 888\r\ncf-cache-status: HIT\r\ncf-ray: 982d56552ef0a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T10:50:44.833269Z","times_seen":17500087,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":36,"dns":20,"connect":1,"send":0,"wait":5,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/src/main.js","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:08.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /src/main.js HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FN5IPdOCzgvzVOlnA%2FhdNX5eF25p6GYDbS7swCFJKDTOI0vk2UPrXTRX6OHlu%2FgliJZcVT4qyMKVgr7jDHxDjVx8fHLnAnlvkMhdXyYqImSbBx713To7HSBPsI9mSuKULWE%2FE2Ttc1VJN8CMUeIbrSCO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5654ffaa5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2072\u0026min_rtt=449\u0026rtt_var=3110\u0026sent=18\u0026recv=22\u0026lost=0\u0026retrans=0\u0026sent_bytes=11400\u0026recv_bytes=1436\u0026delivery_rate=11505107\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=3a49170b949744f0\u0026ts=422\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T10:50:44.833269Z","times_seen":17500087,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:08.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 28 Jul 2025 04:42:37 GMT","end":"Sun, 26 Oct 2025 05:42:34 GMT"},"fingerprint":{"sha1":"A9:2C:36:C2:5B:79:EB:33:93:88:54:08:DE:EC:77:65:7B:80:68:B3","sha256":"18:96:B7:DD:E9:B4:31:CC:9A:C7:1C:44:AF:F5:7E:C1:6C:25:F1:75:D6:6E:9A:7E:86:AC:B9:F8:49:97:6D:B4"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:08 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::f7qtx-1754703953616-47530b9ea371\r\nlast-modified: Sat, 09 Aug 2025 01:45:54 GMT\r\nvary: accept-encoding\r\nage: 1972464\r\ncf-cache-status: HIT\r\ncf-ray: 982d56554f05a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-24T10:52:03.335954Z","times_seen":46079,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/favicon.ico","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=S%2FygMBxcaL9J%2BJDyupCfDREj8DZmOMp8XYC5Kgv%2B5fqNwjvYebf%2BwxbSE9dkJ%2FjL%2F%2FALVrEn1UrLecGL9qUiX9xXHWbUJIJzD9F4R4%2FHJmknr0%2Bet3rd2JmPbzqrAkpXfjUwJTsdG%2BFqM5ANKXVY3bs0\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d56595aaa569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1472\u0026min_rtt=493\u0026rtt_var=686\u0026sent=347\u0026recv=228\u0026lost=0\u0026retrans=0\u0026sent_bytes=231375\u0026recv_bytes=15179\u0026delivery_rate=17933743\u0026cwnd=124800\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=876\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39500,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (304)","md5":"9e449a79c8c87b2ca45ed39edfda34b0","sha1":"0705e0d0f6fc1ce5a92c04a66d2e8a7c05358dab","sha256":"8c802408c508ea239b97bfe1fbe574e9c6258cadd0cb6ceebdef42aa476f6089","sha512":"19fc136ce316b081ba4e10f9c0ca0b42a088b0460d7e5e9a5e4c10ea06dea326885d631bb48a194f6f3a6f000506bc896f6e62f51d25700882f533ff861df8c9","ssdeep":"384:sue1kLSC+72aY6Lc5xRisr37/zyt4kBaggHTNrXhy0vuJLhu1UwUDH00SFR+ij60:xe1kLSffgxRisr3vp0E+ij60byzG","tlshash":"9d03829016f319ff10ab51b57293372e7aa8c557c52b8c4c73ac52d21fc3c49ca6b269","first_seen":"2025-09-19T05:48:53.786271Z","last_seen":"2025-09-21T23:28:34.397754Z","times_seen":7,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-21T23:28:08.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DEOFYr3hf1Mae3kQBJPfFVSMPwdEY0DYY7Xd1Ykce2oqr7olMTf1cOHlCAVzhzXPKE%2FGAS5DL3fEGpJxsY1CgwkiXKq%2FxbZmPh5DUd1tfK9FQWTqqKef18V4RregSPgNQTJxbn%2BB2BYdpvuHcMLPPhsT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5653ced15696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5642\u0026min_rtt=512\u0026rtt_var=10272\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3046\u0026recv_bytes=1305\u0026delivery_rate=6734883\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=3a49170b949744f0\u0026ts=246\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39500,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (304)","md5":"9e449a79c8c87b2ca45ed39edfda34b0","sha1":"0705e0d0f6fc1ce5a92c04a66d2e8a7c05358dab","sha256":"8c802408c508ea239b97bfe1fbe574e9c6258cadd0cb6ceebdef42aa476f6089","sha512":"19fc136ce316b081ba4e10f9c0ca0b42a088b0460d7e5e9a5e4c10ea06dea326885d631bb48a194f6f3a6f000506bc896f6e62f51d25700882f533ff861df8c9","ssdeep":"384:sue1kLSC+72aY6Lc5xRisr37/zyt4kBaggHTNrXhy0vuJLhu1UwUDH00SFR+ij60:xe1kLSffgxRisr3vp0E+ij60byzG","tlshash":"9d03829016f319ff10ab51b57293372e7aa8c557c52b8c4c73ac52d21fc3c49ca6b269","first_seen":"2025-09-19T05:48:53.786271Z","last_seen":"2025-09-21T23:28:34.397754Z","times_seen":7,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":207,"dns":2,"connect":1,"send":0,"wait":45,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"phishtank","sensor_type":"Blocklist","title":"PhishTank","description":"PhishTank","scan_date":"2025-09-21","alert":"Phishing - Other","trigger":"jitorpcvalidation-4fd.pages.dev/","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/coinmarketcap-1.svg","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/coinmarketcap-1.svg HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"05ffae4845adc5fff872ae2621e703ff\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gVMT9Vw%2FJFVmI5aJIJux%2FxZ5FQZKa9H19vBkljIF%2BZ%2B%2BZ%2BcuGHtRI4JKuyVVN9VoPfmrZLU2h7xeD9ZSlvV3jwzYWM3N0svpIJLkBIIYJ6VRitG6%2F1KWFolVaZ4CBJ14DiUWIkkRsvDPAEmGz4oLvnPM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5658ca78569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1941\u0026min_rtt=493\u0026rtt_var=1084\u0026sent=163\u0026recv=217\u0026lost=0\u0026retrans=0\u0026sent_bytes=18785\u0026recv_bytes=14386\u0026delivery_rate=1891487\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=791\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":800,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d35425d96e8add93ad126c66a81997ae","sha1":"b28016af12a10741ebb7366793cee671ed0eeaa3","sha256":"580801084de0ff1916b2ddda9e9dea628501abb66666695eefa66a5aedb5f363","sha512":"2815c7186bf41bd1a245c36c92aa42a90b63d331d5138fb15e7af1efae72071999c55b9e483a79f7f107042ca4886d802238113f4be1db9cf81b178b99379140","ssdeep":"","tlshash":"52014192c584823cabc74678cd3a0a903b0daaec3210b7f56aaca720b1117c0e51783e","first_seen":"2025-09-21T11:41:07.005769Z","last_seen":"2026-06-21T00:13:56.766498Z","times_seen":21,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/wallets/Exodus.svg","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/wallets/Exodus.svg HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"863972dc872f0b465a7488ab427b2534\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fnaIsun7oL%2FTfZXKEwFdfdDjOqJ8BuyfkSHyJqzvDnBwMyIDgaI23t0W72H0xkp02UIFolJz%2FZZE003XvE8mrht5OPaLLj%2B7BVpDXLoIUfbc%2ByweNwVFUgpYAt54wenUIl1iNYxd%2F4WscrxCioqzoD0a\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5658da7d569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2252\u0026min_rtt=493\u0026rtt_var=1364\u0026sent=152\u0026recv=214\u0026lost=0\u0026retrans=0\u0026sent_bytes=12744\u0026recv_bytes=14254\u0026delivery_rate=850810\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=787\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4423,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fbb64594c5b1562d21018d9994edd7b5","sha1":"44e5a580089acf0b0d89c2f0ddfe6ced96094d58","sha256":"78ef34be764e46bd0646a2cf98c18dc1c746698ecff62549af1cfea61bc90732","sha512":"0aa854e24f7827bd877ee8f4a3b96fac447c11498fa4ed147fdc3986317252d071374752a535b818da80f87dd89900ed081753562058bc7517aa9caef1412ec9","ssdeep":"96:tPFm+lIPK9B8hC3kud3bwB0chQTiZ7g2sFifKf8UfGR4W:rm+P9+C3kud3bw7APD0ff","tlshash":"c591349eb7acac67e584d6adda194474629e41f7c5c152f0c08c7f0f70658d61f0e6c2","first_seen":"2025-09-19T05:48:53.742222Z","last_seen":"2025-09-30T16:19:51.777317Z","times_seen":10,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/coingecko-1.svg","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/coingecko-1.svg HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"531870fc4a5845b86e57f7f55e5a20a6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=a2FPnBDiDLeDJ74Qzrck63CT8eE8Y%2BW6UqeWp4VFLJ9oebXVOGjmW%2B5tqLGNv3cMSd1IjfPLowuqb8eWQO%2Fe3HdmjIkUW2tebnEZvIh7N%2FSSWWbcIGiQyrbN8fd618%2BHGXvU2pjly%2FAEmS%2FlB6y8pEmA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5658ca75569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1941\u0026min_rtt=493\u0026rtt_var=1084\u0026sent=176\u0026recv=217\u0026lost=0\u0026retrans=0\u0026sent_bytes=30785\u0026recv_bytes=14386\u0026delivery_rate=1891487\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=793\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3796,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d7bdd647066db13da432af9022c4c79","sha1":"c69a701d0cb3ed470ac1e2562eafc6e4c41480f2","sha256":"b9b872cae8c8f6938a416dd4b5ea06d000193c488c9c09be79801ce238216c6f","sha512":"9e5d2d85584cac50e1d2ecf69abb9ff47a8fc73ae80a9d25d7002caca586693bfa1697e4e569f32cdd40082c88462cd0d23a2b1b9e40e2a22b71395c9feaae29","ssdeep":"","tlshash":"c47123e2e65e22bcaa4b836046395260776f68fc3312575c427cc7f1b6477aec5824b8","first_seen":"2025-09-21T11:41:07.016316Z","last_seen":"2026-03-29T12:33:16.069253Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/wallets/solfare.svg","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/wallets/solfare.svg HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"a33f44e17829d5f4420f4effb1fc2b25\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=o%2F0hFBsmbC87VMqJ7qhxjd50LIMA2oiCRXRnTy8FmaVBeM9QnZLFTXNW1%2FqHSLUdWvhmW9zhy%2BJIb%2F3%2FvAiS67h4M9yuvc9bfiWjycimTZozAUu9Ix0kLXTHMXUmlRD5ES0pTZoSK70nUFRT87rscGzC\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5658ca76569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2133\u0026min_rtt=493\u0026rtt_var=1260\u0026sent=160\u0026recv=215\u0026lost=0\u0026retrans=0\u0026sent_bytes=17089\u0026recv_bytes=14298\u0026delivery_rate=1888419\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=790\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1643,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7a31f3adb16542bce2531fe77dbff6c","sha1":"faf72058a5e1761d39a100362596f00fcf33e364","sha256":"792b1985a75726b03655429e8debfa49c63452c44a18c487ba22ef1eeb072afe","sha512":"5d7e34873ec9dc4c2f5668a6f922c9b04505e2e6aa0f2ac6c54e59bafabbc76a9af55e3b1dbfda301e87d883eb282ba39bc41a86dbc99cec68d6c1a2b1e0b240","ssdeep":"","tlshash":"5e3183ed1739c9e8af4ac2e6fe400554611331b787e48534c7c43f5c3894229adc79a4","first_seen":"2025-06-02T11:47:32.65005Z","last_seen":"2026-07-09T00:39:26.109048Z","times_seen":34,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/kraken-3.svg","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/kraken-3.svg HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"ee80ea36693a9697059922efe5cbb191\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uNykdJHrapLDt0qYc8Fy%2FLG9OyjEarIYsPcRz8Wet8xDuGK54DSe2AKewYJ8lU3CMrufOhNt4v2f%2BbeLZkwX%2Fw2WAhmh0HO6S88K1DbV%2FBoNKLyQt%2BsWynOXP98lYWUHsNDAud3OqNzgzWibXNMnWWrs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5658ca77569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2383\u0026min_rtt=493\u0026rtt_var=1468\u0026sent=149\u0026recv=213\u0026lost=0\u0026retrans=0\u0026sent_bytes=11168\u0026recv_bytes=14209\u0026delivery_rate=817615\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=783\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fc22bbe55e558d21baaa112bf7be6a2","sha1":"b17727daa7f5ace08e7e068c3e093a9a6c495d74","sha256":"d3ebc56e94abc742d7d37e5fae097249892e1d52dd99c6a833df20c6bd5af8fc","sha512":"78a9a18d1a0f4a9e9510cfa3739ddeb0c3b7b423be59effe86e26373b4924be52754f0a9c7acc4b4f293f192fbffd4c4f9775147d46dbe390bd96c1aada31150","ssdeep":"","tlshash":"4e21fe5ab4660630ac4502acc839d5e43e3b60ddf30a33bdd176d7b1b256e66899059c","first_seen":"2025-09-21T11:41:07.008967Z","last_seen":"2026-06-21T00:13:56.775808Z","times_seen":14,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/bittrex.svg","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/bittrex.svg HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"e004bb05cf6c9443e0a598f44732e692\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=EpbVOaJkCpNAz4VDkpowJEZckaM0MBGUtN4PcwhN3WvJKAyoaVGkxCZipofUbeMlI7ysMzaF658JKSgZgKXsKu7k7kGNKfLJn%2BeRfAEQ0YZzIGnVAagDQ7cGz0Mm1L51HNLkInA7zqXBxCHBzEKx6Ngj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5658da7b569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2252\u0026min_rtt=493\u0026rtt_var=1364\u0026sent=156\u0026recv=214\u0026lost=0\u0026retrans=0\u0026sent_bytes=15014\u0026recv_bytes=14254\u0026delivery_rate=850810\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=788\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dda1c1ed0da878c441bdc0f9f0651048","sha1":"0f24cb46d470d691629947f0090dcced7934481d","sha256":"4e0a1fca7d90039f90cb652c6c13cf51632826ae3137b489b4f4d76b93965466","sha512":"ea48b5d945c33b5c1913bc55e3a0f74a2198450fe605ecb829812a7b6d4c5343e023f978911d32e0d85f6bacc36604ef60bca6c9fb4ee03ed332e6ef4fcd72af","ssdeep":"","tlshash":"49d02b5af5470c18eb4c044d92e86893603b2cc5e39ac19e94542295f185ac5b8760ec","first_seen":"2025-09-21T11:41:06.992747Z","last_seen":"2026-06-21T00:13:56.771102Z","times_seen":14,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/wallets/jupiter.png","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/wallets/jupiter.png HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 200124\r\ncf-ray: 982d5658da7f569b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"07a31aafc24cf4a706e1b491aae9e6aa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k%2FtOLCEMbHACe%2BKemuepsbHiCJbsfJGgD%2F%2BI39LiEhJHNfiWbOVpW80JmtRwsMZ31OMt9h%2BfiM92l9TgfDqyBhbCSQt2nv%2FHIcb48Ek2mOQF8W25XJLV%2FBSuLZNULcjIlPc0PJ6TfRI5bLrKCy%2BpzDUU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1941\u0026min_rtt=493\u0026rtt_var=1084\u0026sent=169\u0026recv=217\u0026lost=0\u0026retrans=0\u0026sent_bytes=23019\u0026recv_bytes=14386\u0026delivery_rate=1891487\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=792\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200124,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"23636477a478a0b9ebd922b2a7580d80","sha1":"001c78539f501718ab2b5f3583b82356a55defa6","sha256":"3026df02a2c26b99402df33781b68f1a86965858dd77693b0bf2d1d7539fe3bc","sha512":"6f5b065a3771beb485ff03d71f651436230084cba5410ba90df2da306b0c2683b793effe31a2d3c53ae2f563e42e24ec9ff762f840aa76e3d198661e0ad1d6b6","ssdeep":"6144:82pgBm3qqN4FA/Lp9ubEzxUt3O2mWwPWcW4:82JH9kEzxAO1W4","tlshash":"1014021a8925fde7e2e080bdcc3c1bc029a49df90a5b73dbdb74ea514c5ba479443239","first_seen":"2025-09-19T05:48:53.817396Z","last_seen":"2026-07-22T20:00:28.280119Z","times_seen":52,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/wallets/Unstoppable.png","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/wallets/Unstoppable.png HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 2168\r\ncf-ray: 982d5658da82569b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b679be29e871d0a703916780e6cd5712\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tK979x8EQE8ijqRD6qnlWZYlfB%2BCecRZk5025vvMMOREt4C%2Fju6xGhExY2u%2FBzwXfyKBce9SLrwb5vjpn2Iy1nc9q%2FAk20qg7pHStNR1goTZZflQpYb1IMFrdiNhkpueKiRE98xk6CIMwkpkB1DYoH4y\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1941\u0026min_rtt=493\u0026rtt_var=1084\u0026sent=166\u0026recv=217\u0026lost=0\u0026retrans=0\u0026sent_bytes=20058\u0026recv_bytes=14386\u0026delivery_rate=1891487\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=792\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"ccc77be99e6034ae64dde5971172eebf","sha1":"a9daded09f441f09b8dfb281d13bb58e7361fba5","sha256":"2eb2219ed94025d65a737ebfdcda594138b4e2f2f6150a53ab8a76d7c8860b83","sha512":"e18e2225864f82bd5805fb1bb0dd96be48dd2cd7294792cc681708686eb6a0d648a0526e7bcb8fe960af07c798d8eae7121f431692c44bc4987109ebd0a9e70d","ssdeep":"","tlshash":"43415ab39183c4a149d1295ad6e311ed3baaad0251b6a8a3347c30586e8937dc0adf09","first_seen":"2025-09-19T05:48:53.744995Z","last_seen":"2025-09-30T16:19:51.771356Z","times_seen":10,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jitorpcvalidation-4fd.pages.dev/images/salt-3.svg","fqdn":"jitorpcvalidation-4fd.pages.dev","domain":"jitorpcvalidation-4fd.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jitorpcvalidation-4fd.pages.dev/","date":"2025-09-21T23:28:09.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jitorpcvalidation-4fd.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Sep 2025 20:30:07 GMT","end":"Sat, 13 Dec 2025 20:55:48 GMT"},"fingerprint":{"sha1":"41:1C:D0:B3:12:76:0A:22:78:81:84:A1:32:3E:3D:23:F2:96:64:C5","sha256":"37:29:4B:EE:CA:F0:EA:23:2F:8A:18:C5:A0:C4:30:71:23:D4:27:A8:74:75:B2:7A:0B:83:54:A8:80:0E:D3:0A"}}},"request":{"raw":"GET /images/salt-3.svg HTTP/1.1\r\nHost: jitorpcvalidation-4fd.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jitorpcvalidation-4fd.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 21 Sep 2025 23:28:09 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"c86af79054c303e3d0f684ecab27e7b4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yOecRVLtKTuZ5QOdMaOMMOI%2F8bcDFJZEkgmIAUOifwLp0uO0EoJRnWW51JJ6RiIZ1f%2FV4XbqljeHNMuh4rl%2BoLEvKya5RFzcLvGTgYVCrb8CYP9yZDNfmW%2B6asotGq1O1I4XaGnfOjKVCkfLUB7IdnfF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 982d5658da7c569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2252\u0026min_rtt=493\u0026rtt_var=1364\u0026sent=158\u0026recv=214\u0026lost=0\u0026retrans=0\u0026sent_bytes=15990\u0026recv_bytes=14254\u0026delivery_rate=850810\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=99975e3cfa3a92f8\u0026ts=789\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":441,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fd2b01bd62d5dfa4f8d53747b3a6628b","sha1":"4d31cb3fa9bf5335f525d6ddad66b872a8eb1859","sha256":"103c19e17a7dbf769afbd7efc8372c2093fecf8a9990d1892e13ccb466efffad","sha512":"a2376958f53a8e9f005735c7991c22ab27a586debc5ef5b16f78b823ffc77c54e7c0e026e99e5a66720ef74adc5667e10a481d598cd873e9ccc202366a2522b1","ssdeep":"","tlshash":"abf0237bc21e8c07fa5bc364d8b4f464206c2096c0d08170c8c02f5b20540d32d0c390","first_seen":"2025-09-21T11:41:07.012091Z","last_seen":"2026-06-21T00:13:56.776751Z","times_seen":14,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"jitorpcvalidation-4fd.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}
