{"report_id":"2ab63863-9827-416b-8b29-162ac4f522b1","version":6,"status":"done","tags":[],"date":"2025-09-05T04:41:01Z","url":{"schema":"http","addr":"alljb.zip","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":0,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"alljb.zip/","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"title":"ALL JayBee - Giant JailBait collection. Fresh HQ clips/fotos!"},"submit":{"url":{"schema":"http","addr":"alljb.zip","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":0,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-10T04:41:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"alljb.zip","ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":5220864,"first_seen":"No data","last_seen":"No data","alert_count":9,"request_count":9,"received_data":291028,"sent_data":3870,"comment":"","tags":null,"fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":26670,"sent_data":526,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-03T15:11:16.573868Z","alert_count":0,"request_count":5,"received_data":190135,"sent_data":2716,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-09-03T15:53:48.840838Z","alert_count":0,"request_count":4,"received_data":81376,"sent_data":2016,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"alljbads.live","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-18","domain_rank":740360,"first_seen":"2025-02-04T21:43:17.003953Z","last_seen":"2025-08-18T17:19:45.634205Z","alert_count":0,"request_count":16,"received_data":82324,"sent_data":9271,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jimperial.top","ip":{"addr":"103.109.101.94","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"Hong Kong","country_code":"HK"},"domain_registered":"2019-12-03","domain_rank":430368,"first_seen":"2020-02-28T01:53:52Z","last_seen":"2025-08-18T17:19:46.338737Z","alert_count":0,"request_count":1,"received_data":3707,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-17T22:48:58.861051Z","times_seen":332735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/functions.js?ver=1","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c22c7caaa9c3697e91ac035a0b3ed6e5","sha1":"61a87cc0c843ffa73b3210ef3b9e20886a1bf9c3","sha256":"ee5d738d637e6ae6e5f7683fa41aadc91e1b9ff9e722d474f2192c66dc955925","sha512":"e71b9299a61d03c7a28623f342441a9942ce6f0356799b94156dfb965d6584fda812503544c0d83580934596c57a5474402639a3fd6009e35b2f58e46b0b0ac8","ssdeep":"","tlshash":"8b21cc86e2ea2a21207f7170cb3f664e325401919bd75c0688f949b4fcd927e97e2c6c","size":1323,"data":"","first_seen":"2023-03-08T15:16:00Z","last_seen":"2026-04-11T09:23:02.309347Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/jquery.min.js?ver=3.7.1","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-17T23:23:25.305591Z","times_seen":720675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/jquery-migrate.min.js?ver=3.4.1","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-17T23:23:25.290891Z","times_seen":670057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"68b329da9893e34099c7d8ad5cb9c940","sha1":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc","sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","sha512":"be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09","ssdeep":"","tlshash":"c700000000000000c00000300000000030300000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-17T23:22:29.403806Z","times_seen":189412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-17T22:48:58.861051Z","times_seen":332735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-17T22:48:58.861051Z","times_seen":332735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-17T22:48:58.861051Z","times_seen":332735,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"alljb.zip/","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-05T04:40:40.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:19 GMT\r\ncontent-type: text/html\r\ncontent-length: 28454\r\nlast-modified: Tue, 02 Sep 2025 17:39:40 GMT\r\netag: \"68b72bdc-6f26\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":28454,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9462)","md5":"b910c014147b925a01776bdaabd7c5f4","sha1":"8c1bf5ad047419f021532cec10622dea1bf2f5c1","sha256":"48881421b259fed061fd71270d3ba97bf3b3673f630a9fa87df44e29ae7ef727","sha512":"719065ececa41c22c6ee339e584b97944209ca63a7e7068089ed95e3fbf6a33591bc61d0658d59bd8b7cd77b17e631552139b5e87b57419172db1b978e2cd04e","ssdeep":"192:/QqRqWRXdqZsTaAKa/qJVNslQCfEGHRmy4kWP5ikZFSZJuCcDuG772I7MImbcXDf:Io3ZdqZUaAekWhikZFQa725kxZzoCj","tlshash":"5bd264f684d8703bba4eb7ac9155b228a6e68151cf006a6133fd7198df45fe244f324e","first_seen":"2025-09-05T04:41:06.795974Z","last_seen":"2025-09-05T04:41:06.795974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":108,"dns":43,"connect":27,"send":0,"wait":54,"receive":3,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=PT+Serif%3A400%2C700%7COpen+Sans%3A400%2C400italic%2C700%2C700italic\u0026subset=latin%2Ccyrillic\u0026ver=1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"05:AF:87:21:D4:6B:A6:86:ED:A7:D2:07:92:06:E4:D4:79:84:27:E8","sha256":"F6:EC:75:67:99:66:34:CC:0C:0F:9D:D7:8B:6A:04:94:98:0C:7B:B5:47:E2:47:37:A6:F8:E2:08:99:72:AB:BE"}}},"request":{"raw":"GET /css?family=PT+Serif%3A400%2C700%7COpen+Sans%3A400%2C400italic%2C700%2C700italic\u0026subset=latin%2Ccyrillic\u0026ver=1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 05 Sep 2025 04:40:40 GMT\r\ndate: Fri, 05 Sep 2025 04:40:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25984,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"3795a5d32e1f510f00ffab407efc6a33","sha1":"9aecee35b55c6514707f47b7be173d11f72dc924","sha256":"025862198492646b296deb539e8702a19d88cf4839b7a6bde24b5a06182a4245","sha512":"3c7392b611c961d5646594fb05af26219fb7521d9b2027c3a205f61ac377c4454756e7c4ca80ee607a2c14efb75d565910dc5af4a30781945b0f777752cf8615","ssdeep":"384:+wOEzFt0rvVqY49mnjyJO9G+tFEvQqY49jnUh2GqY4xl5qY4nuV:4FVIo8Va6hh","tlshash":"87c21c91042b544066436dd233ef3e30ee0fa2257044d076abfd9b8aeedad65a3b435d","first_seen":"2025-09-05T04:41:06.799693Z","last_seen":"2025-09-12T02:56:18.714748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":82,"dns":0,"connect":20,"send":0,"wait":33,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/functions.js?ver=1","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET /functions.js?ver=1 HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alljb.zip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1323\r\nlast-modified: Sat, 30 Aug 2025 13:41:16 GMT\r\netag: \"68b2ff7c-52b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1323,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c22c7caaa9c3697e91ac035a0b3ed6e5","sha1":"61a87cc0c843ffa73b3210ef3b9e20886a1bf9c3","sha256":"ee5d738d637e6ae6e5f7683fa41aadc91e1b9ff9e722d474f2192c66dc955925","sha512":"e71b9299a61d03c7a28623f342441a9942ce6f0356799b94156dfb965d6584fda812503544c0d83580934596c57a5474402639a3fd6009e35b2f58e46b0b0ac8","ssdeep":"","tlshash":"8b21cc86e2ea2a21207f7170cb3f664e325401919bd75c0688f949b4fcd927e97e2c6c","first_seen":"2023-03-08T15:16:00Z","last_seen":"2026-04-11T09:23:02.309347Z","times_seen":91,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:45.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://alljb.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 03 Sep 2025 22:51:37 GMT\r\nexpires: Thu, 03 Sep 2026 22:51:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 107348\r\nlast-modified: Wed, 28 May 2025 17:52:25 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-04-17T23:33:12.187523Z","times_seen":31014,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/jquery-migrate.min.js?ver=3.4.1","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET /jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 13577\r\nlast-modified: Sat, 30 Aug 2025 13:41:28 GMT\r\netag: \"68b2ff88-3509\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-17T23:23:25.290891Z","times_seen":670057,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://alljb.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:39:08 GMT\r\nexpires: Fri, 04 Sep 2026 09:39:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:06:59 GMT\r\ncontent-type: font/woff2\r\nage: 68492\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-04-17T22:49:36.722641Z","times_seen":51111,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":161,"dns":7,"connect":12,"send":0,"wait":8,"receive":3,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018","date":"2025-09-05T04:40:41.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://alljbads.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97a30cca9bb50883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-17T22:48:58.861051Z","times_seen":332735,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":12,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872","date":"2025-09-05T04:40:41.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://alljbads.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97a30ccabbd50883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-17T22:48:58.861051Z","times_seen":332735,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/cdn-cgi/rum?","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018","date":"2025-09-05T04:40:41.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1074\r\nOrigin: https://alljbads.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://alljbads.live\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TYxe5TsP5%2Fc4d%2BOy0qaz%2F9XG%2FQS1Ej1%2Fnay4STk3UjG16NH4hjfXJYSXNoaViom%2BLhJzdDSvrUQpD3l6tSMCYfw0fMHqv4M1q1nn68g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 97a30ccd4d721525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T23:23:01.937983Z","times_seen":13878168,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/cdn-cgi/rum?","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872","date":"2025-09-05T04:40:41.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1074\r\nOrigin: https://alljbads.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://alljbads.live\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F9%2FTVInzObLTPhdkb4q02lluXF5UZ3NjlVd2a5F0smJx6SKmdGt9tjM5r3r4QcgECZV2YJove%2FmF27cV5MIssD8%2FVvhG2dL%2BY%2FRLD%2BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 97a30ccd7daf1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T23:23:01.937983Z","times_seen":13878168,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/jquery.min.js?ver=3.7.1","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET /jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:19 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 87553\r\nlast-modified: Sat, 30 Aug 2025 13:41:25 GMT\r\netag: \"68b2ff85-15601\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-17T23:23:25.305591Z","times_seen":720675,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://alljb.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 04 Sep 2025 09:39:08 GMT\r\nexpires: Fri, 04 Sep 2026 09:39:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 May 2025 18:06:59 GMT\r\ncontent-type: font/woff2\r\nage: 68492\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48332, version 1.0","md5":"5734e133a619a6ae6ee21a6c00a95eba","sha1":"57c0ac17302d07bd4f968240098afe5ed53d4ad2","sha256":"d7a547581722aa055a7fb5b9912aebf3f3e928e1db3e5af9e54cf158cb4c4c4a","sha512":"a881b689d0990693ef7feb11d55155a8fa63f94e870bfeb5c61edbb9a7891990bb920147b05d371d302f91c0562fb87f46d334afd70d1cba36228e41dcd5ec55","ssdeep":"768:VRQzlrtlSlX2HnXb438KRr2FGTI8pGRY+rbma2NHhd37ohZ4Dge99ZBN62GcC7jr:mlrtlnL68gqF98URY+rbmd9XoAD/r42+","tlshash":"2e23f1de20f58f0bf84693f864eb9562506f706877721aa6bee1c1b48e757033267520","first_seen":"2025-05-29T17:20:03.50604Z","last_seen":"2026-04-17T22:49:36.722641Z","times_seen":51111,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":101,"dns":11,"connect":7,"send":0,"wait":8,"receive":10,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/delivery/lg.php?bannerid=24\u0026campaignid=2\u0026zoneid=2\u0026loc=https%3A%2F%2Falljb.zip%2F\u0026cb=cac03854dc","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018","date":"2025-09-05T04:40:41.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/delivery/lg.php?bannerid=24\u0026campaignid=2\u0026zoneid=2\u0026loc=https%3A%2F%2Falljb.zip%2F\u0026cb=cac03854dc HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FV52mnKyrVesHsThFH5ehkX47Lm2%2BHt%2BjGlBao3AXa3D%2BYXQvFCO3YajVqIHpWJNSTZnQI6qQGy1%2F0MVvx2%2FhFMUdLG4uWlp6Y1GIWs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: OAID=01000111010001000101000001010010; SameSite=None; Secure; Path=/; Max-Age=31536000; Expires=Sat, 05 Sep 2026 04:40:41 GMT\r\ncf-ray: 97a30cca6ac01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-17T22:37:48.185893Z","times_seen":97457,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jimperial.top/topl.png","fqdn":"jimperial.top","domain":"jimperial.top","tld":"top"},"ip":{"addr":"103.109.101.94","port":443,"asn":206264,"as":"Amarutu Technology Ltd","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jimperial.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 14 Jul 2025 18:47:43 GMT","end":"Sun, 12 Oct 2025 18:47:42 GMT"},"fingerprint":{"sha1":"43:30:93:AB:7E:9A:F7:95:50:29:AB:7E:C7:A2:F7:66:2D:73:2B:4A","sha256":"87:FD:C7:F2:C3:2F:69:E2:27:4F:B5:57:39:67:3E:54:05:FC:66:99:F5:CC:AA:4D:6D:B9:99:CD:4F:B1:3B:E0"}}},"request":{"raw":"GET /topl.png HTTP/1.1\r\nHost: jimperial.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 05 Sep 2025 04:40:41 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 25 Jun 2023 12:54:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3473\r\nKeep-Alive: timeout=5\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 31, 8-bit/color RGBA, non-interlaced","md5":"979abce1b714b378e3e6b7ce1d7b66d2","sha1":"81f34390516044a0602e5fe4c422f19e1b0d7f2d","sha256":"733e6ac763fe405d689358693a695028063af3e1c48fcf52c9b9ba78c0caaa2b","sha512":"7974f50968c88565b16b6db8d96bdda2bb2587764d6e28ced6876c7b2d5cfc0e9f77fda9448554c09c78d1daf65478db0e92be0e0f330cc2a9982d252cad23d0","ssdeep":"","tlshash":"d7617df1995782184fc4e442398620cce547de03ad42fd5ee08ce47c302acb1db5f986","first_seen":"2023-08-28T03:58:51Z","last_seen":"2026-01-02T21:56:58.176962Z","times_seen":56,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":515,"dns":13,"connect":255,"send":0,"wait":256,"receive":0,"ssl":259},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018 HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T3FL%2FosaH2an2YocwEo3Vfd0HnXJRq0u4NCm%2FgmjNG03H%2Bb01biLp3C26A3cK5Mb4NjpxEF3U6VIEKQlCdpLwSQZ9lNNJs5eY%2Fc3\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=422\r\ncontent-encoding: br\r\nset-cookie: OAID=01000111010001000101000001010010; SameSite=None; Secure; Path=/; Max-Age=31536000; Expires=Sat, 05 Sep 2026 04:40:41 GMT\r\ncf-ray: 97a30cc6aa7856c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1609,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (726)","md5":"2232d959fca272388d75bc83cebf97b1","sha1":"8a401f2f01d526641a6b509309b3a9e2623242b0","sha256":"4ba4d2c491a8fef4240a5307fbfe429e4602766d54e88ea9fbbf077c38bfe8ba","sha512":"9ea2bbe7f25790f65814e13eaf8c5a8e1bcb10c6c4fef9a4b7cd1795d1e66f29c6552c8622055600f3a021aac5c2601b4e670b5e552107d9196b8290e5f7d5ca","ssdeep":"","tlshash":"b031c8bb4094612bd0438784d0e8bf896833d1df6ed4945077bb7761c45c26b893237a","first_seen":"2025-09-05T04:41:06.812751Z","last_seen":"2025-09-05T04:41:06.812751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":133,"dns":46,"connect":10,"send":0,"wait":430,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/favicon.ico","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alljb.zip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:20 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 15406\r\nlast-modified: Sat, 30 Aug 2025 13:41:10 GMT\r\netag: \"68b2ff76-3c2e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"fdb42d5e905356edf6c268db653492e6","sha1":"6da27785f6624204e0ba8ee623ac5ecde93d8f53","sha256":"7591196342e00f01705216038c46bba40f05063a32d99f68db8c456bb3c0f435","sha512":"6203ab56408c26417d5f599c978dcaea45e5655d6163cb7a2afb73dea1d6438e063af63a0e72f7f1f5c122907bc3dd0cccd3c51c9aff7a0b0a605816be040f21","ssdeep":"48:dLgUkdzbBAPWd+bVYFJWUypWV/YfmKVBRdKyK92Oonf2+q8ildWQITE/BiigHypr:dr2+N5YXWUyaKddKyKQnf2+q1CJE0a","tlshash":"076211816923da2ff8bcc3f308db1a48095aaf6b74e04f070449b3adc57b6357519a0b","first_seen":"2023-11-11T06:39:07Z","last_seen":"2026-03-30T23:39:28.861068Z","times_seen":17,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/delivery/lg.php?bannerid=2\u0026campaignid=1\u0026zoneid=1\u0026loc=https%3A%2F%2Falljb.zip%2F\u0026cb=530e8af624","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903","date":"2025-09-05T04:40:41.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/delivery/lg.php?bannerid=2\u0026campaignid=1\u0026zoneid=1\u0026loc=https%3A%2F%2Falljb.zip%2F\u0026cb=530e8af624 HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EiD2ZMLB%2BfZNXTZruThGGuMNaURvWs9iVuj7tp7yHEJByO28aBZnhYSu8REpaWswxXkPALtzpycAR0Mbp2QmLKh5SEMiBxklCW0odY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: OAID=01000111010001000101000001010010; SameSite=None; Secure; Path=/; Max-Age=31536000; Expires=Sat, 05 Sep 2026 04:40:41 GMT\r\ncf-ray: 97a30cca7ace1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-17T22:37:48.185893Z","times_seen":97457,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":425,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/style.min.css?ver=6.4.1","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET /style.min.css?ver=6.4.1 HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 110035\r\nlast-modified: Sat, 30 Aug 2025 13:41:48 GMT\r\netag: \"68b2ff9c-1add3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":110035,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57084)","md5":"99ab466e0866c823ae5db517d59cebd1","sha1":"5595a586cbd42b31377681b9d35293278d75d336","sha256":"698b89c0da3d319754d6a837b5e6d4e6a42dc402d9ffd7559b8c4cb29c644340","sha512":"d19932f64adbdb1286b61d472526fe0be92e5fcdbecf9df9c9dc607d46e26f8912c74294256f1a6b56d0fb14a774679407187eed011f4b5b7008981aa52f6df6","ssdeep":"1536:iLeJ2f9Zk2u5SOV+UQ3Zo/0kxhdRVrkQzE:iLeJgk2u5SOV+UQ3Zo/0kPdvQQzE","tlshash":"03b3405413f0dcf939fba73a5e5ee248a513aa41c64a6be7e076d190614ca490cf3b0f","first_seen":"2023-11-07T23:07:41Z","last_seen":"2026-04-17T19:20:49.372874Z","times_seen":8668,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/style.css?ver=1","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET /style.css?ver=1 HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 29607\r\nlast-modified: Sat, 30 Aug 2025 13:41:45 GMT\r\netag: \"68b2ff99-73a7\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29607,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (602)","md5":"54313e60497b6146c6f0b29399933c75","sha1":"1bc8773374b0ea3d59c3cdf883d72100b98d0702","sha256":"097458642eaa0d97c4ca695a08c0023284cbdb6ebdf772552d4669bbc2970cee","sha512":"79e0e84b7e3f9acbdd4ae5a70cc1c55f83fd71fcda2a17e373a45aa473dad1275f7952e617c2d3836506a2e65234a28e1e4c5ca2b585a8960283a4d8e52476cd","ssdeep":"768:GudCgra5Gn5PNRIV13ZLq3frAmjw5EJYZn6PoNQEqZXlnPC:GudJn5PzIV1hsr1+EJYZn7Nf8lnPC","tlshash":"d6d2b4136f503208b517f2b5fdb797ada3360211f74f54fab8991424c28db9892bb788","first_seen":"2024-05-14T00:29:04Z","last_seen":"2025-11-12T02:29:18.599101Z","times_seen":10,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190 HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTLr0iVXNg0ZKCl1ZwFK%2BoxdMDzXWvCwgbeSfTStFowZVMDzbuRo%2Fqr7ThVhIMKwlIxbyunAUyJoSTtYcesN73qJfqoV5dcqrNiE\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=6,cfOrigin;dur=424\r\ncontent-encoding: br\r\nset-cookie: OAID=01000111010001000101000001010010; SameSite=None; Secure; Path=/; Max-Age=31536000; Expires=Sat, 05 Sep 2026 04:40:41 GMT\r\ncf-ray: 97a30cc69a6b56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (716)","md5":"c381f38a98b6258c24931e4f2354246a","sha1":"b246c7316cc4d132a153d86a4eb34fcc24678ca3","sha256":"7c23956a8b381234a96bc8185a2475d40f53dbdeeb51d374e483774665218ad7","sha512":"28bddf35c4e0a0af511f3639f2db8a1063fdb2ad2706b3c8ae3b4649f5ad911e52c4024152f545ab7c9084cf9073e098c64ce8f01b933d5812ccb98effdab421","ssdeep":"","tlshash":"9c31ea760064e02be083d34460d5bf489cb7d2de2dc1e814779f2766c49d11f89313a9","first_seen":"2025-09-05T04:41:06.819682Z","last_seen":"2025-09-05T04:41:06.819682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":126,"dns":63,"connect":1,"send":0,"wait":435,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903","date":"2025-09-05T04:40:41.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://alljbads.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97a30ccaabd00883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-17T22:48:58.861051Z","times_seen":332735,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":11,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/delivery/lg.php?bannerid=11\u0026campaignid=3\u0026zoneid=3\u0026loc=https%3A%2F%2Falljb.zip%2F\u0026cb=566d477c7f","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872","date":"2025-09-05T04:40:41.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/delivery/lg.php?bannerid=11\u0026campaignid=3\u0026zoneid=3\u0026loc=https%3A%2F%2Falljb.zip%2F\u0026cb=566d477c7f HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kr0OyqGii%2BffpcR9tcnaKRtgF57sDoP8NGHllVhtBcrvSTD9mSsqKc45oR8g%2FgV7S%2FHlyeasg%2FZy%2B9wwNYsgdbQ53nk2uyfQsYcTJ00%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: OAID=01000111010001000101000001010010; SameSite=None; Secure; Path=/; Max-Age=31536000; Expires=Sat, 05 Sep 2026 04:40:41 GMT\r\ncf-ray: 97a30ccabaf81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-17T22:37:48.185893Z","times_seen":97457,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190","date":"2025-09-05T04:40:41.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://alljbads.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97a30ccaebfb0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-17T22:48:58.861051Z","times_seen":332735,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/images/1d705e7f496668f7b5a840e59366d5b9.gif","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190","date":"2025-09-05T04:40:41.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/images/1d705e7f496668f7b5a840e59366d5b9.gif HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 11209\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Dec 2024 09:41:12 GMT\r\netag: \"6763ea38-2bc9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 602623\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJIzE7i6Kn7og2Ogzxvn15B8yCp1XItSecMBN6ubzbOLSymMLYgLnXLITo4EnF%2Fd9Wn%2F9PP4gxlHfbDj3VsrS%2FASYeOfUWh%2ButLYCq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a30ccabb001525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11209,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 468 x 60","md5":"1d705e7f496668f7b5a840e59366d5b9","sha1":"c30be56dac7bb3ad76088a052170a085093bfa6e","sha256":"63fbcf0797f35eea04d83467bdf8f31b9bd46a31da09de36fcb07f58aa3d988e","sha512":"5497e0e6b5da8e1c7024f22b7e00ffdbf3730393b64c3ce2e9a2c0cb2729817fcf55ad72e85172eef2c843ec39b8a71a1ef425347b6339d0f2f3a956c004b582","ssdeep":"192:27GpHrM0Si33wJMuP9aXOgmG9EFk413Vyz6gXIvb9kgdgzhPD13Or6tRMWmZj:2MHg0SJxsXOgmGiZeUub/+uLRM","tlshash":"ee32be5ce06cb45489ac9644aad74c271d7769813ed7e1b0e1c8bbdab3249bca19fc30","first_seen":"2024-05-14T00:29:04Z","last_seen":"2025-10-07T15:52:33.358142Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/delivery/lg.php?bannerid=13\u0026campaignid=4\u0026zoneid=4\u0026loc=https%3A%2F%2Falljb.zip%2F\u0026cb=c9eb9fab3a","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190","date":"2025-09-05T04:40:41.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/delivery/lg.php?bannerid=13\u0026campaignid=4\u0026zoneid=4\u0026loc=https%3A%2F%2Falljb.zip%2F\u0026cb=c9eb9fab3a HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HzC4hZ1Rgpprctz55mkx7MbT1r%2BnFd%2BQFEubu%2B%2FooXcZImufwK5ZPiHV%2Bo6HtNuvYed8QmEBjih%2BY7MBfGhY66ip6tjoq2G0%2FDi2%2F08%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: OAID=01000111010001000101000001010010; SameSite=None; Secure; Path=/; Max-Age=31536000; Expires=Sat, 05 Sep 2026 04:40:41 GMT\r\ncf-ray: 97a30ccaeb271525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-17T22:37:48.185893Z","times_seen":97457,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872 HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uiebdYN4QmLTl8L6587R8Mo6BV5VzNIRLOBTmQuTA2oLVUeagW4UVmc7vaPHokIPw3U5WN3IO3R2L8zo1I5P7eAKAy%2FYq84vpW9C\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=431\r\ncontent-encoding: br\r\nset-cookie: OAID=01000111010001000101000001010010; SameSite=None; Secure; Path=/; Max-Age=31536000; Expires=Sat, 05 Sep 2026 04:40:41 GMT\r\ncf-ray: 97a30cc6aa7f56c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1575,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (689)","md5":"f6bb0828524c56b1bb60a1b55b670c7c","sha1":"909c1e94b20bf5af64e3985433ff6869890dbf12","sha256":"c95969984365686ab28e8eff5da6ad0317f921e7f9df4a3a72b831f8f5a18349","sha512":"6f323424e23c0ee5f40a30ae264f11b72127b9874d89a2c0d03b10e1a50ec8f0b4ec9b0612c50aa10d61e29e6091a167fa1f19167258e254e9ad729d9213a745","ssdeep":"","tlshash":"2b31ca6a40587027d043438450e9bf886977d1de29c5e4603baf7752cc5d55f8932279","first_seen":"2025-09-05T04:41:06.824811Z","last_seen":"2025-09-05T04:41:06.824811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":151,"dns":54,"connect":10,"send":0,"wait":439,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903 HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: 0\r\naccess-control-allow-origin: *\r\np3p: CP=\"CUR ADM OUR NOR STA NID\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V712iAiILCzZYW8MS5PfJnhhsi8pzMl5D1SNzMWN2OwRNyHT9lYvMEk2ltXi2pMom6KB3V1FO7odVgaWf5Oy%2Fmpmy6ETbMuJ4fEH\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=3,cfOrigin;dur=433\r\ncontent-encoding: br\r\nset-cookie: OAID=01000111010001000101000001010010; SameSite=None; Secure; Path=/; Max-Age=31536000; Expires=Sat, 05 Sep 2026 04:40:41 GMT\r\ncf-ray: 97a30cc6aa7356c1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (709)","md5":"c052d53730319f4646a7a8da1c02a4bb","sha1":"023cd22be922fdf647f0a1596725b3015ee91347","sha256":"6bb05456ba99853a6bdfcb3973e7fd1ad3494fb3e209619b90f187d2028c6e0e","sha512":"162f776afdb8c7e5f519306c07fa313563abdf4bde9cb2d5335b3c0242f7e9b983322a458d1ec1475c0e54e7e322a4cb2cf720bf31a9ecbb99e5b91cce5ee945","ssdeep":"","tlshash":"1f31ca7b4064501bd04392c450d57f48a83b92af5dc1a450776b3792c4caa2fcf31769","first_seen":"2025-09-05T04:41:06.827198Z","last_seen":"2025-09-05T04:41:06.827198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":704,"timings":{"blocked":125,"dns":56,"connect":1,"send":0,"wait":441,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/li.svg","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET /li.svg HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljb.zip/style.css?ver=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:19 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1627\r\nlast-modified: Sat, 30 Aug 2025 13:41:32 GMT\r\netag: \"68b2ff8c-65b\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1627,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f6e477878c7640ef73d801042553483a","sha1":"f11509beb81dba3fd81588cc6b7588bf2cfd277c","sha256":"b9389cb6583f0d743318d61d4f74c3029eb5d8ed7e96b04712ebadfb2c3ad850","sha512":"aca3b3c34e0967acef8280e11f755f7a696168495bef6b3f116e527463d49040383a68b863fa91323a5538d5d1252fef4dd16abf9aa04055707a372969000649","ssdeep":"","tlshash":"0b31e1cd42fc6afd7d449348fdfa4044a91668d75312d48de2cf299ae91888ccee6d82","first_seen":"2023-06-26T08:30:11Z","last_seen":"2026-04-11T09:23:02.347563Z","times_seen":72,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptserif/v19/EJRSQgYoZZY2vCFuvAnt66qSVys.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/ptserif/v19/EJRSQgYoZZY2vCFuvAnt66qSVys.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://alljb.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Sep 2025 00:17:11 GMT\r\nexpires: Sat, 05 Sep 2026 00:17:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:42:06 GMT\r\ncontent-type: font/woff2\r\nage: 15809\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29588, version 1.0","md5":"cd87c62c9c9c1728e4ce6069e20b1104","sha1":"0480db0094dec698acf12620a246bd9134766119","sha256":"bf23a7a4eebedbb87d4084a69496b29815914a18e339a00f5dc73a03c9c9328f","sha512":"e178b41b16c3d5f417530f28a9a6ba23d7bee8dcf9325ffa06a03fe0edd68654f1f801181c296bc7d81046fa4e8fe2b4f83e8d9c4a3990de397fc390e1c326d1","ssdeep":"768:qtH/eucpHv7uQbBXaNQyIlxW1cfu0Q0bdKSYJ0ZTPIt4eMz:qBeum9B23aTfu0DdLjIt6","tlshash":"fad2e1adb117b13e4c2cc6b66b1b9d65629026ce619ffad031e88134f5f61b11e11c64","first_seen":"2023-05-03T04:45:14Z","last_seen":"2026-04-17T23:29:17.092157Z","times_seen":8833,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":106,"dns":10,"connect":29,"send":0,"wait":17,"receive":3,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.zip/thecamstop.jpeg","fqdn":"alljb.zip","domain":"alljb.zip","tld":"zip"},"ip":{"addr":"45.87.43.125","port":443,"asn":62068,"as":"SpectraIP B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.zip","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 Aug 2025 12:41:59 GMT","end":"Fri, 28 Nov 2025 12:41:58 GMT"},"fingerprint":{"sha1":"2A:02:10:EE:3C:61:39:14:9D:DE:B6:78:53:43:63:4C:8B:4F:D9:C1","sha256":"F5:D2:DA:69:66:B6:00:AD:D0:3C:41:F9:C2:00:83:4E:77:C8:7A:DC:8A:7C:7C:1C:4A:3F:B4:47:9E:4D:4F:A0"}}},"request":{"raw":"GET /thecamstop.jpeg HTTP/1.1\r\nHost: alljb.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://alljb.zip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 05 Sep 2025 04:40:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1352\r\nlast-modified: Sat, 30 Aug 2025 13:41:52 GMT\r\netag: \"68b2ffa0-548\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 88x31, components 3","md5":"ea5519b398b6aa9b7dc7591257d9d4a4","sha1":"51d1a32d6f1e1d516db6223f445370e6f1cc89b7","sha256":"467b2caf8555e465d11d06c3378ba64c70130f70dbb5868f602b82210c1353f8","sha512":"51d1372beedca0acaba2688aaec55fcbcd65c36a102cddbafebb2ffa54e89fd5d23c1ff54bb0e4dfba61331e8d9d327077077e78a804ef9796bbede4f2d319d0","ssdeep":"","tlshash":"f421ea67059edc23db849a3b30e99103a3d4add1bf119cfe88935c1f63b1db05431688","first_seen":"2024-05-14T00:29:04Z","last_seen":"2026-03-24T00:37:41.558044Z","times_seen":21,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-05","alert":"Sinkholed","trigger":"alljb.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptserif/v19/EJRVQgYoZZY2vCFuvAFWzr8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://alljb.zip/","date":"2025-09-05T04:40:40.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:22:25 GMT","end":"Mon, 03 Nov 2025 19:22:24 GMT"},"fingerprint":{"sha1":"F5:9E:5D:EB:46:9B:ED:9F:D2:D7:E8:D1:06:43:DF:9D:0C:13:7E:75","sha256":"AA:C4:C0:AF:38:AE:91:75:3F:86:CE:32:70:A9:8F:C4:2F:7F:D2:28:D1:34:AD:0A:C8:E2:6C:6E:4D:46:72:23"}}},"request":{"raw":"GET /s/ptserif/v19/EJRVQgYoZZY2vCFuvAFWzr8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://alljb.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 33116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 05 Sep 2025 00:17:30 GMT\r\nexpires: Sat, 05 Sep 2026 00:17:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:38:18 GMT\r\ncontent-type: font/woff2\r\nage: 15790\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33116, version 1.0","md5":"48b1fa647f5ccfa511cc07a10fc22e55","sha1":"12e1e0d36983a8d900bc66b4784a6f9b9ace4b60","sha256":"4271064a37f3ffc0aac5f3806db8a72acc23e19447d1804e4e80d8796cbf6330","sha512":"7749703e473f0921d37b5f983896d0da11fe7d5377002bbae7d53c1c20c83f8812fcb43fcf043ccb487b378e4ace47ca113a174573f285e39a40e92c07b90428","ssdeep":"768:SwHBYO+MdvLS9dVksqgeZDkTk2bAt6//LkGWKKey2lcExP/KNu:naMdE0rgIwlbAt6nlhlLBqu","tlshash":"94e201ef699b3b9981638338477189192b0054d4fa6c5678f4edd2fb1013fa904aac3f","first_seen":"2023-05-03T04:45:14Z","last_seen":"2026-04-17T23:29:17.052518Z","times_seen":9314,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":139,"dns":12,"connect":24,"send":0,"wait":8,"receive":2,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/images/a7eab5ee71f5d2bc44f5763a16f76ba5.jpg","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018","date":"2025-09-05T04:40:41.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/images/a7eab5ee71f5d2bc44f5763a16f76ba5.jpg HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=2\u0026cb=3482018\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7613\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Jan 2025 19:48:06 GMT\r\netag: \"6782caf6-1dbd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 602623\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ELHNpfvtT7jLVD9OXLKiFRv0IXIRToLmTogkXTKlkrhsHWNeFuBum%2FpHa1Fe441JMchkPn87m2TY9S7phLrQEly9%2BfN73d5g1K%2FOJfM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a30cca6abd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7613,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 468x60, components 3","md5":"a7eab5ee71f5d2bc44f5763a16f76ba5","sha1":"6d632c0fad951dd24202e6e43294b631423e8a19","sha256":"7e5a1934a73212b05d5cb5799aa180900c34a8c037ae43596611ee4002d3a3ca","sha512":"7a8059d22f7c856e47996549ed65e78c21dea32610f4e914107cb815ded7a8dfa9d80ff0e5475d9be38367ae9b144041e658b27d64eb693b8c5677104f71b271","ssdeep":"192:CILHR9fveH1CTYYn00lQgyUqZKBjkUGVa9fffXWIP:CI7R9fiH47yUq8dfffXl","tlshash":"31f19f10bdfa9354ed44d5788a9227ad326a4374207177cf54473484b0b4af4eca4eef","first_seen":"2025-05-08T13:44:39.500421Z","last_seen":"2025-11-12T02:29:18.575729Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/images/03073b81f20c7db11bc6f700d50a653e.gif","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903","date":"2025-09-05T04:40:41.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/images/03073b81f20c7db11bc6f700d50a653e.gif HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: image/gif\r\ncontent-length: 38282\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Dec 2024 09:41:12 GMT\r\netag: \"6763ea38-958a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 602623\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3aEz4hx0WyuaMjPNaRRKXc1u%2BerhHtLpLuS6n%2BPpdHCQDtSK1pff0Ut2%2FiSgzF2XkhALBWj3eXUMC8ZvVokryvKNNLO1bKZ25W%2FAKKk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a30cca7acd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38282,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 250","md5":"03073b81f20c7db11bc6f700d50a653e","sha1":"b37f2d6b7b87f98f07f4dd56ebd3d3ba2f06e8d3","sha256":"af3a07c26501ab9fe73d42f22a72514e3829f7abe5645e3e022a3b2bf7b3fe82","sha512":"d5f8283276359522e32effbb5f52fb5f0478a1de0fe739957e75644de3515071bd0e2625c6e3f394c7e03b8d8bfae6f2d0fe653cf908fc09cac7794d19a1a540","ssdeep":"768:BCfzQTw2Pa1kjD26+660OyegLRB85t6hLfip376AOLt5QIJiHBGZxO1:QsPP7e66sPUChbip376AOLzbYBGw","tlshash":"cc03f1dfbc083421082d6fe389a523f43b13e09299e15919b1d0aaf3559a0374a7bc8f","first_seen":"2023-11-11T06:39:06Z","last_seen":"2025-09-05T04:41:06.833153Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/ads/www/images/a2e262ac77d3bab6b282c362d7dfeffd.jpg","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872","date":"2025-09-05T04:40:41.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"GET /ads/www/images/a2e262ac77d3bab6b282c362d7dfeffd.jpg HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=3\u0026cb=8234872\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5915\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Dec 2024 09:41:12 GMT\r\netag: \"6763ea38-171b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 598480\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uIxIGslesmlEzDtub9DMbamDmLw4uI4XZ0LYdHoD4HBEk7pjHW7ubnWsNN67h3xZpPW8dJ2uZOJ7owipzopN6SR8pmsbU8nl12cSAU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97a30ccaaaf01525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5915,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 468x60, components 3","md5":"a2e262ac77d3bab6b282c362d7dfeffd","sha1":"74a26330c0dd0c24741822cb5d04e7b893fb213b","sha256":"30807847ffc85747eb1e918a0e4deb85211826d6636a479545dd3e32f22955d1","sha512":"082fc81fee9219df4eb74ebdf044435cbe98ae4e054e1542d9933b4449f531ac8f9d43ace06d0b8dd0ec28b6472b3de9f404df09458bd5b48da14505509d537a","ssdeep":"96:iF+aK23wRs/GSmz0JK7loc+l3/1xyEJXCNqLOhC45RRukKV6u3ZT2B:6+a8RUJmz0Jaac4/m54aCeRRtKVxT4","tlshash":"26c16d17b24b42a0d5edffb5b89f12115877d9262e0e3bcf6b444e05feb019343a8612","first_seen":"2025-09-05T04:41:06.835331Z","last_seen":"2025-09-05T04:41:06.835331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/cdn-cgi/rum?","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903","date":"2025-09-05T04:40:41.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1074\r\nOrigin: https://alljbads.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=1\u0026cb=5834903\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://alljbads.live\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cd0uScgZ7ilMEUfu3uJK5ZS8OmHcakKSegMkNzII2o0NzhNi9KLEQL0VdydjJCfa1egikJnuKKaQj7IK21cypNcRdvgsVU2iANiTBlo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 97a30ccd3d621525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T23:23:01.937983Z","times_seen":13878168,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljbads.live/cdn-cgi/rum?","fqdn":"alljbads.live","domain":"alljbads.live","tld":"live"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://alljbads.live/ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190","date":"2025-09-05T04:40:41.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljbads.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 11 Aug 2025 19:25:03 GMT","end":"Sun, 09 Nov 2025 20:22:46 GMT"},"fingerprint":{"sha1":"1B:4E:48:7D:93:DC:CD:98:D1:24:1C:E7:E1:55:86:1E:49:0E:7B:7C","sha256":"0F:52:2B:CD:6B:03:93:91:9C:10:D4:33:DB:F5:7A:99:D0:AA:32:E4:09:E3:B5:E7:20:9E:70:8B:6F:1A:5B:DA"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: alljbads.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1074\r\nOrigin: https://alljbads.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alljbads.live/ads/www/delivery/afr.php?zoneid=4\u0026cb=6308190\r\nCookie: OAID=01000111010001000101000001010010\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 05 Sep 2025 04:40:41 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://alljbads.live\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R7%2FbN%2FlRvSuTYGiXayzUz8WcJBzFC3spEu%2BuuHO0%2BdPY1EvQ%2B%2BWE3VzmD%2FQB79EsC0CzLXNDDW4xWGyfoH6benFyf%2BBJH%2F9lZ7eFfeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 97a30ccdbde41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T23:23:01.937983Z","times_seen":13878168,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}