{"report_id":"2ba9059e-d33a-4771-8b71-581735f2b8d0","version":6,"status":"done","tags":[],"date":"2026-04-21T20:40:32Z","url":{"schema":"https","addr":"jupag.pro","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jupag.pro/","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"title":"JUP — Claim Your Allocation","dom":{"size":26550,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0a8d7e52a5a024c94bc6b7ca13531bef","sha1":"e48f8fe5438b3f41fc91b06f15e5311225d0cdc4","sha256":"faf0ec26fda62741c05f9aa2b7d704e06882a0e1ffafae41073cd72d1558afce","sha512":"ced8809cc96b2ab11aaf6148d844fda1744b7c856de650d2b363fbf32f1e6c20e8662fd7443f5c78b4e3f89d4501809f650b1c9077688f8aaad833ebc59d8a3c","ssdeep":"192:YNrrOQO72Rv0RJmhaFJ+tRMBmiSrP4HR2XHqwPTqriw8n9F5mdBwUZ1oh6iw0wyt:irrqmbz3F8uwR+i2shwLEMilNTIBWbNs","tlshash":"7bc2b637126740367813d9ad7bfa5f5e2274b403f509c8297add3248cfcd6d88992ab8","dom_hash":"domhash62855e921c03c7608b4a683ea2a6ce8c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jupag.pro","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T20:40:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jupag.pro","ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-21T20:40:32.693185Z","last_seen":"2026-04-21T20:40:32.693185Z","alert_count":9,"request_count":9,"received_data":813050,"sent_data":4188,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jupag.pro/","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0af7ca6444a4800b68c972c3cf1507d8","sha1":"0c86807977d1d02a868d825d1304b1de169a811e","sha256":"8907c868987d7546263ffaa0b6b2cf8387c3c782196e3dd699b18f22020565f1","sha512":"6ae2263d1e411b349ee61af632dc4e81dd505a565497c7c53a0f6980a2a885f51057ee212dbcf82b1ae7b70ad1f6c93d5ee88924506ec9bf22d8ca0a018927f9","ssdeep":"","tlshash":"eac0225d8a304ba1032e209aa17d9288399024a90082908bc2fd4aca404cf812908900","size":186,"data":"","first_seen":"2026-04-18T20:52:28.43243Z","last_seen":"2026-04-28T19:19:51.42122Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c1a79c0cc73ff3a71080cdd9156fd7c","sha1":"6ee6b00b9743264d029700665b37487c99e04d18","sha256":"56a80d15ca9634e3fcc7c7a918633fd87f320843830e5708c05e572107d8e252","sha512":"1dd0b5f41863d285c2466dad13f620cc425d4ca827bf283889f3058abe9c225f60cd6998e95f38e8ab62c9b26129b472c69bf28cea583257096bb687c9f0b7a6","ssdeep":"","tlshash":"1801cefb3c65082111a705ee016f5a117532c2162cdae3d02d3eec816ff879583cabd4","size":791,"data":"","first_seen":"2026-04-18T20:52:28.433884Z","last_seen":"2026-04-28T19:19:51.422073Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/secureproxy?s=%2Fipfs%2FZGKISq-a-yKKSbFJ4o9dTA2dc2e7b44f9b1ac914f4fc72dff4e9f6%3Ft%3D1776804010986","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50c2ceb638a8c18c2ecfe1af0b5474ff","sha1":"002bae08ca1fd6168a25fe88c4995808a05925a9","sha256":"cf6b56abc309575b8b06f152bf55065765ab61633be25c42be9a3126a0866c1f","sha512":"3560a7fc13dde3caea140d53ecc0d6bfa21e55a732b3aba215c0558e6adbed18c1f624a96bcfe9d9ab6b51c90b9561fb1305507c94710e40a656418c1a89c7cb","ssdeep":"6144:Ih5gDoAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osoAnXwRTMP8chPc730WW","tlshash":"a4d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","size":622797,"data":"","first_seen":"2026-04-21T20:40:36.635295Z","last_seen":"2026-04-21T20:40:36.635295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jupag.pro/","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T20:40:10.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 20:40:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 16:01:47 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhvNWpGZmBjpbLsnVQ32q4VFDR63WwTWXeblOTEt2wDgipOrJf5BFgOhAlntM8k5YsMqA5fAGIBP7iOGO0zXBsUlQ7%2FIv9Bx3VGr2DrzgjzbslRrF1EVWolRERc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9eff33ca5c35b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26366,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"6a6b3a940671d12ac716e7c655b614e8","sha1":"2e01106e114a5b4b2629a9c45dda81445c56675f","sha256":"875cb4fbe53eb084988b6152c1fc9b1675ff1d0ebfe7974b4d0a2dbade7e8cdd","sha512":"5b5d2bb85c1b3a64625db0ecb4fcc3c0bd48c26c64bb1f3b0af792370015eee5f8c7bab54b7f4a799e55bd70d2ac8bb6dd0760f2b1d0ffba79d5424091d59c1e","ssdeep":"192:iN1rOQOOoRv0RJmhaFJ+tRMBmiSrP4HR2XHqwPTqriw8n9F5mdBwUZ1oh6iw0wya:g1rVmbz3F8uwR+i2shwLEMilNTI/x9e","tlshash":"60c2b637126740367813d5ad7bfa5f5e2274b403f509c82979dd3248cfcd6d88992ab8","first_seen":"2026-04-18T20:52:28.423111Z","last_seen":"2026-04-22T15:07:11.060896Z","times_seen":14,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":64,"dns":52,"connect":1,"send":0,"wait":260,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/assets/KHTeka-Regular.woff2","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupag.pro/","date":"2026-04-21T20:40:11.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"GET /assets/KHTeka-Regular.woff2 HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupag.pro/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 20:40:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42188\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 16:01:47 GMT\r\netag: \"69e64deb-a4cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DkFbOkHwl4kHuPX5Lf6HSFR1AGuZaAFbdFlpTpZwjP29AABoGaZRqh3SxlAIhHGJwRkJWaQN8D8phm%2B6eNcQ12slMF7DMdSBmtbFM7DfsQWVHJt4Ro0LHjqcKxQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9eff33ccd86c0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42188,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-07-23T13:47:02.081163Z","times_seen":674,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/assets/KHTekaMono-Regular.woff2","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupag.pro/","date":"2026-04-21T20:40:11.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"GET /assets/KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupag.pro/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 20:40:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35836\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 16:01:47 GMT\r\netag: \"69e64deb-8bfc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=luD5UV529iqIxRx8oRIuKX8po4WOiti3yJc%2BJ8guul5QPhrBkY%2BT%2F1caW3Q8QCnr%2BqdXSsHQiZAPeFUgzRLRQfVRKJGNWKpqL%2BVornbGBMQgcaEEPDddTIImmdA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9eff33ccd8700b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35836,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-07-23T13:47:02.144372Z","times_seen":671,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/assets/favicon-96x96.png","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupag.pro/","date":"2026-04-21T20:40:10.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"GET /assets/favicon-96x96.png HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupag.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 20:40:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11348\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 16:01:47 GMT\r\netag: \"69e64deb-2c54\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wJPuOOqrgGpeYNmnry6a4QqpmtHC369KZPztkU3ICp%2BPUDfcM7Qi4BjvFOXNDNwayW6LG7YQ2EmKhqKdIeUvD0fYXwIN19yHDCKA3L0R6eWGLQEdjrj8VCY8KQ8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9eff33ccb8670b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7c0b6ba49c75cdbd3e6f0c4e42ae830a","sha1":"0a8964a5b1ae2c6087ea46e4a117fa3dde6f03d0","sha256":"6d18cee31f3539885f84e635b88b690954f193e35eb4ecff7e991163c00308fa","sha512":"69c8f55f386c3566362fadd11124065552c29cb104b4ba56244c5edb6d9e48d0a64478afc761c60ba632536ed1f3d73fbac09d91c1960f3f54b02769a8df5e2f","ssdeep":"192:A9QyVqCp0LuOHPF5PFW+XgMi2kvMoykgRQXPewzBjwmXg1Qw:AxL0KONW+XgBvSkgRQXvKmRw","tlshash":"e632d0fb6d955b8afa8331e2005815b1f166cd1990befafc612b34189f2c187524e3c3","first_seen":"2025-10-18T17:47:24.924043Z","last_seen":"2026-07-08T18:27:20.416224Z","times_seen":48,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/secureproxy?s=%2Fipfs%2FZGKISq-a-yKKSbFJ4o9dTA2dc2e7b44f9b1ac914f4fc72dff4e9f6%3Ft%3D1776804010986","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jupag.pro/","date":"2026-04-21T20:40:10.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FZGKISq-a-yKKSbFJ4o9dTA2dc2e7b44f9b1ac914f4fc72dff4e9f6%3Ft%3D1776804010986 HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupag.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 20:40:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"980cd-ACuuCMof1haKJf6IxJlYCKBZJak\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=zdSFJkGg0_iuKQMChsHsgg.js\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 04/21/2026 20:40:11\r\ncdn-edgestorageid: 879\r\ncdn-requestid: d08f462223082f1e05d1d7039018e2e4\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ix2djdck2gucmxoQjqBBIk%2BAaRZUFdXfo%2F0GjpkM2eWjQ3VjeWnSSDgfSm0julge3qBfUl99%2B5fAE7e2lMzVggTZ%2Bb16FcIaglA1K6nviZMzjCtyTENTbCVFHRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eff33ccb8680b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622797,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"50c2ceb638a8c18c2ecfe1af0b5474ff","sha1":"002bae08ca1fd6168a25fe88c4995808a05925a9","sha256":"cf6b56abc309575b8b06f152bf55065765ab61633be25c42be9a3126a0866c1f","sha512":"3560a7fc13dde3caea140d53ecc0d6bfa21e55a732b3aba215c0558e6adbed18c1f624a96bcfe9d9ab6b51c90b9561fb1305507c94710e40a656418c1a89c7cb","ssdeep":"6144:Ih5gDoAOsstbFZFSXwRTMsS8chPcsdJs3wFYYH/3h8qcPOQA12Lcv0q:osoAnXwRTMP8chPc730WW","tlshash":"a4d4eac2ab09157340ca2eb5047b42afdf882d4d078ba85077f9afd9d74578230eee59","first_seen":"2026-04-21T20:40:36.635295Z","last_seen":"2026-04-21T20:40:36.635295Z","times_seen":1,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/assets/KHTeka-Medium.woff2","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupag.pro/","date":"2026-04-21T20:40:11.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"GET /assets/KHTeka-Medium.woff2 HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupag.pro/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 20:40:11 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 42388\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 16:01:47 GMT\r\netag: \"69e64deb-a594\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V8%2BXhd3wiQpkAL7rvX1IRHgDJgpqJp7QejDzCdcJlK%2BnPiWnwdOQMkFOuzunNKW%2BqqGC5QrlTisFG1BxahEgwP4zjIO16VIHgISLIW8UVRDhqhfj4f923Zncfg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9eff33ccd86d0b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42388,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-07-23T13:47:02.150794Z","times_seen":674,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/assets/favicon-96x96.png","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupag.pro/","date":"2026-04-21T20:40:11.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"GET /assets/favicon-96x96.png HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupag.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 20:40:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11348\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 16:01:47 GMT\r\netag: \"69e64deb-2c54\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8JiCHqTGAG8TjS3nAjO0p4mjh%2F7kKT3bQpnt%2FAfZmXHpDIxJsq%2FzDCHHfrWoT2296sX%2B%2BWy6Pg8Ebdd6fcCDjXyO4vO1Y78Jp02tJnpjbAgNhmU2SC9KEWyPAGo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9eff33cf38910b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7c0b6ba49c75cdbd3e6f0c4e42ae830a","sha1":"0a8964a5b1ae2c6087ea46e4a117fa3dde6f03d0","sha256":"6d18cee31f3539885f84e635b88b690954f193e35eb4ecff7e991163c00308fa","sha512":"69c8f55f386c3566362fadd11124065552c29cb104b4ba56244c5edb6d9e48d0a64478afc761c60ba632536ed1f3d73fbac09d91c1960f3f54b02769a8df5e2f","ssdeep":"192:A9QyVqCp0LuOHPF5PFW+XgMi2kvMoykgRQXPewzBjwmXg1Qw:AxL0KONW+XgBvSkgRQXvKmRw","tlshash":"e632d0fb6d955b8afa8331e2005815b1f166cd1990befafc612b34189f2c187524e3c3","first_seen":"2025-10-18T17:47:24.924043Z","last_seen":"2026-07-08T18:27:20.416224Z","times_seen":48,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/assets/favicon-96x96.png","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupag.pro/","date":"2026-04-21T20:40:11.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"GET /assets/favicon-96x96.png HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupag.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 20:40:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11348\r\ncast-mode: default\r\nlast-modified: Mon, 20 Apr 2026 16:01:47 GMT\r\netag: \"69e64deb-2c54\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDFeqZbUYTvyFkf4jrViGFaQbOLn%2Fh2xk28a7QODsSLEBXkCaVC0uaL0BNJTY2bIoLZonUZcNgHOMP32zim2c3DPc1ajxztFYgSfllPvDyxdAH9tUFLRI1Lu5ms%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9eff33cf38920b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"7c0b6ba49c75cdbd3e6f0c4e42ae830a","sha1":"0a8964a5b1ae2c6087ea46e4a117fa3dde6f03d0","sha256":"6d18cee31f3539885f84e635b88b690954f193e35eb4ecff7e991163c00308fa","sha512":"69c8f55f386c3566362fadd11124065552c29cb104b4ba56244c5edb6d9e48d0a64478afc761c60ba632536ed1f3d73fbac09d91c1960f3f54b02769a8df5e2f","ssdeep":"192:A9QyVqCp0LuOHPF5PFW+XgMi2kvMoykgRQXPewzBjwmXg1Qw:AxL0KONW+XgBvSkgRQXvKmRw","tlshash":"e632d0fb6d955b8afa8331e2005815b1f166cd1990befafc612b34189f2c187524e3c3","first_seen":"2025-10-18T17:47:24.924043Z","last_seen":"2026-07-08T18:27:20.416224Z","times_seen":48,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupag.pro/secureproxy?s=%2Fjmpd%2F","fqdn":"jupag.pro","domain":"jupag.pro","tld":"pro"},"ip":{"addr":"172.67.214.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jupag.pro/","date":"2026-04-21T20:40:12.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupag.pro","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Apr 2026 15:28:01 GMT","end":"Sun, 19 Jul 2026 15:28:00 GMT"},"fingerprint":{"sha1":"89:43:F7:96:90:E6:FE:23:2D:F0:7B:6F:C2:10:35:9B:E7:90:7C:E3","sha256":"AD:9A:93:3F:06:1B:10:06:DC:AE:AD:28:CA:AC:6F:F2:7C:6C:29:AC:97:CC:7E:22:41:A8:8E:AF:A8:EE:F5:32"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: jupag.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jupag.pro/\r\ncontent-type: application/json\r\nContent-Length: 1388\r\nOrigin: https://jupag.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1388,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QBwgLlAhYACgCpAu8CIwADAxkAAgABGQMAAO8nhn2XtsKCAfYoEFu1GEQk--0HgmACAAC9uK4rR94Mi4dwvE2pBIeYHgr01u-VhUdQpY2pQ_WxYpq091k5TsJveR3sQ39uhQGlAdNLDDLprzIdcgOjKLLwWXRGJgPvPrljXs1FOSmiE5xjsuNrKhrZHusxgsQAQUam2xpp2hu2hSoc3rsl5Ur5B862KZeSiFLxfXO9-i-9fyy7LkpQtO3ykaZ36TLnXf_uv1BTg71lBriBRTbkp2KhmV-I9T0C6XzAdiiRbXqBwiIfUmZ-PhzLvP5s31YxMQi2Qq7IecsHj4Af-3eAvACApzTP-4AzVP3q-YXhddRMTOTVX9di9s_CaN1w3Ua1ae6XgcjARz-LadrUanDFo02YcKl5z94X8haiuPjsCM0Pp4u-cxgj7gqTEqjm5kB9eCUeqm8vG3Epqjzw0LUTbOEq0I-RBjUyP3QPMTJNQTe2gecEsSqhSwsCMrPV3sctj9sNy8waveaSTl1kCVqGc2yRGNCb0xYHwbXCuoFk1W1N283D5rhnDYZQkKkKDj9IeWADU5JAzyhLSstaI2DlvC0i6gMiLAUwo-ROVCk-MEC03wqE_UBhPA4zFMCTkYaq7XSoyEU-d1zoiYITi3v46dw1y4AFmlzw30WRlW7S6FHTBnLNH7Na3zPJKlugyPdhBKnCXPPXOlyWDUIj7DIsagErQige3fiueeS9R03y9AI0bYe_RiAK9iuBzqGJhhKOuqUNlkrveiGNXSpQhiCbpKtT9dSHFktU9ZqUmiW6CYlkVQR7qt8w9IHhUZCpjnPcvn7Y-psHp0eStCBFpJJVdyzlutz0x7rraBcoPLgLrEGVy1GZUrNdQG5qSeSLelKUCjfQGAkJqlfLbYmxf6DIK6LI02UdNt4htenQYVG-A1OZT-ecJTfhX1ODLi47Tn-r_aW1xnpM_B3Cp7eCt5e3YvawsC7uDYKStlNi9r8IFQL9Q-N7wcmjCIkMexA0MvrHsP1CIIlvfbERDHyav1G8tFQymX7b1bJyQfoqeAc_dGqANs6sLVREvJiIrfAesO955zUOk6zTMsIWoIZ7M3qhWjUI-5B6Gx73bjCOuOFjQWfNhZLDksAo-FmzotMkfs8prIcQ\",\"challenge\":\"eyJpZCI6IlhRb2FEVnA2QU51SUtVVGZhSlpESFEiLCJub25jZSI6MTQ2LCJoYXNoIjoiMDBkNTM3ZGJiZWVkZDkzNmE3MzdkY2JiZDBiNmQ3ODFlZDM5MTg4YTdiZTFiMmRhZjYwYTI3ZTBlZjRjODllYiJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 20:40:13 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1776804072864\r\ncdn-proxyver: 1.50\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 04/21/2026 20:40:13\r\ncdn-edgestorageid: 883\r\ncdn-requestid: c11eed9cd45159692604e58de434a2d0\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xIjDYA62uWFzlB0eGyNU1MlkxMEZGokA6NYYB%2FeNQgR8iSJm4NQ2k%2B68K9RH1zQ9az%2BFJo45Hl1X1yR7cptPKS81ksPQ7CUj19%2BzC1DmpuRgSk9XIcXwCgt2%2FjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eff33d758e90b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-23T18:51:01.107391Z","times_seen":17482142,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"jupag.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}