{"report_id":"3019ce20-22a6-462d-b1bd-dbc09ebf63b7","version":0,"status":"done","tags":[],"date":"2026-07-02T12:58:11Z","url":{"schema":"http","addr":"dns-jumper.com","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"dns-jumper.com/","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"title":"DNS Jumper - Free DNS Changer Tool | Improve Internet Speed \u0026 Security | v2.3","dom":{"size":189103,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23620)","md5":"659bdb7777a04a753cb909d62acdf9f3","sha1":"8da65d6c02d7608b9d486749d929e36d8e19a20e","sha256":"0bee05a96c3b66df7f039414a5fac89ed182c9f8893413a562a0fa819d75a304","sha512":"b8f7945e203c6f47b9585e909a75f05eeacdbd41de15a240de519103c30c98bd20330df5c531f8d7295c9f1715d8d4f7a54cd5d29c784eb345652ddee60d01f6","ssdeep":"768:MXQ6HTqW21qhnvW7uV+WbQlvZ0mJM9w6lP2p51hJb7oPx8Gi7E+P5oHeuOjr8YP2:bZMheiCa0sZ/OoB","tlshash":"3804967672f411bf28cbc5f6ea16276a6e25e087d937808572ad4690afc3cb6cd43350","dom_hash":"domhash1f87f42cb1a853a3b97c97f664fe4844","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dns-jumper.com","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":0,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-06T12:58:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-28T22:30:22.905773Z","alert_count":0,"request_count":1,"received_data":485952,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dns-jumper.com","ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2025-10-07","domain_rank":0,"first_seen":"2026-07-02T12:58:12.42943Z","last_seen":"2026-07-02T12:58:12.42943Z","alert_count":39,"request_count":13,"received_data":592391,"sent_data":6793,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-06-29T07:57:36.057616Z","alert_count":0,"request_count":2,"received_data":408700,"sent_data":934,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dns-jumper.com/","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c451b08f4aa3d875fb770e76aa5e89f","sha1":"3c2e3617c5e157e0a0016cbef02855ae5b559d9f","sha256":"1d9b31998dd246c2102061df0947ff07fb809195ac5766099ce1b551ac227624","sha512":"f424eda1cf73fbf37e82096ad52e079a2817ea9f8d7213fcae780dd8689b9ddc08a840672366f82ad665d3c4cee6477566f5c9051641203c86ea35da466634aa","ssdeep":"","tlshash":"28e0721a30c3003a02b346a623bb810a212a2b0bc48e8b137a5fc4965f28ca1040210c","size":319,"data":"","first_seen":"2026-07-02T12:58:17.599964Z","last_seen":"2026-07-02T12:58:17.599964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"17a4c4913b1a14f0765ada6495a73814","sha1":"f9d6b5c4d36d924f6801f389990066ff5724542e","sha256":"cc8e77733f8f8e53489ef9714931b05e07745336f421ea00411ed289da81c781","sha512":"66147e9e628ae061eb9b0175ec7214185f0c4b47abc2fd0bd9041b4a12742204e62da7e7f86d8a434695bda59d24f26f8291705e4f246f8d35b2740b6cc74a9a","ssdeep":"","tlshash":"86c08c88210b5cb156e72e060bbfa208b1453242d8d05921280b62044f20d03a744814","size":155,"data":"","first_seen":"2026-07-02T12:58:17.601259Z","last_seen":"2026-07-02T12:58:17.601259Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd0288c99c19b9f3e0a61c44586d2365","sha1":"5d0edb3c302a113f9c16870f39302809b75de1ba","sha256":"479990ab75320de04bfe0fd638c0e0a39395470890de963c697cdbe76586fc21","sha512":"f24630dc348f4a5fb857088db622fdeec6c7941c9248028ee9835fce79f0ccb6b13292211c785b85b5202e0416d969939a5d61ec0b9330f1ffd9b6bb6815b997","ssdeep":"192:eAyp4PvKSa6F+lBBnx7slXSwbDnCXB73stf0:eHSe6I77ynO","tlshash":"65e1fcff21f3503649777b6bff4f9a58313244876044ed033e1d8a641f09aa88be2a95","size":7341,"data":"","first_seen":"2026-07-02T12:58:17.60227Z","last_seen":"2026-07-02T12:58:17.60227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0V0HQTRH40","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"28e5f76d8fe4e510903eae60cb686546","sha1":"74afeabbb251dca4b7aefa8143aefd56b1a4459b","sha256":"cb007319691e20ef2067667417faf34724a7b3d54c3787e4be9a363332a4c714","sha512":"0dcb016e5cf7297c6ab3aeb969595091d0ed979a0ffc29840354be8bc737cff21c7d896d80d37db61247221e219df03a6de74de23099c381d6f90e62fe65ff6b","ssdeep":"6144:NLjo8tCn0dF5iqGCvJwXsd7pcxIGQznsWjfGUpEGmEvPrLi:hc8zFY0AsQUpEZgni","tlshash":"62a4f8cdb3d674265396f478903f018ba57b28a2b44cc899f189cce42e7465a8277f7c","size":485348,"data":"","first_seen":"2026-07-02T12:58:17.588679Z","last_seen":"2026-07-02T12:58:17.588679Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-03T07:16:42.524483Z","times_seen":42902,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-0V0HQTRH40","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.499Z","timestamp":1782997067499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:39:04 GMT","end":"Mon, 07 Sep 2026 08:39:03 GMT"},"fingerprint":{"sha1":"6D:E4:85:F4:01:A4:0B:02:E0:64:E2:F2:58:93:6D:3F:4C:AB:30:9D","sha256":"4A:07:79:34:AC:03:17:68:07:4A:CB:68:23:A7:E3:14:B2:DE:22:3C:E1:AE:8D:F5:2F:2E:2D:C6:28:58:47:CE"}}},"request":{"raw":"GET /gtag/js?id=G-0V0HQTRH40 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\nexpires: Thu, 02 Jul 2026 12:57:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 165038\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485348,"size_decoded":165642,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"28e5f76d8fe4e510903eae60cb686546","sha1":"74afeabbb251dca4b7aefa8143aefd56b1a4459b","sha256":"cb007319691e20ef2067667417faf34724a7b3d54c3787e4be9a363332a4c714","sha512":"0dcb016e5cf7297c6ab3aeb969595091d0ed979a0ffc29840354be8bc737cff21c7d896d80d37db61247221e219df03a6de74de23099c381d6f90e62fe65ff6b","ssdeep":"6144:NLjo8tCn0dF5iqGCvJwXsd7pcxIGQznsWjfGUpEGmEvPrLi:hc8zFY0AsQUpEZgni","tlshash":"62a4f8cdb3d674265396f478903f018ba57b28a2b44cc899f189cce42e7465a8277f7c","first_seen":"2026-07-02T12:58:17.588679Z","last_seen":"2026-07-02T12:58:17.588679Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":43,"receive":45,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/dns_jumper_general_settings.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.512Z","timestamp":1782997067512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/dns_jumper_general_settings.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-6515\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25877,"size_decoded":25012,"mime_type":"image/png","magic":"PNG image data, 502 x 505, 8-bit/color RGB, non-interlaced","md5":"42d6e6f51ab72aa6449a674e199cc2a8","sha1":"727abaf197d6ea8c8c3903901ee6dcd42e9f55e0","sha256":"93a0e4523353f87188222ddb3c470c392d2b03ced5a737e56a190c3b8b60a2e4","sha512":"623d148d263f58d999f450014a056246fd54a5c53cf9dc0faa27e04bfeb2c76b6faa0818bfa7bc25ab41c064dd5156bb8d173a24d070d82d683204a02fd580b3","ssdeep":"768:9Dz9KkE/RWGpBFKS44Ft0Q0vF7XM+4zmiZMTduhs:9lKkVG1KSJCF7XM+4deis","tlshash":"06c2d02ddeb4fba9181ab41b9e7b3153dac52480762c9d3f041d8c2c803fe095eeb519","first_seen":"2026-03-25T17:03:59.978681Z","last_seen":"2026-07-02T13:11:24.731522Z","times_seen":5,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/fastest_dns.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.514Z","timestamp":1782997067514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/fastest_dns.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-68b3\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26803,"size_decoded":25594,"mime_type":"image/png","magic":"PNG image data, 594 x 472, 8-bit/color RGB, non-interlaced","md5":"cc454bb591d68a0a2f84dc19322d7f3e","sha1":"b97bae79f6a2762dfd2742110cec12540db3b768","sha256":"aa9f026905281f397dab453795cb4c49e09771df0cd395730c960868f0f09e30","sha512":"9a183da96349d89001c0852922ca14014ea01122575d629b20b6c0a534e5069480d683158e84d9bd7b9611c7a1fed7e8ae6c712f50ddfc571a33b73fe451afff","ssdeep":"768:m5yZPDvZU8HLKEIl47M51/D7GF+58cEi1avQ:oyZPDvZU8HLKEIl47Y7GF+51","tlshash":"abc2d1d445e078636289590374fe62cf3c4725112aa0efce183a5c26fd5a7b8c9e3e9c","first_seen":"2026-03-25T17:03:59.954015Z","last_seen":"2026-07-02T13:11:24.723914Z","times_seen":4,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/DNS-Jumper-icon.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.986Z","timestamp":1782997067986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/DNS-Jumper-icon.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-111e0\"\r\nexpires: Sat, 01 Aug 2026 12:57:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70112,"size_decoded":70503,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"6ad685309dec44e27095911086aa0b36","sha1":"0e3a6ebe03827715874122d9d9c17a1e0620fe2d","sha256":"ef078d44dd1cba3e83d2fe8c9e2bb39053244b5c34d1fa461ea37f8e9d7584db","sha512":"a4cbd278d7a3cfe0d2a6dd647dc19177ff86cd6aae8d2fde6e93c91178af7263a67fdc6288cf14517c9c7ab0488a395c7547954ec7cc91bcc1cbb2f3606d24a1","ssdeep":"1536:LZOlxcaU7gcAqOgr1oCdZHtWxKSuZRod2ZES:lUUMcn7zWxKY2D","tlshash":"446302fdc6ae15b05f013ea46a759247ec28b126af19460471fbe3e9a2845f4fc21e0c","first_seen":"2026-03-25T17:03:59.959819Z","last_seen":"2026-07-02T13:11:24.735055Z","times_seen":6,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-02T12:57:46.746Z","timestamp":1782997066746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-285ef\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":165359,"size_decoded":22128,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (357)","md5":"43bdc399e2cc7636675d18dab5e5f77f","sha1":"0f2f99cd1154775e5255a72f007e574272a84714","sha256":"a4b18d2a6279c8fa8334ddb9522a7a0491e16152442748dfe16d108f7ff09d6d","sha512":"71e35aff177510ca1ca8b4e096e2fa5e661fbfa1cb02f1adf24b99ff5867e6c52f2bb1a11ce00100e61123f801742dac6d5bb583f99400d34e35c6180f09f683","ssdeep":"768:QXKnHTqW21QvZ0mJR9w6lP2pf1hJb7PPx8Gi7E+P5oHeuBjr8YP1yiF+wsClG/s7:J+coH0og//oX","tlshash":"c5f3a47672f912bf24cbc5f6ae1a276a6e24e047d437808572ac4a94afc3c66cd47350","first_seen":"2026-07-02T12:58:17.59166Z","last_seen":"2026-07-02T12:58:17.59166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":245,"connect":23,"send":0,"wait":23,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/dns_jumper_edit_ini.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.519Z","timestamp":1782997067519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/dns_jumper_edit_ini.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-7ee6\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32486,"size_decoded":32408,"mime_type":"image/png","magic":"PNG image data, 532 x 224, 8-bit/color RGB, non-interlaced","md5":"c24616e9f0e251764e77b3ff76f1df91","sha1":"cd1735ef6d5edf4b537af4c6a0590a0d1c3b1ded","sha256":"f32a162db94310972cc8af9275d74acc30c7c59a57404cb43dc11320ba2c3c02","sha512":"067afc7733c96b81f22af5237781ecefc22c4ab15696f222fe915bf0044e857e79dcedd1af498668b2e36f6095926e6dac5e508a3090484d9cced3b20c9c8eff","ssdeep":"384:Xp7OzME0OJ+yF+poJULldXXwGJruPKI+d6XLdEqiJZlPoITYloj41aCwqQ0grxO1:X7MV0LDXXfJi9KzJHx90g2viGT","tlshash":"69e2f0787983b8d40125da0769f19b2f12792044f7a1a477ff3c906f53a8aae0d6374a","first_seen":"2026-03-25T17:03:59.966666Z","last_seen":"2026-07-02T13:11:24.705827Z","times_seen":4,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/Backup.jpg","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.526Z","timestamp":1782997067526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/Backup.jpg HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-b945\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47429,"size_decoded":40533,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5], baseline, precision 8, 502x232, components 3","md5":"df24fc8096bcb7430cc1525ae3372bab","sha1":"fb0b24203f828840df7e0b9650fbb786b07401ed","sha256":"7c51793a9610c194f6684856cfdb18fee89c486c7174223fd61fd6b6f7aa00ce","sha512":"69326c0ce7a76d043411cb6ef7d05acf9e0775e6b7caba713c675a916d82cb405ff5440891e4572cf4fc527df72c1f66c511c851e431ae6619e5e035315d0b4c","ssdeep":"768:YavqwAlROw+XCbYiEoAwRC0AExqWXF/CEeegT3o04GOFgnd:YauRqXCbYiEgCFEV1/dioKNd","tlshash":"0523df34db1c7b5158cd463a601ced683610d2b55b83d18a25afadbb7fc6aa07303b39","first_seen":"2026-03-25T17:03:59.983852Z","last_seen":"2026-07-02T13:11:24.726675Z","times_seen":4,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.501Z","timestamp":1782997067501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::hmgf2-1782996994791-2f54e652d068\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 72\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BWGXDuPIAVdyNPP2UUY2sJwZN95x5MeNJ1HYlLgbvp1T96dRDMOWhz%2BMR54UTqZIfvGybMDQTd9BmQ8O3VuxcZ2Rrx%2FJ46JlNE6thpbgDjiSdejbtvMBYyxPGH1QOHjg9Amw2O0%3D\"}]}\r\ncf-ray: a14dd177fc1e56ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-03T07:08:24.949251Z","times_seen":16935333,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.550Z","timestamp":1782997067550,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 May 2026 14:31:45 GMT","end":"Mon, 17 Aug 2026 15:31:39 GMT"},"fingerprint":{"sha1":"B6:67:6F:5A:BE:B9:2A:B2:16:10:49:96:1E:1F:99:2B:44:AF:EA:A6","sha256":"63:A9:BF:FB:46:E0:B8:37:95:77:F3:63:84:AE:78:22:46:11:85:5E:DF:87:F6:4B:EF:F2:2E:24:D5:74:70:39"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bj55r-1781146628084-40ce7f37f405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1850438\r\nlast-modified: Wed, 01 Jul 2026 01:49:34 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLk08sDIlQSPROyfu3H4Z3BSuw0Zh4X2uomc5SVqHwTgCkIC3JCxlWKEZcc5fGeIrKgfDX%2B%2F21YsTPitTLUhRUbSX61aeIFk%2BqPGQCNFQJSAOHl023ahDihJR9r0Vxc3bPKOvcw%3D\"}]}\r\ncf-ray: a14dd1783c6756ba-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":127120,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-03T07:16:42.524483Z","times_seen":42902,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/dns_jumper_cmd_support.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.521Z","timestamp":1782997067521,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/dns_jumper_cmd_support.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-3ce4\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15588,"size_decoded":14777,"mime_type":"image/png","magic":"PNG image data, 462 x 412, 8-bit/color RGB, non-interlaced","md5":"865d0d75411d89ff38765bb4bdc6022c","sha1":"a2461c825e5aca5f341515887b90caabea08ed20","sha256":"ac2e4f2cb858ea6272ccacfa14b93456bc5d12fbdaa9a8bc8a68f8140426da29","sha512":"2fc40a6cdfdd9a44c61e866bb3e1d157052a6b3f4774764c99471887d2c6f5d445b241d481241ecd2e32036a367ae7b6c4029150f00a7b5f80386aa835a9a7e8","ssdeep":"192:mc6BRrolRPiMtQzD3YYb9HHo7KmvjndT5exG5+//LHwU3q1+fZ0yIeIstS4oNa3T:EBJolw/MYEL1M0fyIeIstSHaTwgd","tlshash":"8c62c05a33d3493dc637964f219fd832dbb54d310d775e604a46f9ba088b3839a534a1","first_seen":"2026-03-25T17:03:59.981011Z","last_seen":"2026-07-02T13:11:24.732281Z","times_seen":4,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/Screenshot-2024-03-13-221514.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.525Z","timestamp":1782997067525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/Screenshot-2024-03-13-221514.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-6d7d\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28029,"size_decoded":28160,"mime_type":"image/png","magic":"PNG image data, 502 x 232, 8-bit/color RGBA, non-interlaced","md5":"1efc28a52e3d518c4192957f2c6ce148","sha1":"3ddb13360fc588a07278358449ef5b74d0661e88","sha256":"be3a294d38b2758837dbe00bf4d734ad4f1e48bd9a9a104063fe86f597fea57f","sha512":"8bdcefcea6e3403c07bde057d644ba1f7a34dcd3104dc8f6a8e847a97e27df57679512f903b64b0a916f55e4009e7301709a5dd281b28d6b70f6d8432635c444","ssdeep":"384:RVJS4a/bEL68un5uOYkLMBEuOtvSIQyM5W2NXp2i3wyU8xUTpovX+yvqQc/Ws9Km:UP/4OJn5f5Lrt05DN5hxUF2+yvDKGNa","tlshash":"eec2e1e5f380a33fd17286935bbddee5c6a62628253c446c964e4af408cd319c4812e7","first_seen":"2026-03-25T17:03:59.962494Z","last_seen":"2026-07-02T13:11:24.728492Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/DNS-Jumper-icon.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.509Z","timestamp":1782997067509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/DNS-Jumper-icon.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-111e0\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70112,"size_decoded":70503,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"6ad685309dec44e27095911086aa0b36","sha1":"0e3a6ebe03827715874122d9d9c17a1e0620fe2d","sha256":"ef078d44dd1cba3e83d2fe8c9e2bb39053244b5c34d1fa461ea37f8e9d7584db","sha512":"a4cbd278d7a3cfe0d2a6dd647dc19177ff86cd6aae8d2fde6e93c91178af7263a67fdc6288cf14517c9c7ab0488a395c7547954ec7cc91bcc1cbb2f3606d24a1","ssdeep":"1536:LZOlxcaU7gcAqOgr1oCdZHtWxKSuZRod2ZES:lUUMcn7zWxKY2D","tlshash":"446302fdc6ae15b05f013ea46a759247ec28b126af19460471fbe3e9a2845f4fc21e0c","first_seen":"2026-03-25T17:03:59.959819Z","last_seen":"2026-07-02T13:11:24.735055Z","times_seen":6,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/Dns_jumper_add_custom_dns.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.518Z","timestamp":1782997067518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/Dns_jumper_add_custom_dns.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-5526\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21798,"size_decoded":21150,"mime_type":"image/png","magic":"PNG image data, 594 x 426, 8-bit/color RGB, non-interlaced","md5":"6422801903580a2af0e0c84743b5127b","sha1":"78e671ab5a4a68af163d836986a1d8d81c826e68","sha256":"f81641038f1ef4109729d9edf9504ad76f451e43cca552303e8041edf15a6d01","sha512":"28b93bc127f2cfe1d1c659151974001170608f47b73a6008186a803e9e4bd42e08f8f918e49d7b1307d48fe9ef2f9612a083725b9c75740ad57f4edeaa757c1f","ssdeep":"384:Ye0DlG+onKj0dUk5ewUdtp6PV1w83vc3zhzvoESen0e8bSgPuHh2O2g9teM:Ye0DsdqkzEE1RkFzvooyaHh2pO","tlshash":"c0a2d0c2ac1f4e42d9dccc1a1ab23532b28ee1bda5f58daaf05b43851e7671943c518a","first_seen":"2026-03-25T17:03:59.996079Z","last_seen":"2026-07-02T13:11:24.732986Z","times_seen":4,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/dns_jumper_add_dns_or_dns_group.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.528Z","timestamp":1782997067528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/dns_jumper_add_dns_or_dns_group.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-59ac\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22956,"size_decoded":23002,"mime_type":"image/png","magic":"PNG image data, 502 x 232, 8-bit/color RGB, non-interlaced","md5":"f4e09e99a53e48031dc73391af467711","sha1":"822286d7b227b7a5584f6e2b80f80df48751ebd4","sha256":"a06075fb0abfda5ac2c3a30a0c41b23a3a40739614444f780780227c38694abf","sha512":"36e2a9cef3b08fa79996001a05766422e53413172335f1d9248617a5ba09fa651b89df7e5312c5bd028045ea10536733a05ad82ee1fea0a19d694b936cfd57c6","ssdeep":"384:/0mMufwEs+fH6dhm7MPJXJiaqzABAUtQe/ap2:/mmwt4Hgh3JXnqzSAaQe/aU","tlshash":"45a2e03e9d60245bcf03c76846f11362f15aa3a43facf644d4c2e9034d176b4b46aa9f","first_seen":"2026-03-25T17:03:59.947561Z","last_seen":"2026-07-02T13:11:24.733655Z","times_seen":4,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/select_dns_group.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.516Z","timestamp":1782997067516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/select_dns_group.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-93dc\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37852,"size_decoded":37952,"mime_type":"image/png","magic":"PNG image data, 599 x 232, 8-bit/color RGB, non-interlaced","md5":"e77a7ed841717ad1bdf2586638aa1477","sha1":"165aa07543df319838291758e1406583efd48d63","sha256":"6edeb5343da539cd57c974e56de12a52ce373a53adead805716924e5626d602f","sha512":"f1b67e2144dd9a9eb5199bcac701e5034ecd6239d971f973ef7eb2853e851de73f52ddff5ddc5cc227f4c29951665ec4c9c007f3c357ae2b05db571fbc5327bd","ssdeep":"768:cW/FaBFLODstiDouy40ae6/lfZ7axXJ1uDpq7fZbU2ur:cMM3OrouHA6tfNaxXnuQZbU1","tlshash":"c803f2bae8489e83fbe52dc20cf2a6433deb9da6335014f8254a1711f93279d5969321","first_seen":"2026-03-25T17:03:59.998123Z","last_seen":"2026-07-02T13:11:24.725781Z","times_seen":4,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dns-jumper.com/images/dns_list_order.png","fqdn":"dns-jumper.com","domain":"dns-jumper.com","tld":"com"},"ip":{"addr":"62.171.140.208","port":443,"asn":51167,"as":"Contabo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dns-jumper.com/","date":"2026-07-02T12:57:47.529Z","timestamp":1782997067529,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dns-jumper.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 30 May 2026 15:46:06 GMT","end":"Fri, 28 Aug 2026 15:46:05 GMT"},"fingerprint":{"sha1":"56:7A:4D:7D:EC:3D:86:9B:AF:5F:5A:87:91:5E:BD:7E:AF:F3:DD:80","sha256":"27:37:10:A9:6E:A6:A8:AC:6E:41:A4:A6:51:4C:9E:9E:90:A1:39:6E:69:D7:A4:C0:6A:39:78:52:44:AD:F4:3C"}}},"request":{"raw":"GET /images/dns_list_order.png HTTP/1.1\r\nHost: dns-jumper.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dns-jumper.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 02 Jul 2026 12:57:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 27 Apr 2026 06:16:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69eeff34-5bfb\"\r\nexpires: Sat, 01 Aug 2026 12:57:47 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23547,"size_decoded":23090,"mime_type":"image/png","magic":"PNG image data, 502 x 427, 8-bit/color RGB, non-interlaced","md5":"845b82fccc0ce9399090debb1b3957d6","sha1":"a5dd5b09a80f955afe89c28b3547eb1dac4652b0","sha256":"07cb934b82f584bc65465d4aa079c62156d1f67d7468ded6d928324d64005456","sha512":"e1defcea6cec69d796c992d8a907e2000bd60b9a3a4aff152113a6e2bdf05175b7fbcb1f85344ed39a76a3ae53680c99d431f6a8f5ab20ab61fcc63d35ec7312","ssdeep":"384:hMPJ2HUnxyFJpNCzXNnaIjNwNsK/ZFYavH3SwCK6Y7YLl1Kzhb4qH:hXgadmp0NRLvgK6Y7MOtfH","tlshash":"06b2d0aee973e0c1982145a01e7724d0e8d60cd0abccc6fa107dcd7e95b9b2f8c84987","first_seen":"2026-03-25T17:03:59.96496Z","last_seen":"2026-07-02T13:11:24.70229Z","times_seen":4,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-02","alert":"Sinkholed","trigger":"dns-jumper.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}