{"report_id":"30f0cf5d-c4a5-477b-b239-6968bc12251c","version":0,"status":"done","tags":[],"date":"2026-09-12T14:11:33Z","url":{"schema":"http","addr":"booking.jh-print.com/1102053484","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"booking.jh-print.com/1102053484","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"title":"Booking.com - Bekreftelse","dom":{"size":269567,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52797)","md5":"d5766863a315671932e6c47f7a866651","sha1":"0f62853c28364b2261af22797ffc5fb8c615d316","sha256":"8b4e4d252be7cded2e4810eeeb31781af6a797eb772d6c344e58f9b2a9e238e3","sha512":"7587694f8794ddc36efd381f188f994b95725af1f1bae7a4e6d8e8a01b49da9843ec2c97a4a7262aa084a7088a2a4cf5f876e601dad04839b1695f2d06cb79b0","ssdeep":"6144:TI4xXw0okHcHAa0evnNyolRjiXcfQFntZplz:T3JozAa0QyolR+cw/","tlshash":"83446c1161f5677e015b02c8a5663e2e2eedc33be652c1c4b59c8bb43fe2c68d637468","dom_hash":"domhash9921abcca00da2a68680728d48109d1c","first_seen":"2026-09-12T14:11:36.737774Z","last_seen":"2026-09-12T14:11:36.737774Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"booking.jh-print.com/1102053484","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-17T14:11:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"t-cf.bstatic.com","ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":123886,"first_seen":"2022-12-04T19:01:11Z","last_seen":"2026-09-10T11:36:59.883824Z","alert_count":0,"request_count":41,"received_data":49637,"sent_data":24067,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-09-11T17:53:59.224216Z","alert_count":0,"request_count":2,"received_data":2587,"sent_data":1080,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-09-11T21:15:25.646406Z","alert_count":0,"request_count":1,"received_data":1346,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":1249,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cf.bstatic.com","ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2009-04-24","domain_rank":109157,"first_seen":"2020-10-08T14:09:51Z","last_seen":"2026-09-09T16:13:29.421948Z","alert_count":0,"request_count":1,"received_data":93701,"sent_data":647,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"raw.githubusercontent.com","ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2014-02-06","domain_rank":22021,"first_seen":"2014-03-01T07:08:08Z","last_seen":"2026-09-11T11:47:18.88315Z","alert_count":0,"request_count":8,"received_data":31523,"sent_data":4842,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":1,"received_data":129166,"sent_data":572,"comment":"","tags":null,"fingerprints":null},{"fqdn":"booking.jh-print.com","ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-10-20","domain_rank":0,"first_seen":"2026-09-12T08:23:02.26061Z","last_seen":"2026-09-12T08:23:02.260611Z","alert_count":110,"request_count":55,"received_data":620660,"sent_data":38393,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"booking.jh-print.com/js/support.js?v=1789052700","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a19e6926a0362e493561be5e79ea28f","sha1":"b3aaf81de5e6889f430ad9f4b8a093a7a668b4c9","sha256":"ae7998fc64675545bffabfbf8d7289ea8fab404907bc759ab42e56ab5c3ba50c","sha512":"08189214eca164cfa8dcec38f156f179da43386c04541c21909a6c42a4ac601eb0daab726a2016259dedabe79d4c4c638b01a57bc624ddac7133721bb9bfe0f9","ssdeep":"1536:MyIVApRhRH6zekLrGU+44BvfBGgxiT1442k:IVApRhKN+5BfB614Y","tlshash":"48430a692af7002914776179bbcfa70533259007a107de243b9c564cbfd0be992fabd8","size":58532,"data":"","first_seen":"2026-09-11T09:13:19.973025Z","last_seen":"2026-09-12T16:23:06.78678Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/js/payment-modal.js?v=1789110700","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1247abc084406dfe170c6df815811c6","sha1":"1aeaee81ce0c9d1fb479406f288b162ebad3ee0a","sha256":"ec80d24bc7b87cb96917ff04eec79fd19be3a37404706cc8ff26dea73dcc984e","sha512":"299fc9fb1030705c19f1476d33bffaba81bd2df2f53735906d0a459e77307005bf244a31bbb56f331cde5dc88786ca6e75e54c7a5732c3ee7512b6086bf285a6","ssdeep":"768:E/xlCskjR85X3z+DNP/5rgcUKHbNHxSWGhqQhNDO:E/xlCVjR8EDt5r9HbvSkV","tlshash":"97837058aaf32176497b757a4bff4109763b00534409ce907c5cba482fc0ea5a7f6be8","size":84942,"data":"","first_seen":"2026-09-12T14:11:36.798479Z","last_seen":"2026-09-12T16:23:06.751649Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/book/js/script.js?v=1771629200","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a45316929ab38c470f84213cf4d1407a","sha1":"0675f47e9ff02c185f47d83ce2de1161c5782449","sha256":"2f218382621c06f00a84958dd8ee0a7cacdd46573175007a29c42b31c7bbc130","sha512":"a6908415354865fd35964793193eb5435102ff3aaaa806eaaba6e3f7effc32227855388ee5cfcaffb5640b80e37b8d2c18691c91fad2de858f3bc50a36298c7a","ssdeep":"192:Na+N9SCxAP+N9SCfWXXWybUBYPosmy0pQ3BdTpi6cMjTpQlnyJZzLADCn6YJ:srTD1xj1l","tlshash":"8642251416f5183642b364ff7bcb91c5b62201ef984198793cac960e1fa0e945bf1be6","size":12315,"data":"","first_seen":"2026-05-02T20:55:48.333704Z","last_seen":"2026-09-12T16:23:06.769467Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:05.236Z","timestamp":1789222265236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":false,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"f-FAzzTdccAfl0E2Lu/wbvI/6Anvk\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNW0kO%2FjHJGm4z4OmYFF7jBjTcGMydERoFDrvnpClf%2BWiyQz9yecBwu17132YYI5YIiYsJE%2Bk56pdqombGL4tqtypDT%2F7ju0LWZlkDIZqbRc8jqHhuwphiMOUr5dlxAV1f20GUrzUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a39f7fd5bc988deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":684,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"394daf1a187e2f2a82ac593c04a0f637","sha1":"140cf34dd71c01f9741362eeff06ef23fe809ef9","sha256":"5e4ce7b36ba37b78a5d5f9fd08e6b7b54ba6879d651aa46ec9e1d6fa24ebe30a","sha512":"3b937f74dbc4c5020f7d9cd2fafc18406ec01422fd970573cee417429b2fb6f09cc8bc42aa8332ba5eda129742184c6a48bef9e1891e540720da92d6324f1419","ssdeep":"","tlshash":"ae60000008202c0802020002b0002a0280000000002828220a0c008803008000882202","first_seen":"2023-04-10T20:28:35Z","last_seen":"2026-09-12T14:11:36.739434Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:26.539Z","timestamp":1789222286539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDX6Q2wrn5SKPCrR2lXXEEHFSohujM2TwdSPVh8QXU8bLqnuZv3CqxkZKTq3hRQZWOZLEYWNE8pBAeQ4y%2F4rzywcRnW%2FFhPa0tFzzDKSJ%2F%2FVAzm5VMrKlBuYwRxOg0isskuTK7uJHA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f805ae8628deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:28.258Z","timestamp":1789222288258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grFoGiyojGchw7kOZ%2B4Kl%2BJ5zN9VKZ4Y1Kz%2BRJVRnwQHYRwn76ELgMTlc%2BGQk4meEal75eOwaKx0ihvIgmYouM0zAgX7JXzz3wSsE%2FCPM2Buts8gkwHn%2BQbe67Qi39iS0FjIV3aj6A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f8065aab38deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":741,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:28.556Z","timestamp":1789222288556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JfK8h4oTDqJK6himOrOLTySu06%2FP%2FaHiily3jSGSnYLUiAnx0fkVfZkYx0eymFj%2FNYDBfS1qQ0pU0a5pPD64nP3DguiUOhgzCUje09VxKbaRuyowzYBp59rZ%2FoXm4p9y6EXyruozBw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80677b488deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.107Z","timestamp":1789222264107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":false,\"lang\":\"en\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"f-FAzzTdccAfl0E2Lu/wbvI/6Anvk\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9aeMU7Rkf7k1CczFbX9Yuq2vGebu0i%2FUrTHA2xt48cMyfEnqwi1TLZR93uqiKg5WyWZo8ET4%2Fedl7jXZabV5yJJEUMscwUSLIg%2BFJTdp87pWDP87sUlQqjw%2FOUMSBk5o0B%2B7WYz6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a39f7fceaaed8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15,"size_decoded":686,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"394daf1a187e2f2a82ac593c04a0f637","sha1":"140cf34dd71c01f9741362eeff06ef23fe809ef9","sha256":"5e4ce7b36ba37b78a5d5f9fd08e6b7b54ba6879d651aa46ec9e1d6fa24ebe30a","sha512":"3b937f74dbc4c5020f7d9cd2fafc18406ec01422fd970573cee417429b2fb6f09cc8bc42aa8332ba5eda129742184c6a48bef9e1891e540720da92d6324f1419","ssdeep":"","tlshash":"ae60000008202c0802020002b0002a0280000000002828220a0c008803008000882202","first_seen":"2023-04-10T20:28:35Z","last_seen":"2026-09-12T14:11:36.739434Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Gb@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.217Z","timestamp":1789222264217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Gb@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 743\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: acDzrqBZDz05IFOFN0ynlTV7DrrKn0Gd\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 11:04:11 GMT\r\netag: \"d1dbefecf4dcac68e1c75bb71fcef0b6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: xmXVTSidfTgZcPfBzlZoiKj5lsGN9SZa8AWEEq3lqBXuizOTHu5AsQ==\r\nage: 11214\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":743,"size_decoded":1520,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c3d06580eeaef36441e5be59b5e63173","sha1":"1597d22ffeb0057b1ba9f58e2f518c7cbbd87f5c","sha256":"984c40b090d8ea734b17e1b63edd06d77ce2a424d3d2392a4fa1e0c577b27426","sha512":"9aa9307188c6790ba974d53387d76d26cfe0b66e6dda4939b94abd390cd90b5006450853223348416a9f70e6d28f252af52bca0c133a73ae79c881f8010dc475","ssdeep":"","tlshash":"fd01b598b0247c2c9a72ea23c40e817200c3af5b7b04a100ea26d0202a4e64af138bf2","first_seen":"2023-08-14T11:16:25Z","last_seen":"2026-09-12T16:23:06.748389Z","times_seen":2698,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":4,"connect":8,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Gr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.241Z","timestamp":1789222264241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Gr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 257\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: QpPXZGAwsz_p6wNDHMjMV9CamEKSiLDP\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 11:02:45 GMT\r\netag: \"f9a5f70a8f8702c501beb7daa292883b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: lh71AzQeOaESYGIaGTUIYYzqIBcrgdCPuzM9cmHAo29UrxbhqDmGVg==\r\nage: 11300\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":257,"size_decoded":1034,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"550d5f7bd750b6185f6586b371b39698","sha1":"08d8f835e39732003eabd9029e1bdd50cfc0e4fb","sha256":"bdc85911c3912c973e3170f85506cc6e29d83586bad949d4188803f95b9e7c39","sha512":"371a1814fef91d90c4cce566fd0ae6ac4a27c074110dfa85b603bbcca6ea59c9c50abb35d571bd94fbe578ff22360d2ff893891e0f13836ef705128409bd171f","ssdeep":"","tlshash":"7dd02bdda22e5939c5df4fb30055448080531d695602a305b970c8592b0f02892c82f1","first_seen":"2025-03-18T07:37:38.806728Z","last_seen":"2026-09-12T16:23:06.766771Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Fi@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.246Z","timestamp":1789222264246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Fi@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 186\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: .tXrADMEUyHwS0xtxjL4FpFZG0uAX5th\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"92a947b7ae2e835cf3f371191f7ea7c2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: yXQDMnxRQzCLvDLP-PtTKiwhyT4DXQIGZEa3hRFK4v_X8cLv3lgHRg==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":186,"size_decoded":963,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"6301628b63b750f566ddc31b306d7f7f","sha1":"b6347df062b6a37df90728404258aaa8c22400e2","sha256":"863ce74405428e6a5fb9ab9aceebe987bad7af5a8e155d9c9617657895effdad","sha512":"76390ce13d9a10298fbedb1edd79c910d4c0212c6e6fdc5407176d96aeb69b660b41399713901847420970bab4c2bdfa52eb3a4de26aee9fcb2ca9914997c5d8","ssdeep":"","tlshash":"b8c022e7030e3c248b5f1ce3700502c0c3c701582992be08401090ae1c810c1c5549b2","first_seen":"2025-03-18T07:37:38.843491Z","last_seen":"2026-09-12T16:23:06.755512Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:17.457Z","timestamp":1789222277457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEAF3AO%2Fq4KK3A8Geqr3oDseCgeMImXo1GHXMp8B0rq2uxYpSKNYXSS3qmaYTp1HbjflPh9cxQqes%2B8CjYabaIR533rCohaDicXVhm%2BaCuVaJGz8ykeCcLqi3ZWbi5b%2Boqsob6ac3g%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80221f908deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:22.257Z","timestamp":1789222282257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PmNpCSlo3QXwVn0vDp9CHNs%2FMNPlVfyHPzghuZdEihdGnqTCOCLwvRmJzhRb5taoklOvYcs3iyZnGL%2FAZsfhtai63bU7P0Nwwkh1l9x65V25379LS7VrChyHW6aamcsk9jaaCN9RTg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f804019298deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":733,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:22.505Z","timestamp":1789222282505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:22 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4cZVmxcqaj7BTOBX9LptRM2yIdHeZQNocks%2BWCssm6%2FOgCuHF8shlOHsfsu60Frht5agG00njo0yOQ4yGWUeyVZyFw2mafxJE3KcRrcidrSg20dwDIPONwazQbyFZqK2Etk8KdqxA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f8041a9a28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":598,"size_decoded":1090,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/css/support_parent.css","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.050Z","timestamp":1789222264050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /css/support_parent.css HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LbKeFW2Zj%2FcpRfNUuEulQxpav0IMw%2B6wnIJf%2B6E6BEQnPuhzVnm%2ByHgYS%2F1MXxE7T1rG%2FIIAkWVuxRih05E916WpzVPxEeF%2Bbasw%2BBd8417fkaeetH6zAH73gcIfNOqfgsDq3V6Wg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a39f7fce5add8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":771,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-09-12T22:32:23.950484Z","times_seen":47425,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/De@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.236Z","timestamp":1789222264236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/De@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: GUVKoiSz_DnVdC9rnjJS8jG7GbyISPsy\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"c6a2e9c642ab67e955c8b3b700c3813f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: -GKGLLP3dJZBx6He8VLmt_UdLm9IYjpLf4FJp5m98rO0zcnzd_A3eg==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"8ddbc2ea052aff70a7652c1b2f99d837","sha1":"7bd2b690beb3a6cccaeee66728976ba588aa1162","sha256":"f4466dc41d4edeb2071759474a0c2682b79290cdb4f2f1839de2c1c50898bc0b","sha512":"6a4b5388102403393bb4bf98f6ea3170938d4057eb0d09bceaf5bd6a17498d01d09641fba2882dda03bc19ecce6a2d84cdb0a3f6ea5b7511114a99ee4207f7f1","ssdeep":"","tlshash":"9fc08cdee3a22c7ec42d48ab800a53886463691d069ab843a0f5d81d24266858a846f0","first_seen":"2025-03-18T07:37:38.804097Z","last_seen":"2026-09-12T16:23:06.742634Z","times_seen":2662,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Fr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.250Z","timestamp":1789222264250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Fr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: do4D5L42Sr3WaY6QmeEzTWtZJvTFdGWw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"39c66995380b656e32b292d51c1efa0f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 7neXAXQEL1OMGjf7Bf1USaqgY2LWGsuElamIjNIJ-PRW_9cYEQ3Jog==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":181,"size_decoded":958,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"1f0f56642654a00dd321a4e9ad1c473d","sha1":"02b3f4c3d6b72e002075b702a4f11b7c4a015dd6","sha256":"3a3649bd73b5d797fec6464b0faf5147f23e6255661b82fb48124fef386981b7","sha512":"253686e0619f8ce625f2ccdbfeeb7f0d2bdda215fa0c7ac07210355d1c846c080aaf96a8f432c26603fc25ce48dc873d97c986ad574acff03a98b79c10113285","ssdeep":"","tlshash":"93c0c0c6e134ecbf83a34df3808f0c404063782c4f0220c31040e0b1b416060cdd1de2","first_seen":"2025-03-18T07:37:38.809793Z","last_seen":"2026-09-12T16:23:06.746718Z","times_seen":2683,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Vn@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.299Z","timestamp":1789222264299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Vn@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 374\r\nlast-modified: Mon, 19 Jan 2026 12:32:16 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Ah.X_Bv4v_w6UK3k5Q7g3uWNH002PL1a\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"1a2006e352bf40e285ed2aa34ef898cb\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: LoD1wXUMGtzzOPODe2Yg0-Wwk-sK5FVoRJ-Hd7ow-p3JNmOkj2sQow==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":1151,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"04a937757bbb4f5b7b1ea093f1f8c5b2","sha1":"a7f6aca2e09d59d1337be828dfcf66cff00a4ca3","sha256":"b63503e42434a768a24d11ee013804aa5f5b480a7ef9bdfb941cb124bfa89804","sha512":"61d37f7514fb3c4945d3bffc434b734c53bca860a33c5d3d59e261d1eea67466e13e4c8363d37bcc7426564f76364af6532f70013edd69a94117ddd1f1666049","ssdeep":"","tlshash":"78e06ac7a327bd17e5f54a37d04c50439417387b24305409149038430f85abd23e06d1","first_seen":"2025-03-18T07:37:38.845188Z","last_seen":"2026-09-12T16:23:06.79003Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:05.696Z","timestamp":1789222265696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53n0WrxlOOaOf35QIc4XsodV1UcjUrp0wzr5NcPSsPrz08xz5dUrtNP8T%2FEv6wWB9rBX%2B0oHFnRkpovqVwY5lXqwRpLguZ4Io6KSnZlI2gUBRb6inQ4bzPIvzhSdh7rzBd8qkDRgqQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fd89dee8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":733,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:07.198Z","timestamp":1789222267198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JabsjlM8xWwf%2Bzx5coOozqVtI4Fjz9Ms1%2BkJV1rqj2nle036kwJod5OP23%2FHuUvjv%2B9BMFPZUlnHLygVMiMn%2FT5SGByjFYC2IeSWu7%2FVQA8F1Yias1iPn8prT4MGzWtXY51FrtnIRg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fe1f82b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":741,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:08.699Z","timestamp":1789222268699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zYE%2FVz6TW2Zjw1JAaUV7GpBw7Tfdomx5OAEbhxn4uAUX8v4EzWBdgFE5koODIYBXlISy%2FtZOGL%2FMWO6x%2FO21vS6YxRT1Twq6SJiOhgLJLFkyYZgnhGupAGt8JYQApxOHtrWyF4%2B9IQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7feb6a838deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:29.758Z","timestamp":1789222289758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k9Xmp0gXX37Qt6aqfy%2Fop%2BuBYowdxmHu2Opu3J8%2FDQfETuttdYHHn2AC5AfZIXCcVIyIwKlciPtz%2BVkv5vfs2M1TLYRq3PNDvSD%2FuBezyWYPyLlf4nuWJetXNosFNo0z%2Fzd48%2B51gg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f806f0d668deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":743,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/visa.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.941Z","timestamp":1789222263941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/visa.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"228ca07b117b8fecc04578f9b7b5280b98d49d04c686c4c2afdb953a22b6445b\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 83AC:3ECA99:69A1FA:B914AB:6A94F73A\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789222264.046808,VS0,VE138\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: f706b48239eee8d890394ddac2cd01351acb80cc\r\nexpires: Sat, 12 Sep 2026 14:16:04 GMT\r\nsource-age: 0\r\ncontent-length: 610\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1204,"size_decoded":1550,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1170e846efc35f50a41fc10cf37d5c4f","sha1":"ee6657741ec8fed7d9ebd361b5de2593397c59ae","sha256":"8d837bb887be5ac1a959c8bfc8874dc35d1571d5953efa560b1f317ed6f56bb4","sha512":"88a7a6ac917560efbe30ba89038b95199be369f60781f32613cbb1612b03d6abd6f5423f0051219c05806365b5492ebd266f45c9ef5e27d6d1740d4ecca9b036","ssdeep":"","tlshash":"872167ed3f9428c9c4c24fd5b615150d3229d0f3ac455942ca003f0431c986161bebf2","first_seen":"2025-06-23T21:13:45.828877Z","last_seen":"2026-09-12T16:23:06.770464Z","times_seen":247,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/amex.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.942Z","timestamp":1789222263942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/amex.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"709daa89345a1d3bb439f89ec8127634e1a8cfb3bde80204cfa01f7719cbd35f\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 08F4:84148:714E61:C67460:6A952ECD\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789222264.288508,VS0,VE147\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 6699057d170d83130c88dd624c3baa95c524d8d6\r\nexpires: Sat, 12 Sep 2026 14:16:04 GMT\r\nsource-age: 0\r\ncontent-length: 2455\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4879,"size_decoded":3395,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23cd5a2193b164182c1b386e47a3a042","sha1":"1ae6cf9651216301a1e9db31bc2f6455bacf60bb","sha256":"c9e69fc83a307407c427b0dbb759aeac0f801302aa093b283bb2331227550408","sha512":"2439a50c82d40768796dcb5aca56a8d2831ef3282a4a239741c2d8201321911b47c1b02be16fc7d13b10932b918966c4e64850e962820ff5483a2490b651e37f","ssdeep":"96:budZ9O8fybL5ZB/SisbTWfzSHfb/Nk7SW89kqalSZ9WcNaL:budZ9OTLfB6isvWWHTlk7Y3Z9Wc0L","tlshash":"1aa1a5c9efb462f82c414f5eef2418de39af24b53c71de54c22cef9594e39989a19840","first_seen":"2025-09-05T22:46:55.846441Z","last_seen":"2026-09-12T16:23:06.744266Z","times_seen":215,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":63,"dns":0,"connect":10,"send":0,"wait":159,"receive":0,"ssl":252},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Pt@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.283Z","timestamp":1789222264283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Pt@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1282\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: SOC_sWAWjPGE3B5iuNiqpRRIDbu1RLft\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"05b68caf1b05789ef5a212aef2793003\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: Za6v5RP_UufdVpdz5Ly4ye-tTHGqlNcDzf9nFUuLyL_YbVP6R9Pm4w==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1282,"size_decoded":2060,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"45e1fc0cf94e897c8d06125fcf91feb6","sha1":"a5d1d201e12f2ccca8d45e82b3db49f87454aa58","sha256":"f3993841083e059ed6ce394951b69615d986c0ded4c4af5a84a4eff142a82179","sha512":"4cfdd34e45511ceef03cfd86f78641945e685c4da480de674cb9255c6e47e2cc3cf5012dfc45a70ae4edda7bf13c649780c0058b25c741b3acc414bafd523e38","ssdeep":"","tlshash":"f621cbc7d34398515996f36ecb1611c442bb7c6a37b80c0944c77d4680ad8162d0632b","first_seen":"2026-05-02T20:55:48.301796Z","last_seen":"2026-09-12T16:23:06.740145Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Cn@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.300Z","timestamp":1789222264300,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Cn@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 393\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: tjq85wwpldE18TNGfkVZFqbnx5qZZ1AE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"303b39947524d1b7671997847d203f6a\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: upiiBMYpPFvcnXEUKVugVZXTXnimgA6zPe02O_yV6ACgMxb6RqTVJQ==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":393,"size_decoded":1170,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"c1f57830241ee6a0687fcdf70b9ba017","sha1":"88a55c56a6e2ef110943ca58b4ef95ad5aca7fe0","sha256":"f07febebaf2e053eff4b62c8e8403908b76d7242ec6090418f87978039df1314","sha512":"9a0ccb8c11f148f373ba9d1c7fbc3a1c4fe52835015b90140b068def50b685306933112990315905a15d2c7af74ea4d19157e8b35458633949c263e0d5d1713d","ssdeep":"","tlshash":"66e0f1cdd100d4bfc85f685383140cd43ee3f60e0012f14992a446066e732ded642670","first_seen":"2025-03-18T07:37:38.815244Z","last_seen":"2026-09-12T16:23:06.778845Z","times_seen":2661,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:14.756Z","timestamp":1789222274756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7krc%2BsLiZ8NWEm%2BUO88JO381klTp%2F%2FMVpd7bsaeHIkmznt91sJJrE7JG%2BdaWlYN2VRE9Xx1MlDPw5grRx4%2Bv0ynDSCwTyK2hfaZmnx9J7KAvCVbH77NgasQo3GTMc4RNnZWm4Rg6dw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80113c478deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":741,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:25.257Z","timestamp":1789222285257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66tm1K72ZZ0MEByQws3hKDZU8CebAv8ZS2RqKHj1hzNGogfvuGyaGQpUKPaSve78ZjthfZNG70rk%2BuAYtxWV03P8dixQR2nQtiHMDQTvAmZUgC76CfM32DjEmhYitlh1gvOQbukP1w%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f8052de6f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":731,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/1102053484","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-12T14:11:02.811Z","timestamp":1789222262811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /1102053484 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nx-powered-by: Express\r\nset-cookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; Max-Age=31536000; Domain=.jh-print.com; Path=/; Expires=Sun, 12 Sep 2027 14:11:03 GMT; HttpOnly; SameSite=Lax\nconnect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro; Path=/; HttpOnly\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpP6yT7njoj4T1Bdh8%2BkHTvPPeU7eSjIJLwq8CPsbgzOqSprj6swRWH5yz%2Bc6d%2BRHFzTf2ILr7cd7jswPm8nFDifs4p6%2Faw7Rl8VbcVO6z0Lmx78gH03jY034qeKmUe3BAgNt%2Be%2B6A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fc6b8f88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"mammoth_id","value":"2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2","quoted":false,"path":"/","domain":".jh-print.com","expires":"2027-09-12T14:11:03Z","raw_expires":"Sun, 12 Sep 2027 14:11:03 GMT","max_age":31536000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; Max-Age=31536000; Domain=.jh-print.com; Path=/; Expires=Sun, 12 Sep 2027 14:11:03 GMT; HttpOnly; SameSite=Lax"},{"name":"connect.sid","value":"s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro; Path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255970,"size_decoded":85374,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52735)","md5":"3ddbef560e838f07380d0767e86326cd","sha1":"fa080dec45f411fa5406e7602f1bce9595bc9666","sha256":"5c9018f26996d451675f45616912cd40ba59a6b3d1997881978029b203a0f561","sha512":"4fcc9d61ef530de789a91fac237cf14fec2b0b0c3917d60def995d7fb52c59cae9d564a27e3e662ea050497f98068e0c1dea10de573df74617d630e8de91e257","ssdeep":"6144:jI4xXw0okHcHAa0evnNyolRjiuj1QFntSplZ:j3JozAa0QyolRXjfl","tlshash":"fb446c1125f96b7e019b02c9a956392a1efdd33be652c5c4b54c8bb43fe2c2cd237468","first_seen":"2026-09-12T14:11:36.749229Z","last_seen":"2026-09-12T14:11:36.749229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":-1,"dns":7,"connect":15,"send":0,"wait":717,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/mastercard.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.940Z","timestamp":1789222263940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/mastercard.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"71db7e3e6cb790c798ee53e59438f4909759bba7f1b675f343c51259aba181ff\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 8968:321FA6:1D346B:2F9683:6A9684D2\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789222264.287757,VS0,VE140\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 01a052cfe889313e651e8513e97ec99f93bdfd8c\r\nexpires: Sat, 12 Sep 2026 14:16:04 GMT\r\nsource-age: 0\r\ncontent-length: 401\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":813,"size_decoded":1341,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05c5498a6ca3ca61f6452d7d88843e35","sha1":"6a90b8f4820427c8d1fd773e7d3ba22abd061445","sha256":"1c8f56fb410ec06e8467423cec0fb9fe54d6b18eba703591548d3159e744496b","sha512":"865d660fce4df17306d34901ca420e7e8430561a0a85840b2e2df7bd0a00a0cd14c210ad5189ee91008041d25051cbdaea0469b39900d104759823f52e56b96f","ssdeep":"","tlshash":"3b0189e5a7988451c9e503af6f3638804e1bd0a40189923ddf262f17658195f6d99ec1","first_seen":"2025-06-23T21:13:45.862706Z","last_seen":"2026-09-12T16:23:06.774177Z","times_seen":247,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":63,"dns":0,"connect":10,"send":0,"wait":152,"receive":0,"ssl":253},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Is@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.265Z","timestamp":1789222264265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Is@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 203\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: IUjtjWOU2GDXzhSHCOxjjZ.k06uLAhmX\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"57d60b5ca317dbf982310e8d79048791\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: MMakpD0DIbmSsGkp7A6rM9s2B8zSyU8_wgc_uMvmfTGYJWtyG-pc0g==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":203,"size_decoded":980,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"69ec21e6295d1570ed3817745f59cacc","sha1":"bcad7a543dfb9ccefa72b7000e6a1dfb9727c927","sha256":"9dd177d4e977f84feb5276fe49e2edee721015271fef3e7e26aef259002dad18","sha512":"72987779458f71b5b668c6bbee556800e1554eb6818ab8b08efe6a13ba98d66db45d4dfa526e56fd4429f49226dafa9c7d276d3d2be93d1aaf5e87eee1a4df40","ssdeep":"","tlshash":"b4d0a9ca970aa9a581a90ea2810c0042aa670d3908021e7fc5b1c416261e219ea8a5bb","first_seen":"2025-03-18T07:37:38.802083Z","last_seen":"2026-09-12T16:23:06.771942Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:11.756Z","timestamp":1789222271756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gv55RZ8XCikrjQjPxytU1FWq14hP%2B6g7J0mUwvjmchlw2KS%2BbAH9URFMUGI4dkNXeCi56HXRfqnbNMc6kEIJwY8mz4pspIII%2FaHUdzYhZRawEtc%2B2%2Bspzo%2B7K9Ug0nOfrdqXKkkA0A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7ffe7ef18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":741,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:18.482Z","timestamp":1789222278482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:18 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rdwx%2FRFUUdbRZ60Qb06YD25sO622veLajnI26zl7FuczuGM1J6XDLgGWem4XHRIMICKtvDh0ouc6bpwB4itYBhE9A8NYWl%2BgwYIc23B8SKbSBDPaF0zDR6%2FNCm8DNQFhqfIs8JsAXA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f8028895b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1092,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/No@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.214Z","timestamp":1789222264214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/No@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 210\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: x5hMioC93fqo94ywowGQ2mcv9TmRvRs1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"ab07e6a99882d77d96c02aa003fda888\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: C8Ouq43GrnRhyKaYEJ1NIgzgLxssWglGzp6g2ULUGa5VHTV79qBnBw==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":210,"size_decoded":987,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7006b4a6c4aef50a01790960fce2a4d9","sha1":"a4e8bbcc5b64273e423c0f81cc1fc677edfca576","sha256":"53d4a46ae56fb944ac07a2e2f63c83fde841f39d8c951ccee9d6d4eabb0cabfa","sha512":"137c1e98ca786e5b4219738ad5a4f492f649e2608e3e75cba7eea6370f2fd8da7ddb08d535d3f63aa1ba29f04b805fd84a625005c9d2233e759a6cfbcf7c1ab1","ssdeep":"","tlshash":"21d023dadd37ec35925d0fb3910e105c8853505d1f5151af4550d435154fd94da4ab71","first_seen":"2025-03-18T07:37:38.829529Z","last_seen":"2026-09-12T16:23:06.74585Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":6,"connect":9,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Rs@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.290Z","timestamp":1789222264290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Rs@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1577\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: nvDFfs65m9KVPjQlXNBKnPhIVtT6YO3i\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 11:02:45 GMT\r\netag: \"8fd825e8de5f5674621c414036334ab8\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: TEWLMPJchpHdGiSq-eQxZgqgpr77ht9SYLwYewYuo4dqO2oVjNn-6w==\r\nage: 11300\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1577,"size_decoded":2355,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fa37d9f79b90267dc35c9938ee6b7bce","sha1":"9c4becb12865445e4090a52af9b2f591eaf4f1a7","sha256":"c150310eb75845526e7468cabbc0bcafe6514f4d67204c39beed7f1d86a03768","sha512":"c35dbceedcaecda6fada2eb4d9d8fdedbfe2bf2c4012fb86b9c9e26209577c869dd57d1d03b1eb0c901f2d509697ffafb2fddb9bc082723e7ed9bee59b47ad08","ssdeep":"","tlshash":"a0310c8b5509ce39c8ffd4a1d29891505d9f26f446e1e1589539c0f558f40d3a16c74d","first_seen":"2026-05-02T20:55:48.379038Z","last_seen":"2026-09-12T16:23:06.73072Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:10.287Z","timestamp":1789222270287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d3Z7sH3tiYP5HW0e7LgQ1v41OrmGW4F0DqW5jOulBhjZ0HEM6GHhF5pN%2BScCieBA4G6N1tK85CHt8AiGN8six14l8AvkWMFdMGO0Ed7%2BLpT9Z%2FqxV5odSI8k7nWd9WrXK22ni06dQg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7ff54c848deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1092,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:15.445Z","timestamp":1789222275445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgexCVDFbsNmeovCGfsPHRm2APQJ%2FhwWt%2F8GZHzBr9r%2FYpJLT%2B0o1R8yLqZrJL%2BfZFMCkkQMiPrU4nWeyNQYg%2BY6m4MbHv8XcIkAowAUtd5d%2F03c0lZ4GEdKavZkyPnGu0Zc7NRpaA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80158d0d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1100,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:20.490Z","timestamp":1789222280490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zQ5uG1udKTn8GCBKXSwc0x%2FYIA9obZvPAI%2FrSFmlVAyZC2IlT%2F1veKbkKdWErw1SP0uj1ciFqVKpYdDkxYlSyxz4fcTZiigdN4wEfIO26T9DrR7VX0jA%2FAMTra2WXoNVRn84ZTmag%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80351e258deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:29.558Z","timestamp":1789222289558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PrpgPldXTaXDPe4FO%2FQFwdVSNjPeKDvgle9QMN0%2F1f4IfAMweRVJkZmw96FL%2B4p3d1cIgsT7YMlMijI5%2BwzPGZBe55J0a90DveLi03EZXFlzeS5X5m28YLd6ZPMVC6Klm%2FKZrrSuAA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f806dcd148deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/book/css/styles.css?v=1771629300","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.911Z","timestamp":1789222263911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /book/css/styles.css?v=1771629300 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4ooSN43mY4RtnQNHDfEeGkWzUFDSFU%2F4BWyfOjbvFcKL5MZpZMeZh27wO1766xQ7ePGKI0UQFg0ON1d7Ql%2BPQQVgiGkHZiwMv27iJmUxCkct70DT7VsNF013kn%2FSqu1y4Vx%2FgJj5w%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 20 Mar 2026 12:41:44 GMT\r\netag: W/\"9bdd-19d0b441340\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fcd7aa98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39901,"size_decoded":9993,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (388)","md5":"327907828684af6e145e66536a4b2051","sha1":"8ee986c3fc5557fd896d342543013850fe02934d","sha256":"f480303ed1feb42b748803554e87f3d2504ac31836d88dc5247986b21ab76ba1","sha512":"3bc61963142bf02bac5b8d0da6ee0a374532525f6d0b514d5cfbd5cb8baf96731ff4d211fd9ae3acf3376d556242ae2872f969ca46f0de2074f0b6e1ef495c29","ssdeep":"768:cq82ykhxOn51et/3gJQivtnlOtQAczFHWM:cq82ykhxc5W3guivtnEhchWM","tlshash":"170384da2bb54950b4278a787aa5974573198003810eed7cbfe1206ccfc93a5dbb27cd","first_seen":"2026-05-02T20:55:48.357566Z","last_seen":"2026-09-12T16:23:06.722511Z","times_seen":14,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/discover.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.943Z","timestamp":1789222263943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/discover.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"a898221ac2c9b26d70e44e28b377e6c8e225ec809b34f4fc7aba1f6201e446d7\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: B216:1091D1:72A587:C7C954:6A952ECE\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789222264.288494,VS0,VE132\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 27f19f3697388bcbfc324f45335e7175488cf284\r\nexpires: Sat, 12 Sep 2026 14:16:04 GMT\r\nsource-age: 0\r\ncontent-length: 1105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2078,"size_decoded":2046,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71dfc3b50c775ba7c65e51141f4bbb48","sha1":"82e6ca5d19b86e4bb2bc659395f9bf61f0f08ce4","sha256":"8ef8d5002bc7364c2468f24156a6cb5bd9321a4461f4fda5de5aa21cfc9a13ca","sha512":"c7e20a645942511d895a273993ab5a6fd168cfd8e46f9b547f5fb57c70d962301c4d6fcdea228c51c00c98c20946b3e08f2ce439cde56760b0a8b82f87f1bab3","ssdeep":"","tlshash":"8a4173e4efb174fdc8c96398db709c5831b734b87425ca0801ae9bd89981a0c8fadcd0","first_seen":"2025-11-30T04:12:51.981515Z","last_seen":"2026-09-12T16:23:06.780791Z","times_seen":210,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":63,"dns":0,"connect":10,"send":0,"wait":144,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Lt@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.274Z","timestamp":1789222264274,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Lt@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 169\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 5EDqn0j4QV8XWM7LxO_KmhYqgoRKkTla\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:14 GMT\r\netag: \"cec6eadacc401e34d4d827a30cf7e046\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: b_jTydPCHH3XH11GG4BFastiPujXN4RujhXUMRFYKjonfkFSyX1qIA==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":169,"size_decoded":946,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"b5a2cc83ec33160b06fa7ce6d980e350","sha1":"1e30fabc02f9db3bf4bd844f9e38c6aaa6e70cea","sha256":"2b49382efb5d7da4e4ee4c09493f898272183c9ab12fd911ec1d45f4d3d488a4","sha512":"e807a7c45af295241593b8b81994f59c0c3e6526a5bafbfe3a83df8ef967eceacda3ef72d187e821d9fcdcc13835f52d536dc76d06081f7b70ebbc0f8ad886ad","ssdeep":"","tlshash":"46c0c0ebb3834cfd43fe4c23048c0020a04b148c01849e1040e8f821310c100020f3f1","first_seen":"2025-03-18T07:37:38.795387Z","last_seen":"2026-09-12T16:23:06.743457Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:25.523Z","timestamp":1789222285523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2B6JbgVYlEu3tbGNlCVP0egMv160J69kKkXE4K7gQOCd%2BwI0emaU6gU4w17%2FMrJZnGMxH0ptNdXArcMKL8m0zrpOX7ETa6wrDhDOvsP5yX%2BzmGD%2BcXOYLA9NlY%2BnbKjDg774%2FHTiHQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80548eda8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":598,"size_decoded":1100,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.200Z","timestamp":1789222264200,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 06 Sep 2026 10:07:42 GMT\r\nexpires: Mon, 06 Sep 2027 10:07:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 533002\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":129166,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-09-13T09:33:31.967395Z","times_seen":86981,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":3,"connect":32,"send":0,"wait":17,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Sa@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.221Z","timestamp":1789222264221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Sa@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 957\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: M2s7mSqFAO.dZfjeoG3nXnhpJZSbsguF\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:14 GMT\r\netag: \"3fbe57f1645c787c4197b3f91cb680ef\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: QFpKPz7etYZIqB5nEMgex9qQQefPN7BZPQmWnU8dShGvuR-U3zNqHA==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":1734,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"424aef16af9413b81116f34642656e56","sha1":"10f1ad15d8a29b43a22469649c69fde953f770cb","sha256":"73d3d8b65e89f664c7cef0bb6a78e4c4cf8eb5d063811c7c33a6b6035211a2e5","sha512":"20d3bcc18054a5a1e14ab2d18cae8c3986a90c35b87bf0874933dbb692158051868ec75ae338ead7fbacbb659f8b644b2101ba241fdda5f60fb9eacf3262b9b3","ssdeep":"","tlshash":"ba1194eb73f13d3f50264b780860f8a28c6a1a94822d9214526119283e8a0a30788366","first_seen":"2026-05-02T20:55:48.38204Z","last_seen":"2026-09-12T16:23:06.791654Z","times_seen":14,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:13.390Z","timestamp":1789222273390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlfKYYoiyJD8ZpOli9yoIPFors0eag7QmeMSikVQBxB3%2FSt8MFZD2EsirIzIC79SIzVoU2qGEDQjhpV%2Bes%2FYiOOd%2BPFc3csn1YTWyjt1LTqNlHADkFMNH6%2BuAzaK0hr9tB9%2Bi64ERw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f8008b9828deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1098,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:16.455Z","timestamp":1789222276455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztiSQAPvQZs%2FGfkYhXPsl9NJVlRltkIKsON8PZ07mVWvI93X02jX%2FXEbFlxKEzGc7x0rZVjiQ45CHpHgnKxCPS5Q2owrUL2lhVmZWYnYxzgHdkR3q2KlAyRC94bWhOtC4CDRa%2FMIag%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f801bde2f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1092,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:20.757Z","timestamp":1789222280757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFmSej5zCCnACZ2R7hSOs%2FOek8TsQ7pn9Q4%2BHqnYXtL58JPCXwoR%2FpY46%2FSl70GbN67SAvxPE8MzSRoxBekTUts2iB5bpIAFmqryoIgxwjsA2z4%2BnXFKOeQcty7UEErO0iS56x%2BDog%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f8036be798deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":741,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:30.572Z","timestamp":1789222290572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tz1AYjnarKOGw3T52c1biPC2TPhwCxZfpNHBhScaaclJEcQHzc0VE0vv8evHGuvss8vSGm9Uw%2FRrrDlp081VNX8UQWnNYAI9tcNg74qfx3IS5etFC0T1yvY%2FlK1PLiGh2MBHiwifvw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80741f078deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1090,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/af.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.938Z","timestamp":1789222263938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/af.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 655\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-28f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1211549\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FoetC8rmjpI7FLo8o5vfwieU25sE7F7aa5BHhbgGUtYfZY%2BKR2Gd%2FZMpkEswK%2F%2B5v1yEVzWcRXMgMxjFi97OwxB8F5jRnuErk0nQTWLH9rL6VV7lOg6sGt2Z26Jvjg%3D%3D\"}]}\r\ncf-ray: a39f7fce0b5c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":655,"size_decoded":1465,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"cc87302deb32e2a6f3244fde58417b10","sha1":"30b4eb000d69e3d1a71856ea217093e8921e1e0f","sha256":"a2446e97066549f2901eabc81fdcb33e058647e0f0dd471ddaa85f50c5e18a27","sha512":"dc25c9c8592b6e6f08b59c516ab4e533b1c192cabce61aa047422b6feb13a54cca09a59df2db61c396f5f5a843540b38ba7266e7b244bd5fcacaeb1e2a26268c","ssdeep":"","tlshash":"d8f023cf1a591b649265c5d5aa067a3df93244901250b692925c10b069abd4ceb8c129","first_seen":"2025-07-04T08:06:49.893587Z","last_seen":"2026-09-12T16:23:06.772653Z","times_seen":85,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":50,"dns":0,"connect":1,"send":0,"wait":8,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Bg@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.228Z","timestamp":1789222264228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Bg@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:08 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: GOFQJH4n7UMBCx4Y1Oy0TZBzYkAxRb8q\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 11:02:45 GMT\r\netag: \"5164d7c5831a6b2ca99424447bf11793\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: sG9phObdZoiVBcalKvHO6xZaxKKjth3MjWAH7LVQ-eqZrlgCmOolWA==\r\nage: 11300\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"05660139a0bed8e76a330bd75c838928","sha1":"e16cc8ef88ee416b94d87480bd874385056a673e","sha256":"ee767c53d4a9ca68011a6e7d5492e93936573331cae748e55ef70a527091adfe","sha512":"0eeeca9f0c813e4156f1f3b6f4304763df3f56df45741bbd0d4df5b7ce6ba4cc4af86405c4f735b345da910c690a34a298a6013c5813ecc8b99c9af55aa10ce7","ssdeep":"","tlshash":"03c080ded1011d3fc51d5c6b404f91c06493695d11517c0151b49408202564549c4af4","first_seen":"2025-03-18T07:37:38.833889Z","last_seen":"2026-09-12T16:23:06.740967Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Es@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.230Z","timestamp":1789222264230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Es@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 1088\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Ds8Dmx2vRUtfo5h3EZYQyDJfvxREenVb\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:15 GMT\r\netag: \"df0c93e13ae9a6a69402fed9d4515d27\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: d2c4aRWiqM-tFN6QS6pgPFaXR7BOE21wfgYQGWl8mScO1nufazRa_g==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1088,"size_decoded":1866,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"777d1303b884ae2afbcae442ab3586fe","sha1":"4357348999a71eac59b76c864af1e379d74e126b","sha256":"33d482fac45a38ae69b21a174b41c96d72bae25a8d59c2e2a40406bf3608d18b","sha512":"9ee5ed695b32bb64b44c9ec873b69bd30a4821d7e20badd925a97caa2dce3bc90b72e013447b78937b614062923e8e8dfae7d1df1fd1f5e98aa00677316fd7ce","ssdeep":"","tlshash":"071196dcceba213d923989d72218d7015b0fabe05d03762ad14d42563cceb502ae82e3","first_seen":"2026-03-03T05:25:24.04666Z","last_seen":"2026-09-12T16:23:06.765967Z","times_seen":19,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/css/payment-modal.css?v=1789110700","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.251Z","timestamp":1789222264251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /css/payment-modal.css?v=1789110700 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EANMDI1LjUON%2BcMiAj%2FrV7Emziw14zPHAwBNGggLPpgL%2FRGNihx9HU6jdczjwJ3Ah4G%2BGKbFdho6x15N3wHK8YfAWiaI6j8T9qg7bxV1qdLWGMfa0BozB8Yqc1q%2B6Q0GUySV4P0ekw%3D%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 08:41:51 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 19 Sep 2026 14:11:04 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6aa5104f-98c3\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fcf9b168deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39107,"size_decoded":8818,"mime_type":"text/css","magic":"ASCII text","md5":"bbcf03d4d5f6e70dc6b90ca6da2d114f","sha1":"841c029c15b9f0361311362a4730e1b0a28a2822","sha256":"3a8606ed134c2721139ea26f3739e268c06958991e20b0339f388aac734abd07","sha512":"cb095c9acc2dc51b183bc45e5bc9240c9eb606b43fcd33b02daaa870f817beecc92c33e7e2b099098924b90ba5c0506946e6bee19016051557ede6acd4e415e7","ssdeep":"768:LzJVGQxfL4GdZcHSmHbcCCIRWiUjLRd5DWGs5c2:HJVLEGdqSmofjLRd5DWGsu2","tlshash":"c20352d16aa70618701fe93a118fdb99636cd042e90adc797bd0312cdfcb7cd9662748","first_seen":"2026-09-12T14:11:36.758659Z","last_seen":"2026-09-12T16:23:06.785574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Hr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.257Z","timestamp":1789222264257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Hr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 996\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 7_IUfMd.5GEWQU_9bR8YwVptLuPUdyyC\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"52d8768a8236e6aded4448bbba3c3532\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 156sziGb6ytFlqpBA8hnIdsfx8JQwiiYWcLZcIJvc72I-h4lAKVNtg==\r\nage: 26845\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":1773,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"a396bedbcf5a559c02996ced38aec94e","sha1":"cf6d47767a2a62e4992671b2ea6a63c0e0e079ab","sha256":"d416e0168f6eb8355b546fe6344b35eb0d76ff4bff0b6aeeb5e4e35602e6a2e7","sha512":"9ea42df5dab7b3b8174d6ce0033e4c4d77dd03803047a74c2a00e31deb856c4e7b93b72f40b5d25871486e0dbb6f257547e8fc806fb17519a6436f64f8eae563","ssdeep":"","tlshash":"6111a8c9c575d4e5442a1d2b4d5e054c6b27d22c14e17c3b9175d571b04cc485241a13","first_seen":"2026-05-02T20:55:48.339976Z","last_seen":"2026-09-12T16:23:06.750028Z","times_seen":14,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/It@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.266Z","timestamp":1789222264266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/It@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-version-id: oyGMSBUX5gifNAtxSePCdPacpvgONaeB\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\ndate: Sat, 12 Sep 2026 11:02:45 GMT\r\netag: \"36302f9872e905a23bb2045cecd891bd\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: as1sQTVh_eguKmzrGD3zd0b66KroQwDdtIR4gXf851-T4X0voN9CvQ==\r\nage: 11300\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":958,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fda9103fda62835e02a3f29a8b304ebf","sha1":"3009647d72c67b373fe8594b51f8998d30fc3656","sha256":"acd6090c24cbb6e61a6d9d8df451cb6193827b5de99ceabb48ce619b6b1a9075","sha512":"fd63d6fdf15137e10d18f6bdb7715aeca347673284c422662f4377c07d245c0165775e872aa3fec5538774bf4b3fd796e12d5f47e5f20c7636b6c5b646d9a51a","ssdeep":"","tlshash":"71c0c0c6e1282cfe832758f3908e0190c127793c0d0260c30851f031a4020304ec1aa2","first_seen":"2023-11-09T09:51:20Z","last_seen":"2026-09-12T16:23:06.739304Z","times_seen":2669,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ge@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.271Z","timestamp":1789222264271,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ge@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 366\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Lg5yOCDuhDlfShUcVrHfs.Huq7LOUFDv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"c53bd4524300c027e11048ece117a603\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: uoNQwPtvsp6dT_kQgem117h86eYkaGife6SWRZyET8tBfxac2UmxXA==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":366,"size_decoded":1143,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"bbca025d77b9e6d52fa7107046656ec1","sha1":"a9834dfe00a25a54e12fe3f83851ed5ef78befa8","sha256":"584aad0731bad63a3705ae0f7e819ad38267266a60a7029f2f863a568c369970","sha512":"99459001518df3b427218e9908413dc22b46a9045104989b64e2b4bcd9557112a2f008143b740b568f1acd21ca3c08af4f0dfe8465249a5731f6c4a1707b2098","ssdeep":"","tlshash":"4be068cee7d86ce5e51a695780532a68a76b042a0a01ba51a0688839857a2d5ca93e60","first_seen":"2026-05-02T20:55:48.309225Z","last_seen":"2026-09-12T16:23:06.789408Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Lv@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.275Z","timestamp":1789222264275,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Lv@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 149\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: kK73BL0heY74NTYtYq4v684JkwrpUxCx\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"534b86e209f9623b5e12df0e9bbd9a8f\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: JCRxgOjBn1-0-l2ZOYzAAZTIUvLx9dP8kBkOI66iyGfPp2rrJQu4yQ==\r\nage: 40725\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":149,"size_decoded":926,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"44d702b89bfde14a95451dd921b13e64","sha1":"3636c679250f4e1c981a60f60c1a3bd5452a2fc2","sha256":"243e47de15df4587a8a7449c34e44be4cd7914503eba1597e2340205103ea586","sha512":"4f948495f9ccd25b83d61a45395ecb3b0c689a1a59a1467d22849a8b4d2a411ad69b92e60fd732393a5404ff1fac613b8fd428bc1ca473169e84e19b304b5da9","ssdeep":"","tlshash":"0cc08cc7b2a42cbac079482388480b828057e1680fe246439094cc14080e018961aea5","first_seen":"2025-03-18T07:37:38.825679Z","last_seen":"2026-09-12T16:23:06.781584Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Si@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.288Z","timestamp":1789222264288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Si@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 582\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: VeCvSSeVpuUJCXZnqBZ.ojaf28G4haUJ\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"d4dad9312a784095410441c064c590b6\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: cKwcCkzFAGINpmREYrPOX_Y9aRc_L73RMgxBlBF6Ph-Xe17OIC7Wcg==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":582,"size_decoded":1359,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"a011bf048fdde7e06bf902c38a0e89d7","sha1":"d5043b458155c32c0af0397445dd5cbc8b4a4b1a","sha256":"a7f5a2e8d3fe21abc111e40a5bbfee3db9c5a1d5fd1ed447617dc762f7f88455","sha512":"5f9dead7eb393ec2ec64175db79c5937285acc38e27e0cd7cf72ae62b1af51c8be9ca95610a9feddf1038081c575a3411043c6203bdde9869599885b53ddd64e","ssdeep":"","tlshash":"59f0b1c123c3b42649f68822bc3308f93e2a88a8e000060a01c499b0704f4f86f8e46c","first_seen":"2025-03-18T07:37:38.836599Z","last_seen":"2026-09-12T16:23:06.756327Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Cz@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.231Z","timestamp":1789222264231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Cz@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 367\r\ndate: Sat, 12 Sep 2026 06:11:17 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\netag: \"0c197961028cbc8d3ae9248a605ec163\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: IioBtK9h9vc1lb000W2L_aHhDOccZ8B4\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: PERtjQ_YSN9rye9rQTaBxLpBqw24nYuPc2yOl_TEyxLwUekBwPhMzQ==\r\nage: 28788\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":367,"size_decoded":1127,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"cd40cc9fe974a499034d712cc58034db","sha1":"7cbc29592a15f448272a43ee8736d4cca4bb3844","sha256":"d1461e9784ab72390616a8edb0d0b315d05d973e514fae94e7d025eb9517ce89","sha512":"c7b9c24057b4c4e340d9e2df4197159c6dce64ddf3be654a1820bb3e2d800a3b42f443112f377db7cea2c769fdb7759f591dc5cd2d9ea1a30e0b32c74a804c5a","ssdeep":"","tlshash":"8ee060cf2bada4beca0fca23c804018ac81f25ec26b1f1021a0cc7200e2e08604d63f0","first_seen":"2025-03-18T07:37:38.822119Z","last_seen":"2026-09-12T16:23:06.783713Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Jp@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.267Z","timestamp":1789222264267,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Jp@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 385\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: aQmLSR6XA4BDEy9LspmrcyxKOIFNPer0\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"091e3fea9788d22f32f0d4f15908f734\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: QDwzWAC4zjy94kJDXcezyRiRlgo9qQYERaWi_JGrepmUmy0YolKyEA==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":385,"size_decoded":1162,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"d075ec16020cde76748ca66165150fd5","sha1":"cb4f00c037870f2af12ffd5837a5c5b8d36aa435","sha256":"c6f0b5419e93764cb2ac6ca105354951648b1a696c4a8e5684ccb7cf2fa2f77c","sha512":"d0be1b6f9b03a8d6ee939d808052c73bc6e8a0ecd02a67af92ab10f61fd93997fe5513c36f3e8150807864a6f23ab7ccd9153d7c0d9fee296f38dfa82232a05d","ssdeep":"","tlshash":"78e0f1df01863837c4e582fb22300da1b91746408911c02c761a884c30156c0bf9f2f5","first_seen":"2025-03-18T07:37:38.816113Z","last_seen":"2026-09-12T16:23:06.788745Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/My@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.277Z","timestamp":1789222264277,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/My@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 519\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 8xLzGCe.lcPAAgUM9tSqd_7skmhzvvOW\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"6f6e4df6f22b307ebdf4261ac19fbd6d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: J95iGjI8cowxGbNk8ody322WOWGhcP4XZXTZCwRj2TbxvAJ-U6iGvQ==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":519,"size_decoded":1296,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7d1bbbefe4637e44c40fe765dc6842b2","sha1":"b04ef5a498af7d4690b7b9c934bf79fe7ffe55be","sha256":"8845c2a7301dae096a621dbe3ba2b09b7426eb01ac3c4cda5a7c035a91787cd0","sha512":"4519dba2c8e155e6ed679be3d08dfb48924234f7879e7df8a1ca56e38c8c07afe2a31dcdbe9138c712bedb207718c7a057a15f7f19916820ca6db3b5191e1e79","ssdeep":"","tlshash":"aaf07ef0e7c04e3fe8aa2408039282638883db2ac88ab0574362c71dc03a00c830a5b2","first_seen":"2026-05-02T20:55:48.300723Z","last_seen":"2026-09-12T16:23:06.76051Z","times_seen":14,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Pl@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.280Z","timestamp":1789222264280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Pl@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 147\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: e0GlGjHb0uzIkniC1VHew5dBluwtBvwo\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"7b6441a7f7fc517508a0d3b1d711faec\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: BZOrkKJzvJ9Pn3QVftant9bdBN44M30aF74fRn67t1t8XWlJZH2csQ==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":924,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"9e2f32430dd2ac7923e2a524d57aa540","sha1":"1cec78e583af9d52c8281682c4468f18b11347a7","sha256":"823af82562202649d27c95bd1c4038a362b8e1c4c1791afae79af780c22c1801","sha512":"398aeb7a59beacc5b8da18449303fd16aeb6ed9c1267641d2b052dfe570f7ea8cbc98f7af81db911f0c8376964a62959e5d25a659bd93ac0c5671124bce901ca","ssdeep":"","tlshash":"87c02bddd1809c7ac8de0c73c22d0024805b191c0300500f44e1c4a81a210d07ec53f8","first_seen":"2025-03-18T07:37:38.805843Z","last_seen":"2026-09-12T16:23:06.727826Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Se@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.291Z","timestamp":1789222264291,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Se@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 190\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: Lagti1ji9D1IZ295YBVIqxZDk4f0aPSn\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"eb15b299ae31a61cf4ceff5c7a797102\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: FUAC7E2ay-ufPZPoPdf_bph8PhirkPl0vp6PITNkFK_v3X4zYYtrNQ==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":190,"size_decoded":967,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"bf63d7d1b38016c93634b6ce25646f52","sha1":"45c8df100aeb8892417c4b6a761d3e5f6283966c","sha256":"4dccff3c1b2f72ffef0a2a6a416effa36431efd5b1ff65e29b5b69f69770fead","sha512":"cfcd93939064c284de0fd14322833e83a80c56fed36903bf46cc3810a18553db2b0609aabea5393ea16a0f27f6de2ca71b11fa09c3aa06893574f07afaa6bfe5","ssdeep":"","tlshash":"52c022cb82029db790e6c926452400c093eb106a0e1811468430c12809d2110c2e69f9","first_seen":"2025-03-18T07:37:38.79936Z","last_seen":"2026-09-12T16:23:06.754514Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/BLGn8Io.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.444Z","timestamp":1789222264444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /BLGn8Io.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nlast-modified: Wed, 14 May 2025 15:49:45 GMT\r\netag: \"9838cf4d26237aa2c5d16985632511f4\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: Ia6ddl0ItvtNEfMjGheqQpzmXYo8bp2JWDrClUrmRHtauWnRprYWAw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 2690712\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nx-served-by: cache-iad-kjyo7100048-IAD, cache-bma-essb1270046-BMA\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 24, 0\r\nx-timer: S1789222264.484445,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 590\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590,"size_decoded":1346,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"9838cf4d26237aa2c5d16985632511f4","sha1":"88a056c8beebeff2d9374c2267aa5165ced800ae","sha256":"b248e2f34aee3aea1e320a58a402200f25524876a735671f3309f0f1bef401ff","sha512":"996534b4957367c419e0928970ed2d2984c26f7d574fe6c080f4c9d85443b99ec815bcdd2baa8cf0ebba83f2d3b25d5d1da5b7e1789a4ad268a097a21b3667ff","ssdeep":"","tlshash":"eef0419527bfc8034826a1d0e56d8009f721213f2f603a5a4402d79897d7824ac84b26","first_seen":"2025-08-11T07:36:01.691759Z","last_seen":"2026-09-12T16:23:06.78814Z","times_seen":15,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":4,"connect":9,"send":0,"wait":10,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.929Z","timestamp":1789222263929,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 12 Sep 2026 14:11:03 GMT\r\ndate: Sat, 12 Sep 2026 14:11:03 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1025,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-09-13T09:33:31.972707Z","times_seen":73832,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0\u0026ci=%7B%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22window%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22deviceMemory%22%3Anull%2C%22hardwareConcurrency%22%3A8%2C%22gpu%22%3A%22llvmpipe%2C%20or%20similar%22%2C%22dpr%22%3A1%2C%22timezone%22%3A%22UTC%22%2C%22connection%22%3A%22%22%2C%22theme%22%3A%22light%22%7D","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.190Z","timestamp":1789222264190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0\u0026ci=%7B%22userAgent%22%3A%22Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0%22%2C%22language%22%3A%22en-US%22%2C%22platform%22%3A%22Linux%20x86_64%22%2C%22screen%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22window%22%3A%7B%22width%22%3A1280%2C%22height%22%3A1024%7D%2C%22deviceMemory%22%3Anull%2C%22hardwareConcurrency%22%3A8%2C%22gpu%22%3A%22llvmpipe%2C%20or%20similar%22%2C%22dpr%22%3A1%2C%22timezone%22%3A%22UTC%22%2C%22connection%22%3A%22%22%2C%22theme%22%3A%22light%22%7D HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XycAK7LjAHEJBCWWAXphPNUvCZqrrUpiQd9ggx0cnbrpEUauBqaE7e0WJZc0txrPFISrY%2FBBefQyqqVetUhsoFcPh4rDioJ3pBEHJKThEretLR5MEauGG%2BWBHTGJMBDb6EmSpB3%2FaQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fcf3b028deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":735,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Nl@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.278Z","timestamp":1789222264278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Nl@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:13 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: XV7NgcPcMdbB15oh6gpizFdW41bkde5K\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"3c08bdb98f8bd27cfa60b053dd98f042\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: oNPMxi9nMx9YqvLexNjBqesh0K30iPDjkIBGCHes9pfvJIfKjwofuQ==\r\nage: 41513\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"6981c145caa140d21c5ef6a8df1e0632","sha1":"1a4fdf6f6fa9e17abc0c0728d98cf304b51b58e3","sha256":"5024952a08666993287ec58f21c362fa58552efd4e1a23fdb67f0a49b5e6ab07","sha512":"852ac7fc2f91b7b1c44031e3287410d85b73b10077b5fea8cb7e00ecfb4dede8f692d7ff80c77f11a6dd494044112c0f7424b5b5e49b630066dc42513c08713e","ssdeep":"","tlshash":"b1c08ceed2062c3fc56a4c2b408f5290a89b591d2161bc0261b2981860755468a85af8","first_seen":"2025-03-18T07:37:38.823703Z","last_seen":"2026-09-12T16:23:06.747554Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Tr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.295Z","timestamp":1789222264295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Tr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 565\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: h7ghocMscvGvykiZSrghgAFYf8wxj0J9\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 11:04:11 GMT\r\netag: \"596ccdfeb22c63a3fe5982f5a25cbad2\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: qyWipTV8ytMMQ_rJMqabjStjXXaDNagbUVGofKlT-NCcARwo8NRGpg==\r\nage: 11214\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":565,"size_decoded":1342,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"af8339e88b4077bf0701497dc34e8a40","sha1":"726b5133e255ba75a15a082243c236d73f10b858","sha256":"7a4450d4dcf596ad7ea1ad646dd667879e54d0714f241f8ab4c1d62120abf70e","sha512":"8ca04ec266cc3ddd851ed39485bd9757fd6b173b995942f13c642380a0808127db53940553cf2253e4f6cae130e203de14a28a88c20e6cc3ed1327a073a6d19f","ssdeep":"","tlshash":"19f020fa21dbcd0a825e860367a9aad2b14f0c8846512412c0f09c6ae07b4281df677f","first_seen":"2025-03-18T07:37:38.794053Z","last_seen":"2026-09-12T16:23:06.776768Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/audio/new_message.mp3","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:06.355Z","timestamp":1789222266355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /audio/new_message.mp3 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:06 GMT\r\ncontent-type: audio/mpeg\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"afae-19b41a8b898\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 21 Dec 2025 16:05:35 GMT\r\ncontent-range: bytes 0-44973/44974\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSlqcwiQ%2Bf22Ih9WZNv16jdyKAz65uZkK%2B9U2L%2BkKQlD%2Fy0LUrxOhIQs1Q%2FIorDCQ0wdK%2F2lT%2Bhz%2BqYAnZi5AN08IliTVu7MlCCnXyHS9Ncx%2BeYJuTvGc78ufBpByoT5LX5IRae7sQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a39f7fdcbee28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44974\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44974,"size_decoded":45739,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, Stereo","md5":"38bb30e100bb6b09a05b18a1e9aa54ef","sha1":"9a9d70f47917ac29cb424375d330e2e9c3083493","sha256":"e05bb3128e0d2f4740fc0bec894b9e696d25b85da9eb38a76aabffb5b3ac2553","sha512":"a8249fa75fb622cd142aabcf56151c14bba5118975c3d35b80d229cafac68ed49bbb93b1b400b90e3b688708be06eec8cee2af4228afd0262c87a19eee464e75","ssdeep":"768:KTvXCHyRbFOA2hnhlevGWmrR2uf1U3YxrQ6p1lY0vxXznei:KTqcMlfWmrIu0YxX1lNvYi","tlshash":"8013f12a3a79ba60fce1d57d7c0ac554e1499624e010cef8aac047fc833b2561f5fac4","first_seen":"2026-02-01T07:53:46.685196Z","last_seen":"2026-09-12T16:23:06.783061Z","times_seen":201,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:11.389Z","timestamp":1789222271389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWY93BI4EAdNliAewLlcJsdwS6lSPrN70UThPWqlI5sTL9TyJZVuRVqc0SpPG7hHVV9Hym5we%2BsEUBZir7dvB0pr4PKW1cWpbWuK%2FQmbIK5on48sAaTvZCdVeGPNUF1XXBdyuuwazw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7ffc3e8d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1090,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:13.256Z","timestamp":1789222273256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:13 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pCqtXw7sMW6upsYV5%2FNi83rFEJFOiOvKyHzP8yfoIV888rIyiAVIpsluxcPd8L%2Bl3wGC9pWZJXHhdCpwV1ramBIkfmgjxOsnqvlYIYIyvHSDWJXswEsT4j%2FuXshmjaGV8vg0gKme%2Bg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f8007d9358deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":737,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:23.507Z","timestamp":1789222283507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pQQZVkgqrg0a211es1e0K64f4cPt9jZ08EkJ5Lf%2FeYVk2t%2BovHZh9lKgWk1pitAh0sCdVj3lJyItwCdHnZ1WzcCo9EY3ekrAlr79oPQzwMAhFm3QHIRFxd50qDoUBdZJMpudBCFAw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f8047eb178deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1090,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ee@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.243Z","timestamp":1789222264243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ee@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\nlast-modified: Mon, 19 Jan 2026 12:32:10 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: es731hHGCAnqOe3WtS5DMWm1hiVuvIH4\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"b5dea4de93a9bca084e79140163305ba\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: bCFAEMaUs88x39dqYKIQXC5kTUVn2A36bttXlTfmTJAaxKVmV9Uiqg==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"04a3062e8b93eca84e9f310d543edc0c","sha1":"b5fa19cbfebbcab4849c5e11b47ce96ad2146998","sha256":"9ae2a2bef60632bf17428dafd02a54d176041e786532d28a5f64a6ee10e976f2","sha512":"1c1ed0b01ae45565fc702fad8e4c5baa8cf518ac356e3732c5cba8916fbbd7f6b33df171af697bf63f86bb3342e35c7753a40e4b583564b5a36bcea883d06833","ssdeep":"","tlshash":"8dc08cdfc2a26c7fc5aa5c1b811e128aa493691e0269b84290b5980c2436a858a846f0","first_seen":"2025-03-18T07:37:38.835669Z","last_seen":"2026-09-12T16:23:06.774881Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:06.233Z","timestamp":1789222266233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 68\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":68,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":false,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"257-17/cZ2Itg4oEyEDERyIHOQbfOiY\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=67lHybkkctUz6xcvt3qL5Kj%2FQ7HoKcZXQj%2BuX%2BwVgLNdZd3CxPocL%2F7tenXOjp9EgyAIpuZCft4jyVHWfuSO9yHrxHULlMJQGviN7n8v99OlGUG4HQp%2FobAum%2FbjK9wfhExIW4M14g%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fdbfeb28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":599,"size_decoded":1099,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84eef949869585db2f14ab40e66a80dc","sha1":"d7bfdc67622d838a04c840c44722073906df3a26","sha256":"7ec210506a681a4a5870089c61eb87f2d3c22d661d445487d9d2770da29eac87","sha512":"ebaa314bd922f28a04abf5e1b41c7fff9b0cb302a41d16b072f45be4120d551b55264afc9b30a6f9ff0f08b743f82b2042c139cc405e2d34b5b1e35191ea3a10","ssdeep":"","tlshash":"26f0412ad6a4b82ff6a20241f44c1597d379243c86503885e2ccc10bbe8fb752a3c382","first_seen":"2026-09-12T14:11:36.77629Z","last_seen":"2026-09-12T14:11:36.77629Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:07.233Z","timestamp":1789222267233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:07 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zw3d%2Frb1rfusRHPWG0eRce1cpi%2BPYm%2BuJqvEDwYuT5FXoAsYFWc1%2Bo%2BvT2xc%2FRB8isK%2FR5friCACWeO4IcWJ57BM1kt0sQe6BbfvFEnR%2F27vKbAmakd041eFjAgdlE5E3uIJHhDAow%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fe2382f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1102,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:12.390Z","timestamp":1789222272390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Op2fitIq7ZdXpuhTBINrI24dYlD1XPqOpeuipc02GwQuE6PsEthgFAQ175WouEWyYKqbCdlkftvBF38pc4%2BBdFfKklNdxcIFGj%2Fx0Y%2FWkD%2BSx08lwv7cyJ00OMtnszMnYaq%2Fv45Xw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80027f9f8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1096,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:16.257Z","timestamp":1789222276257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCXNb6vmFeAaigkL9Ru7ZKiUjs9aegRu3VuNaPXogrCyPmtHc5P25O9%2FCj1XbTfMWw3prOlX%2F6JVNoruJBL5NMsjbtRgQA1cM2DiZXpH%2F5BP5iKYjHAerWAzGW47ehzdC8JwZf7J8w%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f801a9de48deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":735,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:21.489Z","timestamp":1789222281489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eg%2FkNW3dCeo7iB1AmTNpIeLQmvY3oMK2wZFQ%2BQxvY6Vf5Ff1Z80pU6NyLBAAfUvz%2FWS5MXa%2BVdM%2B6RCl%2B6XjrAfP4BRWxVNzQQ%2BSpO2EqQSrf3Svgy9jaq%2B5fyl7iIVkPTouPhoctA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f803b5f5a8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":598,"size_decoded":1102,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:26.757Z","timestamp":1789222286757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qenOAbrpsQkZ22UZMEkBPG%2Fc5Y6Ucwf1eHS05MOeackJabEY4Mkb7iWFTXJ04tQCXm3aeBbq6J3tuG4b0ESmFQn18ardB2pINdfypC%2FYBy0skS6aSKVy5oKlY5e5d9gDafO4da8T4w%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f805c38b28deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":61,"size_decoded":733,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/css/support_parent.css","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.927Z","timestamp":1789222263927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /css/support_parent.css HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:03 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W3EaXpGXh7dHju1%2BtDMQjQRa3DuqwwbD8JKdP3GnybJqBAb2Ui8W5drCe7%2BzEvw0NwOmKsdLGhLBLkCkKFFfkNAzpkLeM1niOApGIku3bKCvRxU4X566y03AwT6cCr0w2BLk%2FZ%2BnEw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a39f7fcd8abc8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":756,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-09-12T22:32:23.950484Z","times_seen":47425,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/jcb.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.944Z","timestamp":1789222263944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/jcb.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"2726b2424d363025096b1a5ec48e0c86efb818a4787de8105f29c8ce44f69869\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 8B30:2D624A:15E5F6:1E7DD2:6AA1C071\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789222264.288763,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 55c4bf98f3d53a48299810929f1cd37869293045\r\nexpires: Sat, 12 Sep 2026 14:16:04 GMT\r\nsource-age: 122\r\ncontent-length: 1536\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3202,"size_decoded":2477,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bb2d74d95894464f28bf7cb84060d5a","sha1":"951e92034847cddab02bd6a2777bcdf86a6dcf64","sha256":"5feacae1824b67253308bf7e85e5d128bacf834d6c422370eb4ecafd206444dc","sha512":"0ff79dec8263bdb7d182318aa67a2edba5e42cc96b80a81b9a1b6b099caf19a045630f4f988f2c1dfc488c25267743d1a5bf13246f103bc82221d22db38f9e14","ssdeep":"","tlshash":"0e6184eedb79e0b5f04593acdf105d9c260f15ee6820c368c63daf4a45b3e894a48680","first_seen":"2026-04-05T23:18:09.645402Z","last_seen":"2026-09-12T16:23:06.765124Z","times_seen":15,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":63,"dns":0,"connect":10,"send":0,"wait":16,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Dk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.233Z","timestamp":1789222264233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Dk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 195\r\nlast-modified: Mon, 19 Jan 2026 12:32:09 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: LxRwV8JCAbwncFjfIjKSTuiZ3r6.Bz.h\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"299ad6e5496c4b5abeedbf8ef32bf279\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: U4MPEwj7xRxvKsqN6Y-O2bs2DmJhh7V2lQgwuXmoh54sU_lBYwTwcA==\r\nage: 38163\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":195,"size_decoded":972,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"22507a7b89f677e6784452f14cd0d0cd","sha1":"21b2a426a3676aa83768b979624d1efdf444fe76","sha256":"2f6509a1371ee69b53110521b8ac1e21c51285b03acc95d14e9ede15e522d4c6","sha512":"e482581b0bef87023567fc50a4075597e7ca072032fd3722879687651696b2d0e0c4b4bae5de317bbb090a56da3ae5342037a2984cc29e48d8f986f560f65b36","ssdeep":"","tlshash":"6ad022caaa18ec6d90eee823d6040492806341280d121081427088081a1583ac709af9","first_seen":"2025-03-18T07:37:38.821351Z","last_seen":"2026-09-12T16:23:06.741824Z","times_seen":2674,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Il@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.253Z","timestamp":1789222264253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Il@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 518\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: YNqJYojr.DPgmCyoX2_HdHxevPTzVc.n\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"962a361a88e2a8618a69f640e6eba26b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 8dJjNvG69IVcRcTH2U1NfRIJfg0g7TtophD8DD_-2eI_FSsmcLn3xw==\r\nage: 46223\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":518,"size_decoded":1295,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"ea731d61528b7bf005ce3d913066c30f","sha1":"fa91a8b3cec6d5ba6121e5a29b5025cc2f1a1dc3","sha256":"c7e996e74254942f092d4197e8ef1456e07f80f0bb0f2b6ae2dcba1bd6cd7733","sha512":"48e385c199e560258506f071f87060ee18cd548f42219d678e25cee3cf9d2ef2090b2e50e7a4a1f05d07d5655dcd65810e005620b355d835e1d02eda95dd4247","ssdeep":"","tlshash":"90f005ff7abf582811971c7aa01d16196db7cdcd0620d0c4501190bfb17e1912af3162","first_seen":"2025-03-18T07:37:38.822924Z","last_seen":"2026-09-12T16:23:06.749235Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ru@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.286Z","timestamp":1789222264286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ru@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 164\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: pFEONeuLUhcoXabl3vLGRgdMd8xjU8g5\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 08:06:16 GMT\r\netag: \"762549c201af2e8bac9c64f26223477c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: hks_2a2LC0fKbqAV1fNEoVrBcvzgiFoMst1S8lplSnc_yJm4BQtUMQ==\r\nage: 21889\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":941,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"29986cc4f96a1fe5ff8ee2b81b8b2e77","sha1":"8bfb65e111012579e90d6797a1f2ca58693754a2","sha256":"5a8dadd250f0429fe5b5aa7010ce22e2f8145607f1137d79d4734911f7fc8217","sha512":"3308128d317896d5cb81e9ce20fa1a4dec3bfdb0877a11abe826af21631f1e64bf7af70adf32d2ce50fe14673fc0c731defa2892770d65f58f3e7d70b06826a9","ssdeep":"","tlshash":"29c080dad3d11c7edc354437d00517705593454d0553940b52f0d514950608596f57b1","first_seen":"2025-03-18T07:37:38.841719Z","last_seen":"2026-09-12T16:23:06.773466Z","times_seen":2404,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:27.541Z","timestamp":1789222287541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:27 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAjysXd3XwxhQBhTZHFaa6NdNBis4uf6oV0yKagdtXGAQUX4cNKKWcWJHGZATwU4fyBzfcVdtBIU0su%2F534sn%2ByKRIqFSGaCM6d2siNhkhmKFYdLst%2BbB3OHk1YWhvMuh0hYvVpxZw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f806129bd8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1095,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/book/js/script.js?v=1771629200","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.909Z","timestamp":1789222263909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /book/js/script.js?v=1771629200 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:03 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMmaKSVKfWgdT1Evf4PbxK9ml7eGgapvFJ%2FnN3jVipy9Yn7CKeoEGiShqGkJh%2F4O4O44D13W0iXkzHrXgOpkyfyo57U24%2BROdIml1IjRAI4Epyn2BfNBKsfcM2CRQdAoAS5PL81CEQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\ncache-control: no-store, no-cache, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 29 May 2026 20:59:09 GMT\r\netag: W/\"301b-19e7588a148\"\r\ncf-cache-status: BYPASS\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fcd7aa88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12315,"size_decoded":3286,"mime_type":"application/javascript; charset=UTF-8","magic":"Algol 68 source, ASCII text","md5":"a45316929ab38c470f84213cf4d1407a","sha1":"0675f47e9ff02c185f47d83ce2de1161c5782449","sha256":"2f218382621c06f00a84958dd8ee0a7cacdd46573175007a29c42b31c7bbc130","sha512":"a6908415354865fd35964793193eb5435102ff3aaaa806eaaba6e3f7effc32227855388ee5cfcaffb5640b80e37b8d2c18691c91fad2de858f3bc50a36298c7a","ssdeep":"192:Na+N9SCxAP+N9SCfWXXWybUBYPosmy0pQ3BdTpi6cMjTpQlnyJZzLADCn6YJ:srTD1xj1l","tlshash":"8642251416f5183642b364ff7bcb91c5b62201ef984198793cac960e1fa0e945bf1be6","first_seen":"2026-05-02T20:55:48.333704Z","last_seen":"2026-09-12T16:23:06.769467Z","times_seen":14,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/js/support.js?v=1789052700","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.933Z","timestamp":1789222263933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /js/support.js?v=1789052700 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:03 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tnOrcGpPE%2FeZpBVxc3xEvpQ0sXIJ%2Fc4AblnzxOq0H3cRhzGamIFNM66VrLxkfMqV64m8uXbKGJvwACcXaxVDcQum7A%2FwVichNPqkhXZxaX0LQ7b2DGlmAOAl9LSUQ95N8dAuqhcMPg%3D%3D\"}]}\r\nlast-modified: Fri, 11 Sep 2026 09:01:28 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 19 Sep 2026 14:11:03 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6aa3c368-e4a4\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fcd9abf8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58532,"size_decoded":17675,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1750)","md5":"0a19e6926a0362e493561be5e79ea28f","sha1":"b3aaf81de5e6889f430ad9f4b8a093a7a668b4c9","sha256":"ae7998fc64675545bffabfbf8d7289ea8fab404907bc759ab42e56ab5c3ba50c","sha512":"08189214eca164cfa8dcec38f156f179da43386c04541c21909a6c42a4ac601eb0daab726a2016259dedabe79d4c4c638b01a57bc624ddac7133721bb9bfe0f9","ssdeep":"1536:MyIVApRhRH6zekLrGU+44BvfBGgxiT1442k:IVApRhKN+5BfB614Y","tlshash":"48430a692af7002914776179bbcfa70533259007a107de243b9c564cbfd0be992fabd8","first_seen":"2026-09-11T09:13:19.973025Z","last_seen":"2026-09-12T16:23:06.78678Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/maestro.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.949Z","timestamp":1789222263949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/maestro.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"b9851849fc716685f0543bed6e51e61de8c314460c47403a1c1afe563b259132\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 5CAE:3B4F6E:76B611:CDF89D:6A95439A\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789222264.047617,VS0,VE138\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: a7e6454e9b657e149985c8595667e19704ccd18a\r\nexpires: Sat, 12 Sep 2026 14:16:04 GMT\r\nsource-age: 0\r\ncontent-length: 730\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1418,"size_decoded":1670,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a44ff01b20aa7692ee7e4579dcd478f","sha1":"398894130418b3c7b30e32f8ef5f19971e3e2493","sha256":"eea18aabfd772d504260fdced1e4ed10e36483265239094c9e8abccaf0feafb1","sha512":"b7a4fa7daa06821c375201057c9baefe60b3f9522a8bf0c49621b26c1114eb2bed75682f4776eb8c739175057d1e367284b87d8d947d1dbf2b5004ba4de3a297","ssdeep":"","tlshash":"742122ec276488c04844cbe2bf3a1acd0ddfc5d32cd5cc59e51c5b0a658463a9cd1ae7","first_seen":"2026-02-01T07:53:46.692926Z","last_seen":"2026-09-12T16:23:06.738421Z","times_seen":212,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/In@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.255Z","timestamp":1789222264255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/In@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 331\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: eqBuykUKg5MAStpFzippifq17J0O63Kw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"cd131635eaaa23c462720b8e8ee777d1\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: PshrPTpew1KzqKt68MHwpB4t5pKi-ud7YKGH04BsYcu2YxYKputTTw==\r\nage: 27574\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":331,"size_decoded":1108,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"213daea409debbe15cee520d43cb9776","sha1":"34f8985f04bc4add0be26254943abd4dda7f626d","sha256":"87c24918d8be1eb2ee1588cdca289145f513ad81d61ca7a3518b3ff30b89b459","sha512":"2187632855251779ee93d701d4b025ccc9d09ce30793867a6f7ceab5f20a2eb2c79366edbf2e4c48b5c63da7b66be2189ff978e2e7051dd57d30f6398afeb9aa","ssdeep":"","tlshash":"69e07dc9c0127e75d1e59c92553703304acfb549dfb089a211e3c45be2135c84d3d9f0","first_seen":"2025-03-18T07:37:38.831438Z","last_seen":"2026-09-12T16:23:06.729887Z","times_seen":2673,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Mk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.276Z","timestamp":1789222264276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Mk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 665\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: ampH3HeN9Qm_v3g6FQZdjIhrcmEDiEUU\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 11:04:11 GMT\r\netag: \"5d64a9000b01d06b9ff384f6e026c21b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: XyGbi7iOzotqVd10ZEUPwboy7kBwP06JLsR88XKDoWVtBkNTT1Qo2A==\r\nage: 11214\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":665,"size_decoded":1442,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"9cfc39caca7e42f06f0cc949e3ab70f0","sha1":"3e2b38ba9a78f27bc34ba9a8c555add8e384f67a","sha256":"9a74d13db29351fff6fb4dec8de6f72afa63813d0b50e6dc869d0a2a43ef9188","sha512":"4016991cafca142352ab429e31bdee37de5fc31516d6d67451445b2a8a88c2287362f335935da20a894b5877effe0d8e526ad3a708e426fcf75ccd8a684185ea","ssdeep":"","tlshash":"0e0183ef7c0b5a9f99b3586249840e938297037f0c8fd1a1a0af502c08875ca5bb8e1d","first_seen":"2026-05-02T20:55:48.313017Z","last_seen":"2026-09-12T16:23:06.767566Z","times_seen":14,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ua@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.297Z","timestamp":1789222264297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ua@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 148\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: ceUS0JhkmHRzt.Ip4sNnL0ulv2ht5I9q\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"082d687777aec3c98924cc3d7fbae7e7\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 66hQnT5bkUMOnkGU1XvY_sYqRPAP1YKARtSjBDf5sRPeVOoia3VEWg==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":925,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"93732b6c8c2b8039830b0ada2b781a0f","sha1":"477e55b42a9634fc1abcbcca6c31719b5c81d506","sha256":"f8db51d49594ed54a9d2781baac44ed6c6949599a51dc2f1c9e7c53bc5fde211","sha512":"09a0108a44ef1187c51f358456557ed8c99ab4d391834793d7fd0fe167af5fd014bbbbac74cbfa894166f6c9a51a7c8ad4f7705ff7bdefa6e50c2c53d444b971","ssdeep":"","tlshash":"2bc02beaf373dd7fc0dead37421e006980932c2c0d53790700d9d41823114e1a9c25b8","first_seen":"2025-10-08T08:50:15.434274Z","last_seen":"2026-09-12T16:23:06.787493Z","times_seen":282,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ca.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.330Z","timestamp":1789222264330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/ca.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-11e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1000051\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JQq%2BijM58NieQTNVE20aSrAOP4ngv%2BlqvaN7RHhrgKQQXPA2D21WhwIo1iWeAufm9gE3xTpOxfqiyKrH%2B8L3Vjm5PZU%2BC7gjGso0LUWkN%2BlmOUmH%2Ftpj0GtdXCD8QA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a39f7fd019ca1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286,"size_decoded":1122,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"0a867d3850f151347bdcf48c254d30a5","sha1":"95ecd1576f3b7d83a078adb9dfa83695251ebff9","sha256":"c239959c36c5316ff09b76cdb342732ee7ff12a5036ae602a1f82fcdc6a2da0b","sha512":"99ecd4d33f281cc9462b0820b77777a5851a6942d87fa4604a0e5a4ce02e1c66fa9d2d35cc909eb82d0575dd28dc2fa25f0e560f17db74081c4635d93c40c8bd","ssdeep":"","tlshash":"cad0ebeb03942824e50dcbb6e688440fe83b710a0f298d000f47083b043918691cc30a","first_seen":"2023-12-21T03:08:36Z","last_seen":"2026-09-12T14:11:36.788121Z","times_seen":256,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:08.236Z","timestamp":1789222268236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wz5GYCOfZdhiXhDBYGVmjmin0sdQNleUbtu%2BdVpH6VHpLiduAB8bq6vccQJrFsRXPV38wojH5%2FkjOqUFbnXv4KFdq5SKhcGPTMIeEoEVHHHLYRBP%2FMJ5tsg3tWSGD250BoLQKAL%2F3Q%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fe879758deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/diners.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.945Z","timestamp":1789222263945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/diners.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"f0722cc8de94326b2bb229adb13bfd7c66eeecdae64fd90f18dbac70a714cfd7\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 1B10:21C9B5:15CFEC:1E6710:6AA1C071\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789222264.288175,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 76045ca427d191d4a760dbe33c2897fe72297b3f\r\nexpires: Sat, 12 Sep 2026 14:16:04 GMT\r\nsource-age: 122\r\ncontent-length: 466\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":804,"size_decoded":1406,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"43cbbcfd28cac6803bd6327da3a0f2e1","sha1":"f53a6da9a8074bd31b20260eefee9db561938375","sha256":"3fff05e537bf45e3d8b2e76e861654b5cb9e519eb98fef267d76b1a2060008b8","sha512":"730a885eb6d27758da40a62003a7d71d1993f3b26a5dc5f39a92fffede89915535a4644ee2965989d143eaeda3a82db177a9386b294f66376d676607ffaf4ae6","ssdeep":"","tlshash":"d00141979bd17cb2ac09436947ed2b5d21bb00fc2105cfbce23a45c1a109de9c7a3a9c","first_seen":"2025-11-30T04:12:51.93979Z","last_seen":"2026-09-12T16:23:06.771212Z","times_seen":16,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":63,"dns":0,"connect":9,"send":0,"wait":12,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Th@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.293Z","timestamp":1789222264293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Th@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 183\r\nlast-modified: Mon, 19 Jan 2026 12:32:15 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: HUyGG89NdlW46Osg6FO0.8n1RwbrEiLV\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"ddcd2550c5d5d7ff8589d7799df8723b\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: rvEwPt_6tOFkE1UtGuTPIG0oZFhQo-WdmlyYnqWeTfxw7C9fppYUpA==\r\nage: 47995\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":183,"size_decoded":960,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"51199138b31635f838f723c889d6e992","sha1":"d4089bee1730192b96fa9a54611c80312441db72","sha256":"d1d51cbdc2a7d461bf529de2e30438e420e2f9d6183867edaddd12e23daa3664","sha512":"c70f2dd1fa6ad6a5f0901ae5e9ae3100ef9f83f50a309bd7d433086b2e33753e0631eefcced69c69830e135245e4b6b394d9d5cc1ea16fa62072ca0e0d1779b5","ssdeep":"","tlshash":"b1c022caaa702c76c9690dabc0140c4080fb19b804269483044148080823255bae81a1","first_seen":"2025-03-18T07:37:38.832349Z","last_seen":"2026-09-12T16:23:06.784966Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:10.253Z","timestamp":1789222270253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMcnCftvWyQaDWM%2F%2FXQKXaG9q63P473yVb2uv%2FVmFX9rv4Hq7WdeLIhbPjvDC5SVh5V3%2BtYNYUqynwNaJ4O%2FCU3nyQARAmXeNeSZlm6UvxBIZUYDkp4%2BGjqgl6tveyzUjwq7HsfnFw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7ff51c708deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":741,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:14.446Z","timestamp":1789222274446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:14 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kx5%2FmBDNF7adtFtuIumTQ%2FXACd3bEl8vNY0I2fTgm3NKoK3troLObbBNgfN%2F4z49q%2BLCeePrSRyIwEy48A2bucZ0AKrlwHBmYl%2Bipqm8SVv3wC10dQkD3QL%2BEv2c3ibHV2eC%2BykGXA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f800f4ba08deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1100,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:17.758Z","timestamp":1789222277758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:17 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJ09%2BlvBlTXdCgqHqxvY1DLQXk6Mc5zUz%2FHyr1tKe8CRz1h28%2B2rtFpNUxxW8%2FwShvG0batV7hv6wur8Mg2C%2FS4k5ntSGhkacspmDvo0guVpgvVPICryUp2yvBzhBIbXQt06X7J6GA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f802408328deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:19.257Z","timestamp":1789222279257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivl9AkpC60C3A2BiP4woOKwIP1dUfXxjgwikLcjsdMV5V66abTKG6lGA9yPV2o9ido1FvoHIsAumlZQDvhyIxptUrLySYM%2BvOjWDbqiXGVXDcyi7LC%2Bo5CHY87Uj4QBw%2B2lAGk6h4w%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f802d5b358deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61,"size_decoded":735,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:23.757Z","timestamp":1789222283757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /api/poll/1102053484?page=%F0%9F%92%B3%20%D0%9E%D0%BF%D0%BB%D0%B0%D1%82%D0%B0 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:23 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"3d-91VjXIAej/KHNzJeAxY5ykae5RI\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zt2Y1GvOwleZbNNJG6lC%2BgE7QCFMRc%2F1rwwbTOpPdpERUi4VP6qhQTHFWo%2F%2F1ojoLjaWMUe3ejwVRLx%2F0ZSYP11JT5oQEVzvxVqjfdicHngylYSlR7iRywbIay0gXOxmVf0YPGGmkA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f80497bc98deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61,"size_decoded":739,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f12e52f764281909efc48e453c9e1c38","sha1":"f755635c801e8ff28737325e031639ca469ee512","sha256":"839b3d7ab3e132ef2f5c3f6fc95d9f0a9b8339e79df886efa0fbada7b4e56e84","sha512":"c6a61c82444a0a8e4442ad24806df801118c22dbdc272ccf7307f7fd82c8334170285ace356593e4007010df1ecf4f316482f2d4a08cd771fd68ed53d647673c","ssdeep":"","tlshash":"2ba00210406c4e11244140a1c4447dd4575f4a0798264cf21059af1404f1071642a451","first_seen":"2026-03-06T17:13:32.724647Z","last_seen":"2026-09-12T16:23:06.724127Z","times_seen":25,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:24.522Z","timestamp":1789222284522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwioTY37cLcjuBX25lkY%2BpGOHsCb%2BSjdPd%2BMsrL3AN%2FRPPLcSoD9A5QGudo0KlfzAMI%2Buj%2F9ueWHV92SzOq7DvX2nPxH7gPTOCpwguJPG7MSpyXwdEGTyo%2FYCCwmOseFi9mVtBFbRA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f804e4d2d8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":598,"size_decoded":1100,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cf.bstatic.com/xdata/images/hotel/max1024x768/534553375.jpg?k=5a9c157832812d310f5d2a9ac983719b0d91cf741c7730d1eae0bc1513ec4b06\u0026o=","fqdn":"cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.935Z","timestamp":1789222263935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /xdata/images/hotel/max1024x768/534553375.jpg?k=5a9c157832812d310f5d2a9ac983719b0d91cf741c7730d1eae0bc1513ec4b06\u0026o= HTTP/1.1\r\nHost: cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/jpeg\r\ncontent-length: 93135\r\nserver: nginx\r\ndate: Tue, 01 Sep 2026 21:29:03 GMT\r\netag: \"ce4e09c0327f062d0707e1577c24d58e52978f2b\"\r\ncache-control: max-age=2592000\r\naccess-control-allow-origin: *\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 4KcrttbJzJit69nFASNOCvHwjhlqudg4VvEvLadQ2VG5ZbD1Sz6k3A==\r\nage: 924121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93135,"size_decoded":93701,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x682, components 3","md5":"dd5e0a641721cf061f52fa0c59aa9219","sha1":"f549e646d74c351d810f30b3efdf82088aa283a7","sha256":"d5f8aa26b33c1b207ee7c8d56904be46b1018f78b61f015fdf5e7b5bbe8b87d1","sha512":"5a48e24355e33d593a09a202c593f52a501eb7d2e8f5ca0d3ea23a141d9ed01f06c0301772f1072d22497764a208574c30d535d26e0e399fda3725fb1bacffd1","ssdeep":"1536:NXmWvrvQ2avmFYOnEkrA2RUOWd1iIZMVl9Hwu22fTt+vTF3lko1f0EV71rFOFpJH:Jn4UFHEkYbJZMVrwt2Yrdlb1X7ZwJgBm","tlshash":"129312e0755a5f3f9f1ba3ec9bc8328267f262c9619255500212816c7649fd401efebd","first_seen":"2026-09-12T14:11:36.791293Z","last_seen":"2026-09-12T14:11:36.791293Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":64,"dns":17,"connect":8,"send":0,"wait":11,"receive":12,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"raw.githubusercontent.com/aaronfagan/svg-credit-card-payment-icons/main/logo/unionpay.svg","fqdn":"raw.githubusercontent.com","domain":"raw.githubusercontent.com","tld":"githubusercontent.com"},"ip":{"addr":"185.199.108.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.946Z","timestamp":1789222263946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Aug 2026 23:38:02 GMT","end":"Sat, 31 Oct 2026 23:38:01 GMT"},"fingerprint":{"sha1":"74:C6:36:18:2E:B8:A3:6D:CE:93:2C:D4:7A:AC:15:4F:69:3D:BA:61","sha256":"71:F1:07:7D:B3:77:FD:7B:8D:68:38:0D:A6:6F:A6:82:38:A3:03:B2:91:1B:CB:77:0B:3B:2A:42:66:93:CF:84"}}},"request":{"raw":"GET /aaronfagan/svg-credit-card-payment-icons/main/logo/unionpay.svg HTTP/1.1\r\nHost: raw.githubusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=300\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox\r\ncontent-type: image/svg+xml\r\netag: W/\"d1ec8225cefce54bd80c1cab81d84b5a7d96897558dafc04a8e5b0caa4cc18dd\"\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: deny\r\nx-xss-protection: 1; mode=block\r\nx-github-request-id: 9F70:383F7B:15973F:1E2E03:6AA1C072\r\nx-github-edge-region: swedencentral\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789222264.045758,VS0,VE1\r\nvary: Authorization,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-fastly-request-id: 93bb3f48eecff9419c47d6aa25d725b1f9c021c0\r\nexpires: Sat, 12 Sep 2026 14:16:04 GMT\r\nsource-age: 121\r\ncontent-length: 4007\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9602,"size_decoded":4948,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8eb2a0a563c80433cbbff5b0bbe069ed","sha1":"8abcdf6b9c9e5418e6862814ea39902c2d12d2e6","sha256":"9352f48b6796a44cf70abf5c06dfe5636c492804ff61e40decb547e5ad36c164","sha512":"f630a577c2b9b55f9beddc4abfdeef12ec602bbb205c20b4acbb083b956821b4fa65caef028c448cbe898b540ea2bc061847f087be2fb9c091b75e0614467959","ssdeep":"96:Z1RAt6xwxYt2cR7hFTNyQ9g5YZMTvH4H+mPUTVBb9uq6ZFYAzLNACmg1nJswSvOv:zRvwxY/RD5yQJGTvH4hGB8q6y/06vgTd","tlshash":"011285ed9bb4a0f039cb6b79df674ca9351bb0fe67714684623cbd589683c898608d40","first_seen":"2025-11-30T04:12:51.91023Z","last_seen":"2026-09-12T16:23:06.757634Z","times_seen":15,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":63,"dns":0,"connect":9,"send":0,"wait":13,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/book/images/flags.png","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.989Z","timestamp":1789222263989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /book/images/flags.png HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sun, 09 Nov 2025 12:21:57 GMT\r\netag: W/\"77d8-19a6890e288\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8C%2FROivzCOH3pYI%2Fj3IT9m0ZsCOvfbOxzwzE5%2BxV5Csy%2Foqc30uKqpCAxws15NzzXjepJV6%2FADaJx56lW%2BV%2Bq%2Br822H7VdKdimYZpp2U%2FLYPhYJuHqGXPcvoz1lejLA8IBf2YEoTyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a39f7fcdface8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30680\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30680,"size_decoded":31427,"mime_type":"image/png","magic":"PNG image data, 18 x 6243, 8-bit colormap, non-interlaced","md5":"7e2c6009cfe0db90435c9e506e718913","sha1":"aa5b9747f1fd934f465a2eb1a6119df78cd8147e","sha256":"fc78e1550450ab81964ef660b05cb14fb17e0b895b261925ad7e6e073502dfc4","sha512":"ed75a82d511d2d28b6077ed626d054944c9c9005b0282cfd3c63365da415186dbf1913651b1b3cab153b35254449aaff15eed7aed1e00101d22bc39a4f76324c","ssdeep":"768:+u/kdoLtfqovOH/rceeugVi292Hvzd6lnri5HVoI3zk6suob+HHO:+uRtqHDc/ukuIlCzNsuo2O","tlshash":"6fd2f152bf5c2e767e9fa4edd363009ba100c3ee6fa6dd4926441bf888c1a92f091547","first_seen":"2023-08-22T12:49:30Z","last_seen":"2026-09-12T16:23:06.744994Z","times_seen":2560,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Kr@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.272Z","timestamp":1789222264272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Kr@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 923\r\nlast-modified: Mon, 19 Jan 2026 12:32:12 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: CtPZihriI8Fo1dbtCugKQahWbAsyR8R1\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"cc87317ffaf663301d288dcc4ac9c650\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: c204RWKvZDhoByDVuJ7hCPjIMi39gUVvwelCeP6a0fZrHrqKbsK72Q==\r\nage: 48795\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":923,"size_decoded":1700,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"fb34366337e6f2df0ee908fcc1500ca8","sha1":"0fb8613c3501758e9c7e15a09fc5a203722bfb83","sha256":"62d38d05c602b29f31cb923a213c4d6788b4023ba395040b9832866021ea2407","sha512":"674ce6b07ff79e355ef1013cc45047e00b7f360d9bd6f24979583d8a1cdbf82d29bbe8556d57e52e040254110323659ee7e9bc5e1787d8dea2dff7dac8a4d548","ssdeep":"","tlshash":"ea11f79bac881d3216fade31e50c4635e006350c8bf888b6629f74f44c67cbd8b07215","first_seen":"2025-03-18T07:37:38.844367Z","last_seen":"2026-09-12T16:23:06.792376Z","times_seen":2661,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Ro@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.285Z","timestamp":1789222264285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Ro@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 181\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 9.Efoj4gTMXsBqYfJgc8j42z9EWEUmRw\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:46:16 GMT\r\netag: \"f0315a3e969130a46e5e014b633e7fea\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: LC4YpAy230IqPN9DC3T0_2FJeB0DuLPOyhE88v9JPJWgX7IA-G6v-g==\r\nage: 41204\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":958,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"295f0ce06cafbe2370693e85aedae78f","sha1":"d3baf4b39c89f9042a2c6f231c1da632cb36f5d9","sha256":"768f0b40d2b9a01863f8ddf5967dd75fd1a0bb2161aaf281aceb32140943aa09","sha512":"dff161bbfbae575904dfa20127d262a8f6e1590cff49a8a8d839d4b763965c00350992637348cb9013bc081db6061e686c36378d16fcffffa437de16e62431ab","ssdeep":"","tlshash":"44c0c0cae1342cfec32b88f380ce01d08067ac3c0e1320c30490f071b8020344dd6d62","first_seen":"2025-03-18T07:37:38.810667Z","last_seen":"2026-09-12T16:23:06.764314Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Al@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.289Z","timestamp":1789222264289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Al@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 841\r\nlast-modified: Mon, 19 Jan 2026 12:32:08 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: d8UNd2ISs5k.i7BAh8IeEecgezrr_XVz\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 11:02:45 GMT\r\netag: \"485009653717d2398e358a82ec07b75d\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: kg-jVBc56-5QIV72Y0RTcLSZ6qrHTK0Orm5dIEx8OiqKKxHVtpJpqA==\r\nage: 11300\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":841,"size_decoded":1618,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"7945f25f415fc4f8a3637901691881ba","sha1":"109ba619c1daf2e8d0e73d25e59b036f88309828","sha256":"80d29f02ee298ce7682a62a1e6758bfab2f73def7a6372d016f23bbc3e3cbd41","sha512":"f7984d2f2e1bd7bd03266c1d1a01851456568242feb33d83a7874902bb5aa8faafdbe995da676dccaed5b3cd1f1eddf8a3dec0d40291c0ca698fe94903981bc3","ssdeep":"","tlshash":"27018ace922f18a8d1994e2369d55341adc9f408d210ac58c397425650972288e152b2","first_seen":"2026-05-02T20:55:48.331122Z","last_seen":"2026-09-12T16:23:06.76162Z","times_seen":14,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:09.287Z","timestamp":1789222269287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34FZ7RlPmR3wCfWfAvjLcc0JMt0lGho23zcKOKPEPpuOZP9rszyPW1WdumguA1dLcu9WRgk4mLs3OBB0H6vX3z3VR84lqK%2BCDcKnOVKdoC6URNIqr6KNIw%2FU7vZ3R2gD6J6tCSSl8A%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fef0b478deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":598,"size_decoded":1090,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/api/support/getMessages","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:19.482Z","timestamp":1789222279482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"POST /api/support/getMessages HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://booking.jh-print.com/1102053484\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://booking.jh-print.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"supportToken\":\"1789222263233.546\",\"chatVisible\":true,\"lang\":\"no\"}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\netag: W/\"256-9njYh5FA7pz0U8EHXD/y3lX1k5E\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awYxcjYc6b7amk1FuxOBW%2BHVf8iur8VWvPk4ga%2B7TAspUhLaM2ioHeaWS1rOx56njz3xG%2BcA7KgrE9wfePRbSdPe3BC2Ssi%2FFQ7Qcx4cQuHX7ImoeAtPHQN5oOyYG5vceiDNPv7VvA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a39f802ecbb88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":598,"size_decoded":1094,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fe7710ac21ffe8fb817c648f928504ec","sha1":"f678d8879140ee9cf453c1075c3ff2de55f59391","sha256":"5927a9d222fa4a5739d660af713029b93df1443c3df0f3a743a945c182ab069a","sha512":"d68ddc2ded52e7b606cf866af92e6eb5fc0ce3285e754299ed78e796787e758f72b39faa687bba455877230afd68d3d5beca55bd4329c9ac16e36bcff44dedc8","ssdeep":"","tlshash":"28f0412ad6a4b82bf6a20241f44c5a97d379203d86503885a2ccc10bae4fb752a3c383","first_seen":"2026-09-12T14:11:36.740112Z","last_seen":"2026-09-12T14:11:36.740112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"booking.jh-print.com/js/payment-modal.js?v=1789110700","fqdn":"booking.jh-print.com","domain":"jh-print.com","tld":"com"},"ip":{"addr":"104.21.71.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:03.932Z","timestamp":1789222263932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jh-print.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 12:11:52 GMT","end":"Sun, 06 Dec 2026 13:10:32 GMT"},"fingerprint":{"sha1":"9A:95:7F:E1:84:FF:EE:24:A8:20:93:25:F1:04:F1:47:D4:5B:7F:35","sha256":"25:B7:A7:89:A0:2E:E2:A3:1F:1D:E5:D9:A7:FB:E5:56:66:96:37:20:7D:00:C1:EA:67:EC:10:85:9A:7D:56:9A"}}},"request":{"raw":"GET /js/payment-modal.js?v=1789110700 HTTP/1.1\r\nHost: booking.jh-print.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/1102053484\r\nCookie: mammoth_id=2c2ffba5-ff3d-40e6-a54c-f3b40746a1d2; connect.sid=s%3Axe57AbQk6HWH3xbtbZj3oBPelPEAwLZ_.Trzh%2F4b%2FyzRqR5nxUVNPGn9DhWCn9SvypQYeYAJXLro\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 12 Sep 2026 14:11:03 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8dOEj%2B1qP%2BBbin21s8T17Ks8Blvr0RHF7rVFhjsJzuvm6mISJuwTVjjWiODu5AsH2bmJApCncnlm2BV2zy7KToGOQKBwB%2BUCh1WsWtoIo9aw58LmJ%2F6zKlZniWK0C%2BBD7s5gbb5Aw%3D%3D\"}]}\r\nlast-modified: Sat, 12 Sep 2026 08:41:52 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 19 Sep 2026 14:11:03 GMT\r\ncache-control: max-age=604800\r\netag: W/\"6aa51050-14bce\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a39f7fcd9abe8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84942,"size_decoded":19431,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1169)","md5":"d1247abc084406dfe170c6df815811c6","sha1":"1aeaee81ce0c9d1fb479406f288b162ebad3ee0a","sha256":"ec80d24bc7b87cb96917ff04eec79fd19be3a37404706cc8ff26dea73dcc984e","sha512":"299fc9fb1030705c19f1476d33bffaba81bd2df2f53735906d0a459e77307005bf244a31bbb56f331cde5dc88786ca6e75e54c7a5732c3ee7512b6086bf285a6","ssdeep":"768:E/xlCskjR85X3z+DNP/5rgcUKHbNHxSWGhqQhNDO:E/xlCVjR8EDt5r9HbvSkV","tlshash":"97837058aaf32176497b757a4bff4109763b00534409ce907c5cba482fc0ea5a7f6be8","first_seen":"2026-09-12T14:11:36.798479Z","last_seen":"2026-09-12T16:23:06.751649Z","times_seen":2,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-12","alert":"Sinkholed","trigger":"booking.jh-print.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-12","alert":"Phishing Block","trigger":"booking.jh-print.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Hu@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.258Z","timestamp":1789222264258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Hu@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 156\r\ndate: Sat, 12 Sep 2026 06:11:18 GMT\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\netag: \"e416c9141a864363338c010da3cb94dd\"\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: frpVVUUkPYBKMZEf387zGE4hcv0uDH_D\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: ACVW-Mq0vKC6pzZr06RHkjotuLmsXXnenrqahxkNY5IalCUGnWnLWg==\r\nage: 28787\r\ntiming-allow-origin: *\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":156,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"cd056e7be27a3176f3b8573c231fba2e","sha1":"3a9993ecdf7802b191e2042eaff2f157b041c56d","sha256":"f99df338ae6f50590c2054464ba7f7fa2aaac147bbcbcd203f7470d7534df1fa","sha512":"4a6209374e35501348ca571127bf8856b0cef878ea0d31a35864dc3bb15d1e547fceb769bee048b2dbf81594eb985fad25807f9a00c7bbaef519f0e3f0a7955d","ssdeep":"","tlshash":"19c08cdec2b32c3fc46a481b600a92896463aa1e029abc0250f6d81d24267458b86af4","first_seen":"2025-03-18T07:37:38.80501Z","last_seen":"2026-09-12T16:23:06.786149Z","times_seen":2659,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Id@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.264Z","timestamp":1789222264264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Id@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 148\r\nlast-modified: Mon, 19 Jan 2026 12:32:11 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 99MJC35LUayQykojlfd6DwpvIHchOEVJ\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 06:40:12 GMT\r\netag: \"5a3a7c522dea1916b4d7d320af467e18\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: smkL7ifwkiZpG0jM5abYXCmNoFxVx8yVJf27fSa09b3PyDkY0YUAuw==\r\nage: 27740\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":148,"size_decoded":925,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"5c4252c8ec7d3965ce5f737eaf6ab577","sha1":"e64cf033f26752bd72278e737366f9fa1071affd","sha256":"7ef607bd9d49e3ea22a65e980b55fae5633edcd3cff0be3e7e00f238ddd905af","sha512":"4ad6b096a6067bb523956d02e61ff3ed5c44b7254bb359def2e993bf1d95ea14cfb66f354163b0d52c528bdda020345722642269384d22b5cd77d26bb8f4978c","ssdeep":"","tlshash":"7cc02bedf267dcbec45fad77425e006d80532c2c0d92b40b40d1d41e13254d1e9829f8","first_seen":"2025-03-18T07:37:38.834755Z","last_seen":"2026-09-12T16:23:06.790973Z","times_seen":2963,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t-cf.bstatic.com/design-assets/assets/v3.176.0/images-flags/Sk@3x.png","fqdn":"t-cf.bstatic.com","domain":"bstatic.com","tld":"com"},"ip":{"addr":"143.204.238.9","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://booking.jh-print.com/1102053484","date":"2026-09-12T14:11:04.287Z","timestamp":1789222264287,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bstatic.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 28 Oct 2025 00:00:00 GMT","end":"Tue, 20 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"76:E4:3D:9B:A1:1C:E4:06:81:80:6A:C7:58:7F:C7:1D:AD:48:39:CD","sha256":"C0:9C:06:CA:8D:27:2E:53:06:C4:DB:57:B6:0A:8D:F5:1C:AC:D2:58:CF:72:F6:37:58:00:2F:37:EA:14:39:E5"}}},"request":{"raw":"GET /design-assets/assets/v3.176.0/images-flags/Sk@3x.png HTTP/1.1\r\nHost: t-cf.bstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://booking.jh-print.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\ncontent-length: 667\r\nlast-modified: Mon, 19 Jan 2026 12:32:14 GMT\r\nx-amz-server-side-encryption: aws:kms\r\nx-amz-server-side-encryption-aws-kms-key-id: arn:aws:kms:eu-west-2:339712873537:key/a7c9de2e-1f60-4f87-bbf7-dc4071c8d126\r\nx-amz-server-side-encryption-bucket-key-enabled: true\r\nx-amz-version-id: 5Vn7g5U11mMwz.ncAlZGC3Jk770UJD4h\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 12 Sep 2026 11:02:45 GMT\r\netag: \"f21432238d9b500d9fff60597257ceba\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b4cf31e054e1e158a1bbb0df99815e30.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nx-amz-cf-id: 9afZOsDl9UsP_sc8hc-WOQMeAbrz1EGjNyCKkeV2LUtc3lQsE_RP2g==\r\nage: 11300\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":667,"size_decoded":1444,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"5f53868765d88dfddc6d63c616024e20","sha1":"0db7c4069d30c5b127c8fef2e59f5c0bc1f68046","sha256":"ec9053585d03aae9b9b864aaa7677b6be2d6db8357363c7146de3069704a35f9","sha512":"7dd5139366a6085839ec12c6d95adf5ebca668cd5712ec82850524469cc05d56a28843f2dcbfdca24e8ec73a200e6506175d5a55cb6159d66be24f08ad8718c4","ssdeep":"","tlshash":"57014e99b3dfbf3a618a52274085839866e98248b9408a7385aec49b29020d04b49a73","first_seen":"2025-03-18T07:37:38.796579Z","last_seen":"2026-09-12T16:23:06.750816Z","times_seen":2660,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
