{"report_id":"414de23f-75b0-40d7-ba6c-61db8bcef29b","version":0,"status":"done","tags":[],"date":"2026-06-17T20:50:49Z","url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"title":"JOKER'S STASH JSTASH.BAZAR THE BIGGEST DUMPS \u0026 CVV SHOP","dom":{"size":34261,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5999)","md5":"c12c3e3f73a89b5e6244772efbf93127","sha1":"3ce1c1d9cf3ea7697f9a802964f2946b5e0d6416","sha256":"e6c249618ed19e3461b739f703eee18130f765ad676383248fb1e6c3c7588bb6","sha512":"6b1ef6209297550b45ed1adc600fb5d592b2c0d3ca5ada6f949f3b454e82153c8cd2ae6bfd5146891cf36033751b665b7ab40c91b352e55c9f3573552c2622fb","ssdeep":"384:F7OXOtp5wAhHXTo3BowXvmSBzzXRTmq2FdIIwRXvWZvG/nx/csi:F7OXOqA10vhzX4GRXvWA/x/c3","tlshash":"e7f2fa2161a5322ef127c272fde1eb5832294227d353c7bef92da2b88f5745d05b3918","dom_hash":"domhashf7634ad5107feb335c641e32c7575d32","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T20:50:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"jokerstash.cc","ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-12-01","domain_rank":0,"first_seen":"2017-01-29T12:54:56Z","last_seen":"2026-06-17T19:29:43.329911Z","alert_count":38,"request_count":19,"received_data":389153,"sent_data":18924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Django","description":"Django is a Python-based free and open-source web application framework.","website":"https://djangoproject.com","common_platform_enumeration":"cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","icon":"Django.png","categories":["Web frameworks"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-14T23:32:43.59512Z","alert_count":0,"request_count":4,"received_data":751613,"sent_data":2880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-06-14T22:29:33.380889Z","alert_count":0,"request_count":1,"received_data":456017,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YXTECW6KNJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce9df857201b22d9c5ddb2ca2106d277","sha1":"61b3038a234a66ac6050726d8c9d4a5078ba8b60","sha256":"58952a3fcb46da15d58d8f1f0dbc692fe6444ec530ced70121380d1d3954f2bc","sha512":"c534999f4bf7983fc5f8726e670fac63e9d58e96746ba442a5e89b03f7a26b6240ea133117b9623b79d4c4fdca1f43ffd3f1f7c3c99ddf619e3d34e4b0d0a4ca","ssdeep":"6144:RslqzAIwiQwA4qz+QW5Vkq6kwjoQ32iYmuhFo7kv3uU7TieVYSOT:RugwiQw2mVkqsfgb7F2","tlshash":"1aa409cdb3d674225392f478903f018ba57b69e2b44cc899f189c8e42e7465a8277f7c","size":455413,"data":"","first_seen":"2026-06-17T20:50:59.798994Z","last_seen":"2026-06-17T20:50:59.798994Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e386df274d87c2a6467720487578d6c","sha1":"7d3f916a1e793dfbca4429e03fc35cc4bc939208","sha256":"d803cf4a3989e048bcaea4d7dc827430c882454b920e42c806687417d04a5c3a","sha512":"7bc189ee860f7b97422d89f081f7e2f3a0497708730fd80e337dbdcd4f09c6731fcc86dff60a28cd81a6c523f8b1f091d67d9ad635347c7ecd967acb62671547","ssdeep":"","tlshash":"826108dbc7c4a765b7ee26a54c6e63901a6b16d30d14f2ba1250f4acfa5ec07413e0c9","size":3303,"data":"","first_seen":"2026-06-17T20:50:59.805691Z","last_seen":"2026-06-17T20:50:59.805691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3e501f825e65e5889cf7a5b3de364f6b","sha1":"0fabb874e716640901709249d40bb57251fc87aa","sha256":"d6ff0d2a00c6ae375a2e0f7cee1e5af22199e2af6608296f880137e9b8f449aa","sha512":"bf8297c084533e0414c13244087741b686fb9fdd9082bdf069e21b7b0259d9224510c50da62d73a34c8e82b4d43ffa60f2b60f50fb92bcc3c259815da08fdc85","ssdeep":"3:N/BKL1X0cRXBV:eL11xj","tlshash":"5e5504c0d44030750514d400d1741d35500f050010174515f05d14d417301000070740","size":1337359,"data":"","first_seen":"2026-06-17T20:50:59.807236Z","last_seen":"2026-06-17T20:50:59.807236Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7197f03ee96729a1e0bb74072d6e20df","sha1":"b00e95a8516184de14c5b7feb552cb06ccff701e","sha256":"f392377e00a109470fb9c7122c16aa314d21000facc61ca2134cadcb684653af","sha512":"1cfb18c889523a86fe6a049d967b9bd07bd76313f5838106b0988876b91585152490477ab9c2668ca3c43c16cf533d58647bbde52fe9ecc6c10af16423a7f08f","ssdeep":"","tlshash":"afb012dc099db07427ecd9012c37b2117308dc73ca0449b8d138c5392d6544fa1f4e99","size":106,"data":"","first_seen":"2023-05-30T16:15:10Z","last_seen":"2026-06-17T20:50:59.810001Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T06:31:49.698956Z","times_seen":745281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T06:31:49.698956Z","times_seen":745281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c096b25c99b70fb77e2242c1bfd996d","sha1":"7f33dcc130bddb19063152fe7f256f3afa0da5b8","sha256":"a7e6ba33ddadddb8fbaf3222666542da11ceef6554a7f696396520a38bb95a59","sha512":"8e25e135b0f001f36e279a0aae8f74dedf31a29bb6c59357775efda36078a17d428d4e8e2e81b926be64c4135130369fe4f7a9bdb5ef8cd98242c095e8667338","ssdeep":"","tlshash":"2dc02b883bc4e024c64131351c6f42c6f638df600c582013e042414db6b0b50039ff4f","size":137,"data":"","first_seen":"2026-06-16T09:40:41.561727Z","last_seen":"2026-06-18T06:19:04.089749Z","times_seen":1234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5eefb2ee6bfb99fdc312f4d391056928","sha1":"20042a006462172a99baf7b648d238b240516ad0","sha256":"fccb9d132a157010c360b82fc3b00e247aab41efa2266b2f689638c59af56c1a","sha512":"0a1350721cc8b853818c0cab19362ef37501482688fbf02bc5288ac1b7811e9631e0467c6bcf8d3806abadbbe6760ac9b01b559276ad91430f366261d9351734","ssdeep":"3072:tX8d/JHAM5yX4rm5mKqhHNK7DB4PtCx/2mgt+CHDvmw/6HTpCWOssxO1I:Bo/JA48ReLtzWHTNOQI","tlshash":"d9240985f4c7f89e6311647c10a7b0de722b1cd4926c1a2de60199f078a537e86efde8","size":217417,"data":"","first_seen":"2026-06-17T20:50:59.815039Z","last_seen":"2026-06-17T20:50:59.815039Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T06:31:49.698956Z","times_seen":745281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"37b007a08b4c6fddc9310bb5a711cfac","sha1":"5cccd9c1619c77aff109562386761342ebb169b8","sha256":"761743e95d8ebe80041c9679afd18599df86a9afb053d6dbba3452d27dbd79f4","sha512":"d46e0c44e8799bd3b283a3d92cf2d06988e998c6f9332ecb9ccac074370fce2e71719bc42f3d8380073e4dbfadf5ca8f0b45e90d40b223f3e00c0536631df595","ssdeep":"1536:A+RDl35kVfhRMGKHD+LxgnmeBDHYOo8LDgS9:rbSVfYEGmeBD7n9","tlshash":"a7532c987196787313d980f0a17b6743732a7d3aa94cc850d827d865367ce8a9233f7e","size":65582,"data":"","first_seen":"2026-06-16T09:36:41.625096Z","last_seen":"2026-06-18T06:18:31.257458Z","times_seen":2188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00e000cefa5b5683f0db98102c85ab25","sha1":"80fb6076b68f0de405a404facaa8027cb46c13fb","sha256":"bce6db0cfd1db396ed154a9a5b37282014ad880c2be500388c6d2ae2a455336b","sha512":"892e08ee2a2d68ae4ec6d465c7e30c329cf909f138c0cb3e721d1490dc92eab1bde00c0ec11525b36f2c3fdc1ae89257bfa5bbd7e62b626c61984e123c75eed6","ssdeep":"","tlshash":"ddc02b8c310a0c7041f737408b3fba04f0023628e4d0ad314d1923444e30e03df84850","size":153,"data":"","first_seen":"2023-05-30T16:15:10Z","last_seen":"2026-06-17T20:50:59.816495Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a5ddf7fdd2ba53dd85cdb56691e2150","sha1":"75e2279007c9ed7c10fe79d7fecd8b226fc012be","sha256":"1aa3e57312c68a09850d687875f0bc14ef9b2dfd19593ea8099038815d82e03f","sha512":"618cdf6bf0cd07b585c27c90b81dcd72c2152213bc3129357f93fd31c70be850d60f5a5d975443e3865d201c57783236f4bde221194fcd5809877ec7822f3e5e","ssdeep":"","tlshash":"f5b012b622042545461f7128f8f4c4383e105c8067032173541c01ea46e4ef135264c8","size":106,"data":"","first_seen":"2023-03-11T23:30:38Z","last_seen":"2026-06-17T20:50:59.81842Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"360520adf61a44c285563ba3d136972b","sha1":"f4dc5d4baf2d0613d4c8ab008194ede9712281d7","sha256":"be2aa1348b9b3d717231962b5a3605f328b827f76f56a8e948ff0c73acbf625a","sha512":"96402f5814f62e25c329b2baf3b41cd8f47386cb48df2d5b313f9cc50bfe9918551d57ff38e3887d715e4be38e5ef5c10fa127bf8e4c4919d9bb936d2bfdda40","ssdeep":"3:N/BKL1X0cRXYdX:eL11xYV","tlshash":"965504c0d44030751415d400d1d01d75500f050010154405f05d54d41730001c0705c0","size":1337359,"data":"","first_seen":"2026-06-17T20:50:59.82043Z","last_seen":"2026-06-17T20:50:59.82043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"727cd578a5beb664b2f1eca0efa7dd14","sha1":"6a8e522156ab1b268b337b8693e6609361a0e92a","sha256":"9a1029188d9c640fadc45a21a68de66c343a337f711bcac500822c878231854d","sha512":"687749b149175bc460090bdc181dc778f8105c6936467428ef1d9545495eda8bb6a6e33a6ca0f9c373ed54f3990966b55c897905f5d93bb86d909ed64ec3dc8f","ssdeep":"3:N/BKL1X0cRXYU:eL11xYU","tlshash":"b25500c0e8c030fa0a20e800e2b02c3ea00f0a00202a880af0ae28e83b3000000b2e80","size":1337359,"data":"","first_seen":"2026-06-17T20:50:59.82633Z","last_seen":"2026-06-17T20:50:59.82633Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"779e2d200955babde284c7f88951a968","sha1":"a885134d15bed5c1ad277821a7be5cadc947674c","sha256":"620a3f34bd2bf88dc6d389ad69b2e28572be31157682e69774330bd678231f2b","sha512":"551602040b87477845020b77aeee9cb44efbed3377c38e2c13a81a026cf2ec65df44b157b3eb8ee9318b07e1c3ee86688c8a962346d3464ae27f0a49effeb35f","ssdeep":"384:s9N2H11V3we8dz81WbMezL9OPRpRnLgs5ZcsIN/gCziBRGBA9Cmw:sIXVh8dz81tu+cESP7B4I","tlshash":"2492c6e239d7b43a06a2b0b914a723d7fa5fbc44780cc56cc340d6e8f85579816e6dac","size":20203,"data":"","first_seen":"2026-06-17T20:50:59.723561Z","last_seen":"2026-06-17T20:50:59.723561Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6ee9cbff9a2f0757f71fb687d56bfe8","sha1":"78e1316542b69d72281775714bce685c1a204a4d","sha256":"1076f138818c772974ee497ec4e65847b9a457aad882d69162bd3bbcf5f6b5bc","sha512":"8d8cf60206c0cce757662464e3d89f47b6c0bdd8db9bc69451e2a157bbf3a03d93892d844bb17c254209f4f70807b6964f40b6085c5c6fc0c11c03079fe718a5","ssdeep":"384:rCVcSD7BwVQ/f2SRVP4ChcUiQwr7qhLUZt0mmODTljH:r+zD7BwVQXxDzkr2807s","tlshash":"5792b4e33cdb742d0b67e074046763c7ba6fac4474089428c2d0dbe4b961b991ee6dad","size":19595,"data":"","first_seen":"2026-06-17T20:40:45.785156Z","last_seen":"2026-06-17T20:50:59.800779Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","size":12332,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-18T06:30:23.537915Z","times_seen":114827,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d04d0144dfbf46805a645b5481fc43c","sha1":"ce282824dc0cc88cf3895f8459bb26d595a22a05","sha256":"1ada18c5426d15b46019a00e062ee65610a91535a4b85eeefbe3d6d385293734","sha512":"0dc2d17bf32779b62a0ec95cd1ce0d46a4cdba94a9ea37b8f70b304311b99bc5f1bdfc6932fe74e659c31c1636a7073a692bfc3cd964b3e6f5b126fef70d7fe8","ssdeep":"","tlshash":"6fd0a79929658431a198024e90bad79c26b120946621a100c2d8cd2a6a11ed304a1558","size":217,"data":"","first_seen":"2026-06-17T20:50:59.829607Z","last_seen":"2026-06-17T20:50:59.829607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/5e0ec396-6e6a-406c-9518-bc78869a1edf","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"b23314d76d6ef77dad0b00eda85ed7e1","sha1":"8a4a99487f2cd3299d181141a0aeb4b47d814a59","sha256":"db2031f6a8cef1def057c7dd9e4545328ff5009cb6670f944dd40322078c09aa","sha512":"8c0d663288d4959ce3c329d8732c1dcde3e3616f935c6aec0db06a31ca4ef2cbbc12e5bb24523e186f1f5849f4eca694765181e9b01fe81173489fd2ad064e14","ssdeep":"","tlshash":"ccd0cd093d71d60886e211337c7f7521d1a16264650d53445735def9cb5069f2514f54","size":291,"data":"","first_seen":"2026-06-16T09:40:41.569162Z","last_seen":"2026-06-18T06:23:56.683474Z","times_seen":1190,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d04d0144dfbf46805a645b5481fc43c","sha1":"ce282824dc0cc88cf3895f8459bb26d595a22a05","sha256":"1ada18c5426d15b46019a00e062ee65610a91535a4b85eeefbe3d6d385293734","sha512":"0dc2d17bf32779b62a0ec95cd1ce0d46a4cdba94a9ea37b8f70b304311b99bc5f1bdfc6932fe74e659c31c1636a7073a692bfc3cd964b3e6f5b126fef70d7fe8","ssdeep":"","tlshash":"6fd0a79929658431a198024e90bad79c26b120946621a100c2d8cd2a6a11ed304a1558","size":217,"data":"","first_seen":"2026-06-17T20:50:59.829607Z","last_seen":"2026-06-17T20:50:59.829607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0d4ed298a981525","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26a1b154787820a2a5042f8b7b1ac068","sha1":"05e0a2dd47bffa31ef3031a60f6acf9d61f7c552","sha256":"0107b21c06e46df131f4720577ebbc1ebdee8f1189ccce7c59aaf99e86504280","sha512":"aed8e1c6589a3ea0cbdaaee563df220f1dd2d780eb51f90580d0095a26e8cf96623e7a6bad32f876ace805249545d2c0e84194b0167e0f9b1387a25fb5d45db4","ssdeep":"3072:/cvrV598g/MZl3lY981Ozn2Iq2KlQHZvRKzYcRJaY3OtDayswzGQpuoSMoRcSHOu:/cvrV598BZl1vOAZOtDaMz1Gx","tlshash":"ad04da9ef8c3f47b6302957d005ba1dd613e8cc4472c3568e939a490bcb137a95ebe68","size":188864,"data":"","first_seen":"2026-06-17T20:50:59.765095Z","last_seen":"2026-06-17T20:50:59.765095Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T06:31:49.698956Z","times_seen":745281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0c096b25c99b70fb77e2242c1bfd996d","sha1":"7f33dcc130bddb19063152fe7f256f3afa0da5b8","sha256":"a7e6ba33ddadddb8fbaf3222666542da11ceef6554a7f696396520a38bb95a59","sha512":"8e25e135b0f001f36e279a0aae8f74dedf31a29bb6c59357775efda36078a17d428d4e8e2e81b926be64c4135130369fe4f7a9bdb5ef8cd98242c095e8667338","ssdeep":"","tlshash":"2dc02b883bc4e024c64131351c6f42c6f638df600c582013e042414db6b0b50039ff4f","size":137,"data":"","first_seen":"2026-06-16T09:40:41.561727Z","last_seen":"2026-06-18T06:19:04.089749Z","times_seen":1234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c938b63c8a2385159e9b37e88d0ae45e","sha1":"3a9330cf5b9612a686564894b869a24886088b1c","sha256":"729e0dcb26f7ccc4850c94cf590aec01d5f7c4cfa02c8e8f92cb28f0d3834e26","sha512":"120ed067d1d0db020900405962a4f10c9b4e7f72d758e8c7ba80ad00d4f9458ae1693fede8304796f3b8b56512d4150487209f771fd6c34ebdf1a6471f1714ab","ssdeep":"3:N/BKL1X0cRXdf:eL11x1","tlshash":"f15500c0e88030be0830e800eaa02c3aa00f0a00202a880af0aea8e82b3000080b0a88","size":1337359,"data":"","first_seen":"2026-06-17T20:50:59.832868Z","last_seen":"2026-06-17T20:50:59.832868Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/?__cf_chl_rt_tk=IDrKgQTlQ.fWPDx1DSU_GKj.m5UmCNL_pAfmjZtGh34-1781729424-1.0.1.1-7NnkacZnMedEn_oPH96.iLxgfeQb0xt0QTrmB912PsM","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-18T06:31:49.698956Z","times_seen":745281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj190 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj193 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process9//obj194 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj197 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.2161346935287789] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj192 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj195 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher16.process9//obj196 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"map[actor:server1.conn0.watcher16.process9//obj198 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.2161346935287789] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/h/b/flow/ov1/1766346664:1781726436:E6aKMYHzX5jrt2JPF3-HXQM29G5YVoWP45SQsDWexzA/a0d4ed298a981525/P0fA6Z9cdThAS_gtAGq5TU40IsOV9NGqsqrIVB0Kx24-1781729424-1.2.1.1-Gr7MEKbAxevXP_ioAWvLuvQM9xHc0GvunfuGDRkUz65s3ISgtKaaRNUUzlCNC.kQ","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:25.790Z","timestamp":1781729425790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1766346664:1781726436:E6aKMYHzX5jrt2JPF3-HXQM29G5YVoWP45SQsDWexzA/a0d4ed298a981525/P0fA6Z9cdThAS_gtAGq5TU40IsOV9NGqsqrIVB0Kx24-1781729424-1.2.1.1-Gr7MEKbAxevXP_ioAWvLuvQM9xHc0GvunfuGDRkUz65s3ISgtKaaRNUUzlCNC.kQ HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\ncf-chl: P0fA6Z9cdThAS_gtAGq5TU40IsOV9NGqsqrIVB0Kx24-1781729424-1.2.1.1-Gr7MEKbAxevXP_ioAWvLuvQM9xHc0GvunfuGDRkUz65s3ISgtKaaRNUUzlCNC.kQ\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2466\r\nOrigin: https://jokerstash.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 5ilz1fGA+yVU9ZA7SSnMkW+iH/nvQ1W2PKY+MA7gzJY=$it1NUzf1JsVn9SzfMJAmqA==\r\ntiming-allow-origin: https://jokerstash.cc\r\ncontent-encoding: zstd\r\ndate: Wed, 17 Jun 2026 20:50:25 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0d4ed2f3d581525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21496,"size_decoded":16568,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (21496), with no line terminators","md5":"bd619f7fb72f40bf5f878e84b8b537d4","sha1":"46a91361cc461fe6d972abc54f704ddd2bcbe62b","sha256":"e4a46c10435488f63636c7e5ab9daf6cf49955597ba92bb7b9df82a7b1d7a7af","sha512":"34e6741fe653258b9d226c117e41e93a55aea31171f99fb7c888d93c186184d56bd70caaa72dcbea8ddede295a9b1acb4ce58eff97d0843b80a37cf7bde9bd85","ssdeep":"384:hBsOSn8xXHRCg+MVtekuU3DAhGzUajKL26KqdSxeDX5s4kgNzk/1wdyPR+K6BGPd:bTx3RZjVYkl3ZKiUSM+gNz4dpWydCK","tlshash":"94a2e006a3bcafefa3ba286b8f1b8e3a14c35935324e158304493d775815c82772947b","first_seen":"2026-06-17T20:50:59.71233Z","last_seen":"2026-06-17T20:50:59.71233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/media/all.js?3694","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:28.969Z","timestamp":1781729428969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /media/all.js?3694 HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:50:29 GMT\r\ncontent-type: text/html\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXuq3u%2BZtpBurQvkpysWKMsSoJIUW%2FiShL2ZV4j3ivrF3c%2FvJhIvfjkLplVc1UCJ7BqYBrV9DgY1jN4O9uBvLJrUXw5SW8W45rXQ%2BNpiOEgWC0XzwxxL6XmZlCqIoUPR\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0d4ed431c491525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":786,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-06-18T06:30:50.551075Z","times_seen":25256,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:28.978Z","timestamp":1781729428978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/7c8a194018aa/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Wed, 17 Jun 2026 20:50:28 GMT\r\nserver: cloudflare\r\ncf-ray: a0d4ed432c4c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T06:31:22.942542Z","times_seen":16504391,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/h/b/jsd/oneshot/7c8a194018aa/0.4481393045110481:1781726439:FF0sR6VCoPpWrYWt1O0biOvnI1mW23tVdGPktPb5sYI/a0d4ed4129fb1525","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:29.237Z","timestamp":1781729429237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/7c8a194018aa/0.4481393045110481:1781726439:FF0sR6VCoPpWrYWt1O0biOvnI1mW23tVdGPktPb5sYI/a0d4ed4129fb1525 HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13226\r\nOrigin: https://jokerstash.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jokerstash.cc/\r\nCookie: cf_clearance=K4Bwso1F0lRkiFscmsSDsFrytS41qmfLIfM1wok21h4-1781729429-1.2.1.1-JX_nRxnGyLU9zKoBIM834HHZy_Fudgade8iLX_bkddu4tfOdWatEMzBXrBERi2V0Qkbca_vbm.a_9N2hKM.zmnU50GobqP0MJ_qheSq9kUc_3Fv0ErEoVGVw1LOh_j2xvWoukhLPJ_nEtyVTeCc3weyO4Ze9x7a7WjIcui74qUMzkBqwE78EeI7ZJKYiEhy.DIyj0sYVqgoN_yLWrgRK0kISoIRiQFbeMbRfb2bd5WiPXhf2bIxAXk2ZhI8cf5EWI5hRO2fUdzMlEoYN11LIyW5RVtk5YuLZvhNX6mp57f18rkSugs1XQN7L4e5yiSDtvpmMn.2wVI4u6Lez7odziofibLPPzvgN.Lf0yMd0swsV6reNuwQbN2fbGoeQci1rct1_UfTniMn14pMomknux_zDzhYaEUovxV21wNKV9suzSLj1Jh782wlBQJs8A9so\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: xYjswXHQ5spePJlW+t8GrVtam3OG7XcodXq098hH7yKNeQZYqEewAnPF0CnUya+h8ejDfGvrjRupPO+2J5C1oUCzQcJkIqhjrpxQgPim53O87uYhMqmeOIuLR1CE6MofjSbHscMsHyotqPoI9Mx5bK+jFmdxFqBzKA2PMjeI9ud+7sLBTYYAeo82L2qaOQppLL9JV1Q5z/PlITj/sdwe/+BVM9FrX2AFwzlH+ubQhRImj3/kKVn+NOXlWW+PxmxaQIXfqqJuG+2cs2Vm0og+DQ==$cnbTvabY1TXZQJzqMiocBA==\r\nset-cookie: cf_clearance=0IyEQM0ekMrXwJRg0RHVNThZxYhaeqze1AdBoiYAeNA-1781729429-1.2.1.1-or9HWQGUcISBRflLyjyZTZpJ2w1a1XIGV7Rn5SzpG42ValPXAJl.30ghcDQJ5jfNOEgGa5Gltzruk4lMA3NPkRMwQTwVBxxMKu7Mk04ITAmZJDi1vnre92hcAa4Fuv3PtvP.kUvdVkM4Y0bu7tczqGV1vEs4sNyantG4l8jXT0NpGOaheUJRxwbVQ.H4d6h68Pcq.81TnHK16MQuDMTMlEWleM2M_z50QElvke_Tu12hg0.KOW1c7OJGkYObWohEj_kEW5lgOX8qi.cknXHc.RuIGmN8PxSbsj8xjEtU6ogKMx4XYybUsaYCzT2ksdXPzNPtIahz79myqXkGmTFYX5eD_gMFPFZsdR_L3klxdMnGt_P1aumTQNdVL8FIcYyX7ddi.or.r.XXiQsGPMji0uPCluuStHv0vWIeyzlxlZTBbBc_6X_ZQzbTVW7A0N5S; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=jokerstash.cc; Expires=Thu, 17 Jun 2027 20:50:29 GMT\r\ntiming-allow-origin: https://jokerstash.cc\r\ndate: Wed, 17 Jun 2026 20:50:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0d4ed44bcd21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15644,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T06:31:22.942542Z","times_seen":16504391,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/static/public/image/captcha10.jpg","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:28.898Z","timestamp":1781729428898,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /static/public/image/captcha10.jpg HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:50:28 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=5,i\r\nlast-modified: Tue, 18 Mar 2025 12:32:55 GMT\r\netag: \"67d967f7-4dd8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h82MvTFWWfxpex0LW%2BOgto%2Bk7DGRPs7VZD6z67k83%2FbDhjTFJMSH%2BODPtrWSU4V434SZU0v2UqmrCOZi5kuvw0RdkeCh0dBlCftfs5XR1iFyDx7Ticulb%2FtRFD4okrKW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 19928\r\ncf-ray: a0d4ed42ac2d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19928,"size_decoded":20666,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 250x100, components 3","md5":"3053bd81ab43f079c64cdc42c148bcc5","sha1":"1ac5f4ed6406df274ff14c87f35d59503aa0c4ed","sha256":"7bf4cf4274aa267a01dbdcd439b288538c164952de937cc8a632206f9e975a5b","sha512":"a98932127f8dac2160ccddeb7394ccbe0f3f97f6d41afb893ae14e1ba8f1e74c8ac0cc1cc6be05937d0e5183ac9b22cc323296a5ecfb7021381c961ca63d7e43","ssdeep":"384:QsTzykBhK+MJ/SK72XJJg4ZIhqXZiCj78dZ1jfZNohs4EyAgdmt:QsTzyuHMJ/Sa2XJJg4ehcUCjMNfnoK4K","tlshash":"8292d1a856b33d6caae2d8f620bdd1d3c1701bd71597eb992871a1e5d480f1e0be484c","first_seen":"2026-06-17T20:50:59.718013Z","last_seen":"2026-06-17T20:50:59.718013Z","times_seen":1,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/static/public/image/support.jpg","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:28.908Z","timestamp":1781729428908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /static/public/image/support.jpg HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:50:28 GMT\r\ncontent-type: image/jpeg\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i\r\nlast-modified: Sun, 16 Mar 2025 19:29:48 GMT\r\netag: \"67d726ac-6f86\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2Bahg58FpNnI4UXYSl6RzKw0iywmc%2FrEEaLprt3bndnXIX92aahaXJsgkBXq2v6XxsePTLkugkKL81Wjd8MQVc3LgDGuTcqf0KmQkcdlE4QscM%2FFVla4ScVu837RHT1t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 28550\r\ncf-ray: a0d4ed42bc311525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28550,"size_decoded":29284,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 266x400, components 3","md5":"321e9005d60512c6fc0f1838a17f8e01","sha1":"ad07a7a076eba42cbc11b9fc09d67fba24462518","sha256":"2235b525142251944d4d9c54bb7135f9fcef3d89fadeb7e7be55f5d002f5ff14","sha512":"95ffc2f1e7462638eac3f1eae7711e45232764267a4d2f21f4f3b83bf420942a2bb741949ce5a4453af3f9eaa6444a17549981e527444a58309d0871da12d063","ssdeep":"768:7m2F7jKJT8JpvUy+ZBuTf6uFos903dieOaVaCA:7m2uy4y+ZBuTf9rjda2","tlshash":"96d2e12108f29fb1f8fedf3a953d29460719616733df148db337630198959991bca28b","first_seen":"2023-05-14T23:44:23Z","last_seen":"2026-06-17T20:50:59.720818Z","times_seen":7,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/h/b/scripts/jsd/7c8a194018aa/main.js?","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:29.002Z","timestamp":1781729429002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/7c8a194018aa/main.js? HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Wed, 17 Jun 2026 20:50:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0d4ed434c581525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20203,"size_decoded":9391,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (20203), with no line terminators","md5":"779e2d200955babde284c7f88951a968","sha1":"a885134d15bed5c1ad277821a7be5cadc947674c","sha256":"620a3f34bd2bf88dc6d389ad69b2e28572be31157682e69774330bd678231f2b","sha512":"551602040b87477845020b77aeee9cb44efbed3377c38e2c13a81a026cf2ec65df44b157b3eb8ee9318b07e1c3ee86688c8a962346d3464ae27f0a49effeb35f","ssdeep":"384:s9N2H11V3we8dz81WbMezL9OPRpRnLgs5ZcsIN/gCziBRGBA9Cmw:sIXVh8dz81tu+cESP7B4I","tlshash":"2492c6e239d7b43a06a2b0b914a723d7fa5fbc44780cc56cc340d6e8f85579816e6dac","first_seen":"2026-06-17T20:50:59.723561Z","last_seen":"2026-06-17T20:50:59.723561Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T20:50:24.851Z","timestamp":1781729424851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-ZJTio2ckchv3tji70ufGBR' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0d4ed298a981525\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJFowXvCU5lgWY4uyknVLOt%2BmdWEU3%2FFV8VJMa0E4utj3vyUGfVovvtdm2229zuPY%2BN5dol8vFfIcPLGPbAoL1oBLksTfjMANfnLye6PxKDVBVAy%2FgtYilUkxHonwMNY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 17 Jun 2026 20:50:24 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a0d4ed298a981525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5710,"size_decoded":5682,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5710), with no line terminators","md5":"f3536d870d1b65cdd50441605f7c1700","sha1":"2c9291b94296e2a97628c8742c2270f4c52e3413","sha256":"9cb747984f5762473808ecf1ade14b76248b85cde60462a0676613114808203d","sha512":"c7a58ae99c4a3c34490016be84fdb308ba811fbf5e6ccd23b000bc069a64e6a2086208b3e82123964bcbdc3f8d46fd39696e1efa72bab3faa385f3a1577fb62c","ssdeep":"96:PNyAtoXZzIEb0EaW87w0TKXrcf9f2QXXZyRF8nqAjUYzueh8Emw:PNhtkCBJTKYFTy7SqAj9ydw","tlshash":"d0c14be39ab5721b63f62fa154ba73d84106b2857f04e1f9d250e6ac96cde0a403d0c8","first_seen":"2026-06-17T20:50:59.725677Z","last_seen":"2026-06-17T20:50:59.725677Z","times_seen":1,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":9,"connect":20,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/favicon.ico","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:25.241Z","timestamp":1781729425241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/?__cf_chl_rt_tk=IDrKgQTlQ.fWPDx1DSU_GKj.m5UmCNL_pAfmjZtGh34-1781729424-1.0.1.1-7NnkacZnMedEn_oPH96.iLxgfeQb0xt0QTrmB912PsM\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-mqYuE0v7bCSOZ3wcQfqFhg' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0d4ed2bcbd21525\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkjnefzL%2FPKEDjOjLdKHggCMmocyGeD3YO7yrTq2xXl2QziMCRc7J9d5qxtgp%2FNvbMtqPiV%2Bihw0UpA16iGgD%2FBCcR%2FHDu3uAanxjGd33%2Br5S%2FygzmJVmyXKt5Y5NFYp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 17 Jun 2026 20:50:25 GMT\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a0d4ed2bcbd21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5936,"size_decoded":5856,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5936), with no line terminators","md5":"d628a98cd5eefa107ced65f74821842d","sha1":"0bfcfceb1f613af389c914215990196c55887be5","sha256":"b85fd37df48864d2d10f235e79fcb228a2b299409fae8fca8bd3b13e7ea154b9","sha512":"ff4947d5a920465595a2344fb83ae0f0785a266b2b5b38f86134338adde483640b6d9a5d2a36fb6a611848ccb18baa37e46de8110b7103a443820e98afbd264c","ssdeep":"96:PNyPtoXZzIEb0EaW87tKrF6alFO3s1ETfg9wg2M21MBKW9fETGVrEYzueh8XPmw:PNytkCBIrFLlF51pwLLqETGhyZOw","tlshash":"a0c15cdbdc35e06b47b6bfd0a5f5232c8325725a7b0a608df8909e6da2ddf478518280","first_seen":"2026-06-17T20:50:59.738881Z","last_seen":"2026-06-17T20:50:59.738881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:25.375Z","timestamp":1781729425375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/7c8a194018aa/api.js?onload=VnAqC4\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://jokerstash.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 17 Jun 2026 20:50:25 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 15 Jun 2026 14:57:09 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://jokerstash.cc\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0d4ed2cbe235685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65582,"size_decoded":21859,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"37b007a08b4c6fddc9310bb5a711cfac","sha1":"5cccd9c1619c77aff109562386761342ebb169b8","sha256":"761743e95d8ebe80041c9679afd18599df86a9afb053d6dbba3452d27dbd79f4","sha512":"d46e0c44e8799bd3b283a3d92cf2d06988e998c6f9332ecb9ccac074370fce2e71719bc42f3d8380073e4dbfadf5ca8f0b45e90d40b223f3e00c0536631df595","ssdeep":"1536:A+RDl35kVfhRMGKHD+LxgnmeBDHYOo8LDgS9:rbSVfYEGmeBD7n9","tlshash":"a7532c987196787313d980f0a17b6743732a7d3aa94cc850d827d865367ce8a9233f7e","first_seen":"2026-06-16T09:36:41.625096Z","last_seen":"2026-06-18T06:18:31.257458Z","times_seen":2188,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:25.834Z","timestamp":1781729425834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 17 Jun 2026 20:50:25 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-hmY1yaXLNWsfbONE3EDPFD' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types JkfH9 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0d4ed2f7ded0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: f9is8veb;dur=235232, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":235232,"size_decoded":93329,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"11a21caac6896a800e2b7718ac36c149","sha1":"dde5b7d2e1f3e0e97e08847aa93be3a987a989e8","sha256":"32b59d028988fecb94b81861cb97c177871f3a1c82e94a8bb8fe22b129b116a5","sha512":"d6594bbd1c6bd1431c346fbcf8c8ed4fed9b0604cbb7a9bac939c342f9eb42564a0312aff7866b39b9f0405abab57002d199154b1caac82d8101d1b44691b4b7","ssdeep":"3072:UD7X8d/JHAM5yX4rm5mKqhHNK7DB4PtCx/2mgt+CHDvmw/6HTpCWOssxO1I:UDjo/JA48ReLtzWHTNOQI","tlshash":"d8341a85f4d7b8ae6311547c10a7b0de722b1cc0926c1a2de6419af078a537e46efdec","first_seen":"2026-06-17T20:50:59.756751Z","last_seen":"2026-06-17T20:50:59.756751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-06-17T20:50:26.071Z","timestamp":1781729426071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 17 Jun 2026 20:50:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a0d4ed30fb5f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"fb50a577d698c605846765169945a907","sha1":"f251987cb0116638857edad40bfd1e1ead0b8cc0","sha256":"7c4d4c585c5fc52c66645487dbc50ed3f10507fb70924b93d3151f11f13327ac","sha512":"33ae2d176f6415a6a9ef24eba489b6c46827101b4ea59f78551d9c202bd80c69d44878a7ee66e6c7578715330deebf651a42916a87235d6d089c9e274c2a6210","ssdeep":"","tlshash":"06a012c67190ee26c1990233c2744130f9301043110205700143c8111813f888294b03","first_seen":"2026-06-16T13:22:46.45065Z","last_seen":"2026-06-18T04:47:49.699081Z","times_seen":18,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0d4ed298a981525","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:25.221Z","timestamp":1781729425221,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a0d4ed298a981525 HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/?__cf_chl_rt_tk=IDrKgQTlQ.fWPDx1DSU_GKj.m5UmCNL_pAfmjZtGh34-1781729424-1.0.1.1-7NnkacZnMedEn_oPH96.iLxgfeQb0xt0QTrmB912PsM\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Wed, 17 Jun 2026 20:50:25 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0d4ed2babc71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188864,"size_decoded":71389,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"26a1b154787820a2a5042f8b7b1ac068","sha1":"05e0a2dd47bffa31ef3031a60f6acf9d61f7c552","sha256":"0107b21c06e46df131f4720577ebbc1ebdee8f1189ccce7c59aaf99e86504280","sha512":"aed8e1c6589a3ea0cbdaaee563df220f1dd2d780eb51f90580d0095a26e8cf96623e7a6bad32f876ace805249545d2c0e84194b0167e0f9b1387a25fb5d45db4","ssdeep":"3072:/cvrV598g/MZl3lY981Ozn2Iq2KlQHZvRKzYcRJaY3OtDayswzGQpuoSMoRcSHOu:/cvrV598BZl1vOAZOtDaMz1Gx","tlshash":"ad04da9ef8c3f47b6302957d005ba1dd613e8cc4472c3568e939a490bcb137a95ebe68","first_seen":"2026-06-17T20:50:59.765095Z","last_seen":"2026-06-17T20:50:59.765095Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T20:50:28.656Z","timestamp":1781729428656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/?__cf_chl_tk=IDrKgQTlQ.fWPDx1DSU_GKj.m5UmCNL_pAfmjZtGh34-1781729424-1.0.1.1-7NnkacZnMedEn_oPH96.iLxgfeQb0xt0QTrmB912PsM\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2221\r\nOrigin: https://jokerstash.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:50:28 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=8,cfOrigin;dur=70, cfExtPri\r\npriority: u=0,i\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\nvary: Cookie, accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afV6OfAU%2BTbthIUP%2FWHipW9raY%2Bqxsvr1rVDiYzUbZGyh%2Fv6VLQ39%2Fc5RsbueZeyRE68oEE%2BUp1aAxgZFdTZ8h39gGBFd3V5vrW1v02qnIKVB21yWVRtpb6HwOm5TV2u\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a0d4ed411b2e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Django","description":"Django is a Python-based free and open-source web application framework.","website":"https://djangoproject.com","common_platform_enumeration":"cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*","icon":"Django.png","categories":["Web frameworks"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":34286,"size_decoded":11915,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5999)","md5":"b1205a0ac3dce19facdec5a03ebd42c1","sha1":"48e8db83767ca38e912cc2222be1b3f5d926d057","sha256":"6906689d7fce5c8278c9ae50d3e693e1cb42bb9f2c863092035ecf4082f6bdf6","sha512":"f4fc356df3352b1dac86c86397dec02445e0cffcfa33c627b4c5a125f1205a9023284c901ddfe4c1f162a13df5ef31a4b776a3c8dbd192891cfcd602677f8587","ssdeep":"384:X4OXOtp5wAhHXTo3BowXvmSBzzXRTmq2FdIIwRXvWZk6znx/3F:X4OXOqA10vhzX4GRXvWiqx/3F","tlshash":"d7f2fa2161a5322ef127c272fde1db9832285236d353c6bef93da2b88f1745d15b3918","first_seen":"2026-06-17T20:50:59.771903Z","last_seen":"2026-06-17T20:50:59.771903Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/static/public/image/h-logo.png","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:28.896Z","timestamp":1781729428896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /static/public/image/h-logo.png HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:50:28 GMT\r\ncontent-type: image/png\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=5,i\r\nlast-modified: Sun, 16 Mar 2025 19:29:48 GMT\r\netag: \"67d726ac-1ecb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6I5%2BKV1jIRBvQUzhAdlqlXgQcYLQhqQzt4TGxbjE54MnMOjUvrm1F5Y14t0TPegXMIPRRcxJ8%2FfwgbJzlBMfatj63cb19bsFiXzqt0GVaRulqeSfj9FH6Ca6zf%2Bi%2BQNU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 7883\r\ncf-ray: a0d4ed429c2b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7883,"size_decoded":8617,"mime_type":"image/png","magic":"PNG image data, 95 x 71, 8-bit/color RGBA, non-interlaced","md5":"35ffcc2e42973ca4cff4e6d5056326f1","sha1":"12b1c52541fc5aebffd6ca6144892ccc71fa8c46","sha256":"11e0aa7a46f76c2aab94957075c74db1443c7ea718523b3c5c5e8591c10c6668","sha512":"c50d7dbc36aa4d9f77841d798bfb5b0d98f622aca02a6aa485f0903cd571f0facfb39f6534d6db81eec395a7ee47ebe57ed61bcd01b11271a2d73e4226f44488","ssdeep":"192:5SKw2/vGTfksmzXpmW6IlGNFv6bNd0zmMDoq+8aXII:gw6f2gWvsQNdvImXr","tlshash":"44f1aec740a5af0e5c180f8762588ffc9d722e80a910674c92beb513bb44882ba8ec74","first_seen":"2023-05-14T23:44:23Z","last_seen":"2026-06-17T20:50:59.784921Z","times_seen":7,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/h/b/jsd/oneshot/7c8a194018aa/0.4481393045110481:1781726439:FF0sR6VCoPpWrYWt1O0biOvnI1mW23tVdGPktPb5sYI/a0d4ed4129fb1525","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:29.132Z","timestamp":1781729429132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/7c8a194018aa/0.4481393045110481:1781726439:FF0sR6VCoPpWrYWt1O0biOvnI1mW23tVdGPktPb5sYI/a0d4ed4129fb1525 HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13226\r\nOrigin: https://jokerstash.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://jokerstash.cc/\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 9rSFvmyMA++XeNH9B/+8rukwyDxkgfUVkUBsLdQAOldFdu4aXL8wg2N3XLlOAvwGOMuYhVtP3Tc+aomucfi4XKrIRal9/G98VwrcuxDB3U4ZTk9FfQpO6QUVm+Vx9HQ7p2LsTGBoGhm1dx8VM9Hu3gOczevCuzCuQatA7/hzSIbY6NmYl/no4V9cvn6EvshVeXH6YC+u5bLHXFiz3XDga5yoJKv4pMdbrE5iiUsT1NLhqCQCeD3rfVZe1gStfaqOCsTKbPHfXfnKq8z7oTp01Q==$VxV9Nd4vDk4uzbkZipCQBw==\r\nset-cookie: cf_clearance=K4Bwso1F0lRkiFscmsSDsFrytS41qmfLIfM1wok21h4-1781729429-1.2.1.1-JX_nRxnGyLU9zKoBIM834HHZy_Fudgade8iLX_bkddu4tfOdWatEMzBXrBERi2V0Qkbca_vbm.a_9N2hKM.zmnU50GobqP0MJ_qheSq9kUc_3Fv0ErEoVGVw1LOh_j2xvWoukhLPJ_nEtyVTeCc3weyO4Ze9x7a7WjIcui74qUMzkBqwE78EeI7ZJKYiEhy.DIyj0sYVqgoN_yLWrgRK0kISoIRiQFbeMbRfb2bd5WiPXhf2bIxAXk2ZhI8cf5EWI5hRO2fUdzMlEoYN11LIyW5RVtk5YuLZvhNX6mp57f18rkSugs1XQN7L4e5yiSDtvpmMn.2wVI4u6Lez7odziofibLPPzvgN.Lf0yMd0swsV6reNuwQbN2fbGoeQci1rct1_UfTniMn14pMomknux_zDzhYaEUovxV21wNKV9suzSLj1Jh782wlBQJs8A9so; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=jokerstash.cc; Expires=Thu, 17 Jun 2027 20:50:29 GMT\r\ntiming-allow-origin: https://jokerstash.cc\r\ndate: Wed, 17 Jun 2026 20:50:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0d4ed441ca21525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15730,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T06:31:22.942542Z","times_seen":16504391,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/static/public/image/favicon.ico","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:29.137Z","timestamp":1781729429137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /static/public/image/favicon.ico HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:50:29 GMT\r\ncontent-type: image/x-icon\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 16 Mar 2025 19:29:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKzHFtQcOD%2FyZPogVRAOFlEHRUGMQPZhJMaAYeMSm57dfD4Jxv8ZVaVe%2FXhRHbDS1jZYsG%2BhmKU7UpMt68TYw%2F4a6%2BaafbnXhPNq0muPcUT2RqnQQLp9%2FR%2FUH1vFztbx\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"67d726ac-47e\"\r\ncf-ray: a0d4ed441ca41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1150,"size_decoded":1333,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"d9ca2d4086b366185c05ac2cdd5d93cb","sha1":"1a469ab2705b74bd5981eeeb4a0fb2fd328af561","sha256":"cd49e95bc0da5d5d1d21bc2c3079b04f6724edd93e246c60b4ecc8fb279cde16","sha512":"c7336a4c438e8679bf0cf4b925dae02cb49fb172370c44ebafe9368a06b89e2d87435a38f262d666391386793ec85ec554a17fc4ef9a2530d0fd256a6a36ca63","ssdeep":"","tlshash":"f22189407f97d0e5d56894301e20caab84b5bc8dee0d925771c2fb4d6cf94a13876249","first_seen":"2023-05-14T23:44:23Z","last_seen":"2026-06-17T20:50:59.796189Z","times_seen":4,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/media/wait.gif","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:28.894Z","timestamp":1781729428894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /media/wait.gif HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 20:50:28 GMT\r\ncontent-type: text/html\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yEKR%2FXEHGCufYgWNRarKCJBtrbyWeE6WM7iiqG0AvuiyLL8MwCqsXACyMD0PDJB8yumfiV4VciK2A1AH3YhPYOkeFPC0ykgcvPhnqKpaMEsicEm5G2VZE%2BAunqGJQRAQ\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0d4ed429c2a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":779,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-06-18T06:30:50.551075Z","times_seen":25256,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-YXTECW6KNJ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:28.974Z","timestamp":1781729428974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 May 2026 08:36:26 GMT","end":"Mon, 17 Aug 2026 08:36:25 GMT"},"fingerprint":{"sha1":"B1:69:2D:8A:87:48:5C:47:05:41:5B:52:3B:0E:2C:E9:BD:CC:03:75","sha256":"91:1E:26:69:78:6C:F7:F4:05:E8:B1:07:F4:04:FB:66:B9:20:6A:EB:43:9D:02:70:C8:AF:60:8C:BB:58:30:4F"}}},"request":{"raw":"GET /gtag/js?id=G-YXTECW6KNJ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 17 Jun 2026 20:50:29 GMT\r\nexpires: Wed, 17 Jun 2026 20:50:29 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157221\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":455413,"size_decoded":157825,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5993)","md5":"ce9df857201b22d9c5ddb2ca2106d277","sha1":"61b3038a234a66ac6050726d8c9d4a5078ba8b60","sha256":"58952a3fcb46da15d58d8f1f0dbc692fe6444ec530ced70121380d1d3954f2bc","sha512":"c534999f4bf7983fc5f8726e670fac63e9d58e96746ba442a5e89b03f7a26b6240ea133117b9623b79d4c4fdca1f43ffd3f1f7c3c99ddf619e3d34e4b0d0a4ca","ssdeep":"6144:RslqzAIwiQwA4qz+QW5Vkq6kwjoQ32iYmuhFo7kv3uU7TieVYSOT:RugwiQw2mVkqsfgb7F2","tlshash":"1aa409cdb3d674225392f478903f018ba57b69e2b44cc899f189c8e42e7465a8277f7c","first_seen":"2026-06-17T20:50:59.798994Z","last_seen":"2026-06-17T20:50:59.798994Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":44,"receive":42,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:29.134Z","timestamp":1781729429134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/7c8a194018aa/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Wed, 17 Jun 2026 20:50:29 GMT\r\nserver: cloudflare\r\ncf-ray: a0d4ed441ca31525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-18T06:31:22.942542Z","times_seen":16504391,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/challenge-platform/h/b/scripts/jsd/7c8a194018aa/main.js?","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:29.144Z","timestamp":1781729429144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/7c8a194018aa/main.js? HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=K4Bwso1F0lRkiFscmsSDsFrytS41qmfLIfM1wok21h4-1781729429-1.2.1.1-JX_nRxnGyLU9zKoBIM834HHZy_Fudgade8iLX_bkddu4tfOdWatEMzBXrBERi2V0Qkbca_vbm.a_9N2hKM.zmnU50GobqP0MJ_qheSq9kUc_3Fv0ErEoVGVw1LOh_j2xvWoukhLPJ_nEtyVTeCc3weyO4Ze9x7a7WjIcui74qUMzkBqwE78EeI7ZJKYiEhy.DIyj0sYVqgoN_yLWrgRK0kISoIRiQFbeMbRfb2bd5WiPXhf2bIxAXk2ZhI8cf5EWI5hRO2fUdzMlEoYN11LIyW5RVtk5YuLZvhNX6mp57f18rkSugs1XQN7L4e5yiSDtvpmMn.2wVI4u6Lez7odziofibLPPzvgN.Lf0yMd0swsV6reNuwQbN2fbGoeQci1rct1_UfTniMn14pMomknux_zDzhYaEUovxV21wNKV9suzSLj1Jh782wlBQJs8A9so\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Wed, 17 Jun 2026 20:50:29 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0d4ed442ca71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19595,"size_decoded":9185,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19595), with no line terminators","md5":"b6ee9cbff9a2f0757f71fb687d56bfe8","sha1":"78e1316542b69d72281775714bce685c1a204a4d","sha256":"1076f138818c772974ee497ec4e65847b9a457aad882d69162bd3bbcf5f6b5bc","sha512":"8d8cf60206c0cce757662464e3d89f47b6c0bdd8db9bc69451e2a157bbf3a03d93892d844bb17c254209f4f70807b6964f40b6085c5c6fc0c11c03079fe718a5","ssdeep":"384:rCVcSD7BwVQ/f2SRVP4ChcUiQwr7qhLUZt0mmODTljH:r+zD7BwVQXxDzkr2807s","tlshash":"5792b4e33cdb742d0b67e074046763c7ba6fac4474089428c2d0dbe4b961b991ee6dad","first_seen":"2026-06-17T20:40:45.785156Z","last_seen":"2026-06-17T20:50:59.800779Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/favicon.ico","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:25.443Z","timestamp":1781729425443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-EqC8H6PToCmsk0k5Da1CHQ' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a0d4ed2d0c3c1525\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7xzVeobyxcLXFSMCQAtKnVtelyIBdcNMEZUy2meNE5PSIA95MMaPfjdLOt0Qb3gSyYpp18dSucuvUpsRLnIddG4esfgBoT8fTFvQ84vk1VSTQSxeSKCKEStVvem%2Ftby\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 17 Jun 2026 20:50:25 GMT\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\ncf-ray: a0d4ed2d0c3c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5786,"size_decoded":5719,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5786), with no line terminators","md5":"9fe481bd4d1074d6ee5debe18ef7e4cc","sha1":"9810c12beb51d7356665accb14d0738610ed602a","sha256":"c76eef19b685f0cea65840fcc84703690c811b943335319668e38919ab087ee1","sha512":"c3feaadcb09abac7a0806bd5e17358fb0775d52f905924ec68d8505a6c479f958a49f722d1d7f98c186bd64b66a605cf0a5ef81de5436789e892299ce98f48f3","ssdeep":"96:PNyktoXZzIEb0EaW87c/XeCEkpHuCtXaIWEYWn4IVMyCmYzueh8Kimw:PNVtkCBWeCEBC82TMyCLyEw","tlshash":"1ec13af3dd2620266bb67b5010b773dc82117a09bb06c599f0a587acf2edf6f8218090","first_seen":"2026-06-17T20:50:59.801804Z","last_seen":"2026-06-17T20:50:59.801804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/3094495292:1781726438:S-2S10ZpQCV9LLmTB9lEDAOaRZOA6iKlMKYx9w6QNXY/a0d4ed2f7ded0731/wAhSysA1dx_eTgovREcK_ZwaDMu3YPxd.tnvseAlpEw-1781729425-1.2.1.1-MDGC9c37emt0ESRpR.UEqhvuk3pDOQWX3SYu2p3yaHCfdh_9t8.XCibWf1JKSg9_","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto","date":"2026-06-17T20:50:26.342Z","timestamp":1781729426342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/3094495292:1781726438:S-2S10ZpQCV9LLmTB9lEDAOaRZOA6iKlMKYx9w6QNXY/a0d4ed2f7ded0731/wAhSysA1dx_eTgovREcK_ZwaDMu3YPxd.tnvseAlpEw-1781729425-1.2.1.1-MDGC9c37emt0ESRpR.UEqhvuk3pDOQWX3SYu2p3yaHCfdh_9t8.XCibWf1JKSg9_ HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/b2f8d/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/new/normal?lang=auto\r\ncf-chl: wAhSysA1dx_eTgovREcK_ZwaDMu3YPxd.tnvseAlpEw-1781729425-1.2.1.1-MDGC9c37emt0ESRpR.UEqhvuk3pDOQWX3SYu2p3yaHCfdh_9t8.XCibWf1JKSg9_\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4727\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 17 Jun 2026 20:50:26 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: 97p1yFL1QEbklKDOxfxy4OGFQiyVpFQvw4tGCxt2+CIGjZR/njGvp/zF8GsfBh2PkfebZ90OQ0h5mFnkKxeU+SM2J+XNr9/E6+ditmc9F2HPcY9F8IdSwaAnTQ02c79ZF9hXoIirV0Y7kpGJHnx6BdGrWU/pu/mURSWMYWkeAvTsWapcUIbWENSlYNeECCGc7xuKKfSPgddWMeAz/qLVVuLyMUDWbEhK6k/4UsjQcCq6bAX6pSnE9nxwNmFxJfe0VlyZlRqVmOceFkGbBvaj/6tyBzW99tMQsWbfcRX9m0gH+ZPmjCAoaFFJNQHW5CsOXuqFxOPMmk4fmewFsIQUZzM2j2/PsJD6KYImYciXcy5kC05PVS7+2UUFu7gdBNuNEKRm95/lUKDYPyv01hzNdNz7T2frb8oZiE0sWM+IxJnNDo+0Yw4OYQDRM/NgwzovO/lR0egdiRR64RSViYM9PkCzYEWt+Oua49H6FZw1uTiFZV8k3e5zf5jDaGGBbGfmvPf43NbkAPC1Y8e2szjayXqNVyUM/21Kbeb+yckqCXcuZdO9k/zfqfH8ZOr2R2aaEnSGuoNMfTkPJyhiOueGTGpfD8GlU6u+Q9+wUrY5Y6AkFaVZeC4glslFT++yZ02/kR/klfsoIk7zlKJbkFL4VWl1uufnY/Wt3Q4GkbLaBsw8ENUiMOq6V6PKUcasTkvv8kkcWzzlgDm1+cEMTEm/Vk7nFTStZ44o7zRbxROoy/GYypY3Ob/sbtLWMysfmvwr09D7pExbk7BkPLp58K8WeywQIkbRY/E+qBIQ0Ye0xlsgw9eqB5ULqURs3NatX64yTWOxT7N24jAwwjAkFKT8hsMfaXzyeYxGVB9zH4F2tC1P7OhIRP4sl9DjAG/oNOHX$2JfVTxCPblAZLGZL0fn8sA==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a0d4ed32a9bd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446908,"size_decoded":337162,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b1ed869e864c90c9652ed473a0943ca7","sha1":"94a0537a6ad24522b536022a5fb83dbd4319e5e7","sha256":"b984d578546accd2d80e5b22413d26f125ebbdba2c72d5ed55e5bff053d6c413","sha512":"447ac9dc80d5368089857f39ddc5aaa583b240cf30f5bc7ec82ea2dbd8172a642808eb37cfe2af5b51f8a7e7f61f2fffc1076b4e589cb6721872ecbd78638a92","ssdeep":"12288:yWQC3Wk36+xD0hoiwGPcj3R77+bT3BEnK:yWX0SA3bLBEnK","tlshash":"1b94232a7a37273f892c692f53f1c9069c79cef90842e984b6e66e57c17ce0407b4568","first_seen":"2026-06-17T20:50:59.802982Z","last_seen":"2026-06-17T20:50:59.802982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokerstash.cc/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js","fqdn":"jokerstash.cc","domain":"jokerstash.cc","tld":"cc"},"ip":{"addr":"172.67.130.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokerstash.cc/","date":"2026-06-17T20:50:28.887Z","timestamp":1781729428887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokerstash.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 11:15:53 GMT","end":"Sat, 01 Aug 2026 12:13:30 GMT"},"fingerprint":{"sha1":"D1:32:06:52:59:E8:68:13:78:BB:5E:B5:6B:CA:CC:2E:AD:24:21:38","sha256":"E8:01:4B:80:84:90:6F:FA:29:43:3C:A0:14:22:F8:50:F7:BD:35:6F:6F:58:4B:C9:5D:20:11:D8:E7:24:36:31"}}},"request":{"raw":"GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1\r\nHost: jokerstash.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://jokerstash.cc/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=Hu_3cfAngNyFn2xJFdVmBHXXJBsgdyKh.nZpsR.YetE-1781729428-1.2.1.1-XD0AYZo_HHv6ozMjdgqNvk_B8u0SCi.Riry0fNFpg5OBFJFAO1i2oUMpoPSpV2XtcSk8.Q_debEMW_ZiuMv.0Z7Xh0HOUloW64UFL.Zw_CT0tZ8JNLDsdvh3RsfN5sfOeBcMFYpo_8cIUsSZwPnQQ_iLqpJ4XgXJ_1li03eGomUZsKiChVVTcLThmlQQ1f.ts.J6n8OcN3RjUkLZWUrHOzK4cj0ShRiEKU.Gcw3BdWrFT6AKxnhIPxUhBmg74fRtRDoYuC_Rl6IKwyoZlbbic8PmgaPLor4O.LMvjmc9yq96Vd9JyJI8aDG4KTDTHIeMx66H1hrSSEcPMPsHW6tv6sx0nA1VV8vWxfKFVQ4oVzNa5Yy6QwsvZbHa8Z84DzI2YFdcbhEicc.FcIrwSePSGPI734kIadh_Yu1odDC4Wg3450dFdbZfyql2MkqeS6FRFgkityenEgu07wIuEFdNkGxkivr1XtHERk.XBeKvCyGBQSW9Zm3_YsZ480qD1uvkffCBASq.TqXNxXxf.w51fA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 19 Jun 2026 20:50:28 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5DKNAsyeGLZHioG6TnZgWA3kDOtkNZ71nCPBknejwbf9xJD8w0Y4rjUSTyqZtS%2BwdgR6Sh%2F9azbR6JBZzCbvggdjPSQIxstsO%2B4JvwaLA2IXaDfp4Qib7MR6j7K3WZ%2F2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 17 Jun 2026 20:50:28 GMT\r\nserver: cloudflare\r\ncf-ray: a0d4ed429c261525-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12332,"size_decoded":4788,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12331)","md5":"88a769d2fe35899fd45a332a0a032cc0","sha1":"514c6c1d8475d17e412849a4c90159517d0fa10a","sha256":"ccf00d1923b0131a10e0c6d26f95e5dee6ebf8621a27e83c5a2f68a2e0093142","sha512":"756cc5cd029fc4adc9100d0da2f2b0efb3df0f2bf894fba2824019832fea594edd40a238a5ffacc205572cc0155f5632d70f54e37edc0772460f44c69cb76ab8","ssdeep":"192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O","tlshash":"7442b79c7e95ba30079b91b1a17ff30f6276605a640bc0a0b05ddcd1a878d8d192bf75","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-06-18T06:30:23.537915Z","times_seen":114827,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"jokerstash.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}