{"report_id":"5269e28d-7f05-4b28-baa3-9be0c578df6d","version":6,"status":"done","tags":[],"date":"2026-05-31T11:41:39Z","url":{"schema":"http","addr":"bltget.click","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"172.67.165.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bltget.click/","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"title":"Bitget Wallet - Best Crypto Wallet for Web3, DeFi, Safe \u0026 Fast","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bltget.click","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"172.67.165.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-05T11:41:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bltget.click","ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":92,"request_count":46,"received_data":8028449,"sent_data":21076,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"static-web.jjdsn.vip","ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-28","domain_rank":3074216,"first_seen":"2024-03-19T14:15:59Z","last_seen":"2026-05-23T09:53:18.708186Z","alert_count":0,"request_count":15,"received_data":224328,"sent_data":7215,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-24T22:26:02.229202Z","alert_count":0,"request_count":1,"received_data":479783,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bltget.click/","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3724e75086482720241972d3629aac37","sha1":"3810087f70e2eb224cf540c62b368d13f3dd0016","sha256":"b85318dec1ec73eec4a31627c8fd38d80095d5bc47294462d57fe7bf39d3ca43","sha512":"a7e8d8467d77e595e683e72600e451fe8aa3a92b30d9d345408c52a7cd3136cb03bdca8b39ff97d5901937049d23addbd8afc5534bd5a630e6e1008305cd3c80","ssdeep":"","tlshash":"28d08c8c210b0c7141a72a410b2fe604b02a3313a4a0e9213e0e63044f21e0bd744818","size":212,"data":"","first_seen":"2025-08-29T13:28:18.310723Z","last_seen":"2026-05-31T12:24:22.924597Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bltget.click/js/088d7c451cdc.js","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /js/088d7c451cdc.js HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y%2BbiupUJm1xDhRVYbFrCRGoLJzijQ0189nl8p8Gt7WON6RRYjqcX8KFj6Ur6xUz0874z9hMijw8CPYm9irpdTl2dZWEeKOoL3abDv0TClre%2BkD3p8CrTY87vDPrjwx4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d8ea750eeb9545319b55780d2fed7475\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5110afed2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169792,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (64480), with no line terminators","md5":"e1ea2eec96a872c85f4c57ac8df201cf","sha1":"58d91bbd53dc8af5c4fabac6da09bd078874b627","sha256":"39d030a842f8555b1592518985044e9df7b9dea67ded570ca24f7a8f8ef0cfdf","sha512":"c1bd94cecc9e09d2930ef6ef72f53eb925a2bb3883d88c7197ad821714b2dfc686b0387fc83aea489a7ce197a696f4aee8f1f407be94c3397f5f783dac5acccc","ssdeep":"3072:04VyHUwbxtyLTMtBl2EpmYW3lPISSMalO2iiw6lpNtFoBR:iUwbxtyLTiwmWdgiSNtFc","tlshash":"28f32ada9309333887db13d6794d29e536a50218d3e081ae1ddc806c66e5de887b7f8f","first_seen":"2026-05-31T11:41:49.367488Z","last_seen":"2026-05-31T12:24:22.812862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/4cf9b7503f15.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/4cf9b7503f15.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 784\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c30524ead183bcf5f729053578ca4c64\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulXOPPzP1Wki3rcTHe%2FTssv%2FAXt5XxGcuSJ3nHxbqwzdkTYn3XYKbUQ26H8I7JSg7JKQ5fKyCr%2FaM3zSs5ZXh6Q%2FGDLjJa4U3rfFbgqpOmD%2BN4kFXmciFlxld3cgP04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncf-ray: a045b510cae7d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3aabbeaf318c9076692c52c8652bc9bb","sha1":"f556f32e652b479ac22106b23c5b1523b22e96b0","sha256":"62561c5108524306da49b637373ba890af99cf36e8ff75af3ed616362b681e1d","sha512":"e6d237efca29354e02fae56bbac4b49e9c0f89623883fa96c7b292596b6d59b89b066ce2e1687d08eba43c6d32961e0d971d9a3dc4ab1e495b38f7ad53236314","ssdeep":"","tlshash":"7b0175a6973d0f1d7228ed3c25d4235af888843c0f42afb3b61b56c22d621b92689754","first_seen":"2025-09-09T17:46:49.185396Z","last_seen":"2026-05-31T12:24:22.754498Z","times_seen":15,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/6101f17091a5.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/6101f17091a5.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10326\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:44 GMT\r\netag: \"9a6c7fd7e4544c057d4954c8e2976496\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: vSDn_dRC9ShO5QqI8YY0M4deYWKl.B_P\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 1a61dccfa43ad7a6e24bf7fcb93ea430.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: FRA56-P13\r\nx-amz-cf-id: eMPcp044Ck9eryTdKAKxhuOq2xYpc7hk7TuAyZHomInsEixzOrsh9Q==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158526\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=kQDhD3024kwwsKbUinLUAQx5nxvVYPSgIBX8i3tu4Cs-1780227663.6548862-1.0.1.1-CdoLdn5fHKeawKwCGJpsnFo5YYvHzd94OvMscjRURTbXwrN98HOG3Xily3tnWQ54ZtpTZR92Foxc_IXME5AmZNS9Y5BHu083AVgpLoO2QTlaIuVtmYz3X3y63.mQJbmq; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=COhBZ92Vero.Sl2bly9vfEvW5LcH4lolyCwNUHJzukQ-1780227663.6548862-1.0.1.1-7ktSbQySqgz1yW_xuUhCo3p7hKgzlA21HDLjaV3hDk4; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511df67712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":10326,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9a6c7fd7e4544c057d4954c8e2976496","sha1":"2a34b6cf5caed9f9abd5ee85bf2fcfbf4647fc87","sha256":"b3d1f9b363eb98d2797b008bddd9b66ba349909f0939584dfa5e61c29652b276","sha512":"604bf0877a2cd3c220fcbdca088e6f198917d9574b420787492f28c4a0043958b6a8d70496c8f52f07c84b8d66111ce79de10a27eb54eefe31e182b1c1ca46d1","ssdeep":"192:HjlgzRuCw/SWzfZgtkOCkTS1Ys8PoaOkTwsYTG2dycN:eFGfatigKEPod6Y6zcN","tlshash":"a222c0f2e3f78cae9e501b3d8a81b7824bf635390555a12889d3e869c5077d44d1d38f","first_seen":"2025-09-09T17:46:49.25604Z","last_seen":"2026-05-31T12:24:22.790476Z","times_seen":17,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/js/378ff1237031.js","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /js/378ff1237031.js HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ve8QMJGOv84i3atL4Ogs28tlyCNw1BBqCPPolDXHbC9h7fNp5SKCcRc2G3RSFiAse07d3E1dhIB0xjJfTnwax6C6dYx8clYuWPMGpe8XUuWrJqMJvzF%2B5a%2FR%2BS57JQo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"239aae2de38d873a6533ad26be6ec29d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5110afdd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":530096,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (44749), with no line terminators","md5":"5784f4c2a127ab805e79db6e9e986800","sha1":"42c6c71ca5c7a81217dbd6450474458ae8e4f035","sha256":"d83378a7a9e25d7c626b522b3a8f298a64c99c6f7f33109698615261ec37e82d","sha512":"318d475b54629342dda9562296a5590f1d2eba85254f5d94b6f60563815f3d9570899068066f1bff604228b22fdce3a2a96a53824aa32d4d91de04be39247bb9","ssdeep":"12288:C9C305TGdBcfxCkbMAPhmV/vemBV480Qxlj3th0lQ5wReQw+XQoVdY2PEk9RpRSs:Ci05TWE+4Kk6gcgwwmz9EXf","tlshash":"b7e44242c36e0373ca7673d579843ee8e92d663b82c4af3f24b5a01525fb4a5ac8c475","first_seen":"2026-05-31T11:41:49.372715Z","last_seen":"2026-05-31T11:41:49.372715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/js/87616d47c9d5.js","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /js/87616d47c9d5.js HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocBmnJhpx2anO0wlsJWEZqG8qzlxNKDRnGyR547XH3c%2B6ZZduWtxJHh1rs3FqWHrXlCsIkoyL0AVCgxjUZhTiG%2BIc0%2Bgu8hEHNAECZN57O2cwodRpFjbReVE07uXyqY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"312c3e83712461d4a2bcb4cb9e2eb02b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5110affd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":437049,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65298), with no line terminators","md5":"7343208b268f034bd1fe4bca65f5be0f","sha1":"cf8aa367ddd532cf96b8dc059cfee73759013ef7","sha256":"2669f78529174923c84265252e501aa9ea66359f54aa6757d48c8d567ef52996","sha512":"ad37b935960666b6a6a6359eb5ec49f3e3b1fd45d92c0136079009c4fb516183e5f1f925d3cf9f682fdab3453c85a9ad0a90f6b38d5b7b384eeea3d6b5788795","ssdeep":"12288:gjBNah/dIj/e/oH7NYJgtwbPynDN6hOJ8ZQPQb+:gjBNah/dIj/e/oH7NYJgqbPynDNFJ8ZO","tlshash":"fd943afc83c6263d4a9903c5a84cb9d831a54c5de9e2723d4dadc02c39e8edcd196b79","first_seen":"2026-05-31T11:41:49.3737Z","last_seen":"2026-05-31T11:41:49.3737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall6.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall6.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 17584\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-17583/17584\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"edee47173eb180a48473db26c1406a2b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BGJHxZBcZz2S2KbGF7sHWCwlv51ayg18InBAqpx9a1LyTriPsLhCB6HCgYjJIOlz8lCeUK8Loy7crw9ufQvKdpHfbPlHJbQ32AgKfp%2BTU1B0XQ48KR%2BUMX%2FLMFf%2BsE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db1bd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17584,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"3f4050c07c93f6765c9f5f3f54139dfa","sha1":"0aa72a78dbc6056f7fef65aede3176c10b2565e3","sha256":"35794dd3d91ff996f38a7366f1fbf790fbbbba953931ffda7ea0b3396cc3e8ad","sha512":"9e20d5c76e15e369d2288fe4dbf64b748e2ed557ffb44cb69d3810d09cf47e39174376647fc2e44602c1ff1d5b23c1d3313cd10864f70a0af09cf684df59f36f","ssdeep":"384:QHQkG6xOBItJ3A3hGS1AwFHdUxzIyVL5C59BawM11:DoMBq3A3pOFsYleCwMb","tlshash":"2a825ceb885aa8ebc8d4673dc20faf82895172471211666871b646c2cc64cfde31df37","first_seen":"2025-09-09T17:46:49.274091Z","last_seen":"2026-05-31T12:24:22.814074Z","times_seen":17,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/57fb289faf9f.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/57fb289faf9f.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6930\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Thu, 07 May 2026 14:20:56 GMT\r\netag: \"d5d829dde4c5b7f56d679ba174cc8a96\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ..cLGjQW8mw6_x85po4j82L3YZuABNdJ\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 b3432a2a409c8067b51cb1fb541af3a6.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: IST50-P4\r\nx-amz-cf-id: 11XCgaEiJuu_hP6H62I4T4hmXAuV50e90PzKcBlYwgd3GZaW44fD8w==\r\nx-frame-options: SAMEORIGIN\r\nage: 2051326\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=bHYFYIOQCRjFBYmsC2u7a4SbiObrKZrlJWKOVjMqbK0-1780227663.6665113-1.0.1.1-ybbFsdIS3thgEDwwoAP2AgwJrHygkZIil58XFVqdaJk9IIO1wPloIdPb9HZPsdP_tSUVdwivhtdmpcDeddsMYlopEiQN.aEX8BDSck0yxvcaHjIpCd9tgNxA28tLEiHi; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=2nkIacmOeVogcbl3Vtl9i0gCKnplCZg2St9umQYjRQk-1780227663.6665113-1.0.1.1-dgGcIFSELDrenO4l2eoAb21K1GnhMqcNAl9PJOnddeE; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511ef82712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6930,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d5d829dde4c5b7f56d679ba174cc8a96","sha1":"ee11b7edad184bfbecb779afe8b1e571ace693fc","sha256":"85bfd910fd79c9beca9042a86ee6ec5509533ced938131a55a69fcd6c16a50ab","sha512":"158f3c282d6555fdd80633e1d0771328f046af0c269576373aa2b1da363c61e21c56411a8657c98c709731e1dfd2c8c99670ad611c1ac67945f7c0e568463098","ssdeep":"192:SU+yKJ0kjwSIT46LiOLNClPICTpVvpiqGrJPX4:1KmJSINLiOLwlPIIpVxsVw","tlshash":"7ae1bf5886b96f83ebb154f9a87225162a3162402876674ccb372fcf56554f733fc02b","first_seen":"2025-09-09T17:46:49.267429Z","last_seen":"2026-05-31T12:24:22.853809Z","times_seen":17,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":153,"dns":133,"connect":1,"send":0,"wait":20,"receive":2,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/bf2e8191d7bf.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/bf2e8191d7bf.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12078\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 15 May 2026 02:09:24 GMT\r\netag: \"3d6a4b6d6a1f6a0b6cfd3b8142a4da7d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DomO_tjHR8OeUJNo3cl_lFCY1bSV4etJ\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 8c6a3292194745111bdc6d985ce4344e.cloudfront.net (CloudFront)\r\nage: 1093912\r\nvary: Origin, accept-encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: MRS52-P5\r\nx-amz-cf-id: ClVYfKIQi6cpu3ICDMKl1CUsVqXEvnkiw5GI31I4C3lUuKI550wiww==\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=U2ObnO7p1Ey9G08e0ReF1UBikuTMK2_vXjxRpwf7QaM-1780227663.655337-1.0.1.1-Kd.dXxogOZf1ePkngqKEVxOID38HPdKczcEzj7xpnOi0mwFhFI9vq341w64BNNCmTDELKwev6euOsYqGl_osHLNIXpV6hvE11ElMfXnkD0xsp2.SQ96h6r1i7WNAEhp.; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=fcHojU0saZcM_rzu0GCQldLab0AJYvxfwCHSacOoivM-1780227663.655337-1.0.1.1-EZe_uTfeHwg2oGpHP3F6NTA4D4I5wz61k0ON9.oeOok; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511df69712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12078,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3d6a4b6d6a1f6a0b6cfd3b8142a4da7d","sha1":"94adcccdc4c4cff16bdec1dbe64cfe84aabb1fb7","sha256":"b5863f5d984f0f29115484a5f81edbca063742e3e4dda2b5e6198fa01a57636b","sha512":"90b34797c8fdbc3624020bdeb8b71621fcaf3604d6e4bdbd842f15547b88a2dca159a024af7674824f0da23264eb99e37e2b2b1aefc411387c269047cd5aec07","ssdeep":"192:CXMepcOWNAyY9qNqwPXmYux59I+2m/03rTZCiyj3w0wKzarcO3ltNoLBAVrs/Bi:CXOOLPEqwPjj+2K07TZCFN5OcqzoFnk","tlshash":"6742cfdfd73b97cb68115c49f6673406feae5003b4289a5791ebc5b0ba9c48c087c1a6","first_seen":"2025-09-09T17:46:49.120136Z","last_seen":"2026-05-31T12:24:22.773542Z","times_seen":17,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":128,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall3.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall3.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 75208\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-75207/75208\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9ecb8e67468ce037f30b1717bf81988c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTUtvofPSfLtevwTq4hvQEBDyrMZVih9rJSXqXtghHgH2Rue2YDl53O9TwwjzeVTocDBk%2FHAo7vFhmnZjWSNZcV1QVEvTDhVuK1YqNGFXD2mvccmZXXMwjIM5WTCvAs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db16d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75208,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"061f6190db58d7eae72446ebc5b77a39","sha1":"cb57fba3bb274083aff832f12e6f126a7a5454f3","sha256":"6854f5701e0715f71e230d4eed826175d9f3f346cbcb68421508aaa0c670b26c","sha512":"00005d8d6a331b1e9a73a6aa2202d838ed47be9c1f6282ccc3176c9dbccab22c130fadd511882cfa43471444bf1ae4911b3acd9a98395d3cbf41b4bc406db575","ssdeep":"1536:mxNY9uj7ikCkxF/VY8VkfqtSxjUv+autASb6fuEhQyHNNcjr4XbLw:xci+//VD4qoovhHJQUcjr4Q","tlshash":"b073f196dda27dddcc1147ba92438306b708b86bbbba5c52f3449e5bc9e441e0207f93","first_seen":"2025-09-09T17:46:49.131748Z","last_seen":"2026-05-31T12:24:22.857442Z","times_seen":17,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":120,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall5.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall5.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 15253\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-15252/15253\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"42a887514824dab8d0831cc53a12485f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2xQX1dvudmpTHsEWHJUDBTUJV93u65Wr6HB4W8%2B1Qkv3ZL557INsg%2FrBIR6TtGepQI0FUnciM8JBqGAuO2W1sLngIaVfFels%2F17UvqQ5zp%2Fg6Ao1CH7y5o3%2FQRUHniE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db18d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15253,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"20d0d92d3bd51ae7de918d37f1f14581","sha1":"914e99d0e21ddb52d0fbd3b7cbe0c354346b6482","sha256":"cdf1f6623bda5e7b83ff02dd3ba8b782846758661e9d3f5205f54fb2a4468e03","sha512":"50adeb811dcc37a4efe0efa56089aa03fa473c245b63325212ab6d0a1967d1fbd3206ed59995915691bfc30ac0b8100e20e9418761b12447357dcfba534c6fcd","ssdeep":"384:Qe/FLTNJPqzotHQ7EQf6zm/Ug6z43iWXC3:BZLCzr5f6zmp6Ghy3","tlshash":"99623a6d89d1dccaccc6633dc30fdb169961728a5600696579f64bc688798cce22df23","first_seen":"2025-09-09T17:46:49.216523Z","last_seen":"2026-05-31T12:24:22.923709Z","times_seen":17,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall12.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall12.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 21842\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-21841/21842\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ba18ce56766698a65cffdd72bf4f35ea\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DnA8Xod1RTodopPqzHrfT2LvAPls5yxgmVBGNz9ljhINKs2PlAxyL6A7FUDmlTKSvS1cZMoa%2BYxzvU%2BmkkrV%2BQpFXpDMIgEvauqar9JXey1s%2Fg0NYH7GMeTOHACvuUM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db1fd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21842,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"96ac9a48ae5d3b85cff40db589858f55","sha1":"c1713caf9cb654c722b6764fe2776e3446055ddd","sha256":"657a41cbb1762bba1140ab6a631acbee58d0b242d782098bd15efecb065a1220","sha512":"c2d47ff99cf1d35f8cbf5ee6b81dd09fad1df9c9b196026357938dd0ac9df0d78d3e3800481843804d692cdbac83169d5f8fa665b9069fd80c3ee81a9b60ce34","ssdeep":"384:Qo3Q8K5UbnNG0N2/UH5tseI+vJnbHw+J+Ik4Mn0+vqlOvIXCLKiVmMdOE98p3HXo:Lk2TIt/UH5iqJnbQm2AlsECLKiUUOI8m","tlshash":"8fa28cbdc455a8dbda92637ed70faf17c441725a12401e2135ba21ea8c24edde618f33","first_seen":"2025-09-09T17:46:49.174704Z","last_seen":"2026-05-31T12:24:22.879589Z","times_seen":17,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/fonts/8773fbbc99c1.ttf","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:04.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /fonts/8773fbbc99c1.ttf HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/css/b5490f269744.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfbpoE9XI5OHOnKTGgJnvqO4W2%2BJFNPt%2FQoSd6ADFwu1uXM%2BekgHvNZ2%2BO2rQ9s1fWT557hZW%2FoJowqdvSueViUJljmUDBx8OqE46UdNaB4xWAuVH3kzpQLkd55mpLc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cac17abba53e9b36bad9990c0e500ea7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5166b99d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146616,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 14 tables, 1st \"DSIG\", 21 names, Macintosh, Copyright 2021 Huawei Device Co., Ltd. All Rights Reserved.HarmonyOS SansRegularHarmonyOS Sans V","md5":"48d656ed53e13d664de5cfdc7d3c438a","sha1":"8bea06ce4d7b4196f5e5f60b5580bdb1519ff560","sha256":"4f00c7e80329238d0b6fc58e5c829c4086432ba9fa1a8c5ca3da9a0442ce0452","sha512":"4d3189ddd412c1018a1c102c7067b5983ed2ea46d26a0e7f5f8a0829b77557c35a6cdd41c3573c3fd0592e240f1dbf51133a73ad246f0f44dfbe37f5b1c1feff","ssdeep":"3072:2waXVb3/LizgXbAsJzu82vIm3r6yoj8Gf9g4I3ZgDl6iquMX3js2O0:GVb/Liz2Jzu8IIm3rE9g4I3ZgDlnJO3T","tlshash":"7ce34a07f3a3db5fea16adb9a632e22283cef434793e874ef5041567d49b8e1c884541","first_seen":"2023-04-07T05:22:56Z","last_seen":"2026-06-06T02:19:26.896731Z","times_seen":625,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/files/lucifer.v7.js","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /files/lucifer.v7.js HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TNbmN2t1lxp%2FAGQmNgub%2FF6lVz5IGK%2BuBzQFxQtDz1yy8I9nFqIC7pFf2bJKELn7n4AG3bn621MAIb5kzpf8TBDQJnJcl5aaxGSjh%2FtfBstbzOtd7ZAd0rGBBkOf3PA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0e9c69ab8a7730912d422aeef0f362da\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510bae5d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476384,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"299e55fdc3e9846715ca2a287c2f7be7","sha1":"6aab08b1344d096442d0ff29e9953b0a1c3dbcee","sha256":"a9242665ee811fa2f8ca22ced0f770e6c54ee3ab72a6169598c468df3c7dcbcd","sha512":"8b60fbb4256e5c8355ea300ccd7feefc55504f0718371b4c4876994ace7147e7974760a6138e282207462d1079e9e4ea1daf8a37159b5fe633ada53fcb191d69","ssdeep":"12288:nCiAO4ymBwQrnVZsZWUyfk1XE/p6GVxDo1pF4oH9IGXLC1Au6sAk:nCiAOzmBwQ08Ro1pF4oH9IGXLAAu6sAk","tlshash":"6a256c8073a0a47d3a1712d409ab0805f335b45ba81d84acf7ece1e6af959cdc977b39","first_seen":"2026-05-09T00:04:58.096998Z","last_seen":"2026-05-31T12:24:22.779341Z","times_seen":5,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/ec96706ec860.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/ec96706ec860.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8760\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:45 GMT\r\netag: \"7a35c1e24270a3180a055308b43d6125\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: zhs0Z6iHnW10FyJSpQmervFTAIHKEvd9\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 020995a9de07e6c1689726f8f3e99de2.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: Omk6i4yEuEksncsJG519cGDK1l6BE9T5HsEZ_nOhfb4hbmVf8M1ZQw==\r\nx-frame-options: SAMEORIGIN\r\nage: 1487034\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=kDDF.MCRysS9GLWR9lxh6hK.YlSuNT6AfphlYM6Ieko-1780227663.680141-1.0.1.1-lGH_PKzR7NkvB2drZUBes8s_96AcdyHX8fMdSzTKXUusMC7lDZuW8Vc1P7OgKa3LjTSJ0FSkf9Nx8bsRrOlk1bYFRlnr01ztauhvOxFdlZNbV3eBgTmE1yUusG_3P61H; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=62G7psQAEYBXpergcvwlqsWR2Kk3ARG7YxXoecovA94-1780227663.680141-1.0.1.1-pE2iV_KZzZ_IoNNnu2vv_Ucwqfla2jAYIxaOY4PxZ1o; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511ff99712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8760,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7a35c1e24270a3180a055308b43d6125","sha1":"411da46445018680be0e6ce50f39a2ce0de4ffad","sha256":"9a9558675db0505b0757085461d739f1194dea47ea3ca8968bffe9d41312aa3b","sha512":"799a412674301ad14137f3030414451b23117a7569b22bd837f43a51ab72dea05834c188216f213ecf6ab12942b1fa7e372b21885fafb631f34c725f66891d86","ssdeep":"192:93Y7ymNgeyODazdhYzZwnakgXSCko1VbMTVAAwAiwHEmrOe2Yua:RY7y6g5O2xezagXSCkixMTaAwO6eL","tlshash":"ec02c0929acfaff7859f9a794133ce65a492eb30201b189d0f8d54cde2e1008774c057","first_seen":"2025-09-09T17:46:49.102203Z","last_seen":"2026-05-31T12:24:22.834557Z","times_seen":17,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":164,"dns":129,"connect":16,"send":0,"wait":15,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/cf85583dd325.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/cf85583dd325.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5459\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ecbac92cbc9bf4a95f1b70b1b6e806f9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2G2dBFJeLzJYx5phAJIzVX471EesglJKg6cyyH3KWpLn5kiHiTGm6PU%2BIa5C%2FySlwbS%2BaDzosYZyYZqI2x4vk652SLm6UwcpGE2nCJ5NJPbQBuKYq0Ybvv9QRZUPUEfcgb3WACPG3AVSSA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncf-ray: a045b510daefd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5459,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 720 x 720, 8-bit colormap, non-interlaced","md5":"f704336b1c555a3f81bf654bd40c5da0","sha1":"b1106ef5f6e618e7630324573f47e4e427b0760d","sha256":"494ffe061c58e981fd13daf81d0a6ba83137de47667a1d953b4b678f6a3b3e8f","sha512":"80931ba34730114af7451261f864e93d94a8cb8ebe688c3b625cbd82995a65ccc437b2ef74ed996bccd2f866797f810cd70db7b3e6ee35fcfb2b5504d971cb63","ssdeep":"96:Kq02nwXHG1Jxjft4rZKZiEifY3x/VM8uBQw+dZ2juuMQyFRsvi72EwiP:VNnwXsjV60iEBaQb7vuxG7DwiP","tlshash":"eab15b7b6e3a5870fa40e27bdd861d20eea3272dd16a939424af41397707123a7284f1","first_seen":"2025-09-09T17:46:49.313277Z","last_seen":"2026-05-31T12:24:22.836859Z","times_seen":17,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall4.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall4.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 23326\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-23325/23326\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"70ca9da64e5c4d6224299597af6cdca9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKPZjacb%2Bm8ldQwba50k87ofs%2F1KWtEODIwxLAzJ0aAoEp58ybD2R14%2Bi%2B96pcVV5SPral2O2LQUnExglJohqCgjmWlP49%2BKI4LTcEhUnQL8tFhObhRhfI9ubpDv1Ag%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db17d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23326,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"4e30447dac2b412a7168ba84bf991520","sha1":"6255983cdd312001a8bdace9328f41014c1072f6","sha256":"083b4c8ce13b06c3f270ecbca1cf6f25efad5e648b35360dc62ba8ccc3604b1a","sha512":"37bb4cd3f5f832f124d677f005868804d495cd869f93e3dac97407903ca8a18cbdbc476e12c9b8511d798e0b4d4632f8c4696bb9957cceec849324722208fd86","ssdeep":"384:QFIsZrr10zUTbJp3vBFNlJbCgldg9kGErx9T55+9wssYD0XMwxc9QNHF2:2IsrrGYTVOg89XUd7HtcUMwxc6NHc","tlshash":"aaa29eedd895a8d7c585233dd70baf46d960318f13902d30bcb286c586748d95a5df33","first_seen":"2025-09-09T17:46:49.306121Z","last_seen":"2026-05-31T12:24:22.876538Z","times_seen":17,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/css/59d26b7955a9.css","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /css/59d26b7955a9.css HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MyNQosLcKHhITySbS8ZpEYOCOEhFJtPzLtq0nS3Wol%2F4FFeCeyCxIynZfS5MI%2FpZfebSnRdfX4%2Fyd1Rj1RGHHsPaaYNQXzyAB4lEZd%2FXQlEPuaIj%2F4KpPXI7GXp%2FtAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"324dfb7d6cb9f9190c63c39b91e00702\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510bae3d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182740,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"f64880d9fdc587daff53455c92110e51","sha1":"0140d7ba076f8c2709e10d2bc30380d82dc96ee8","sha256":"a87df4b67abcde575b604cf9be2497ce082a75a976af4aa69cd2cf475fd58bfb","sha512":"f6c43110c31634fc76f7112f74bf6be3efbc9dff188db44b07faaf55f75b5bbb764058ea2cf108282a734e08554fb5d1de6a905d6761500b95a2ad69dfad6df5","ssdeep":"768:Ca3tpEs6QHqYPpRJsAk4qs2q6eHmL7cCUrUvjk2GgTwUm6+rRas6JjvnDLkZGh8m:HBBsg9HmL7cowUmXas6JnJl/2cOo","tlshash":"6b04b512b1197538b23bc43ab89226bd7938b623c32341bdb5b26539ded75933b3118d","first_seen":"2026-05-31T11:41:49.388061Z","last_seen":"2026-05-31T12:24:22.893001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":201,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/06f50c9d514f.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/06f50c9d514f.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23464\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Fri, 15 May 2026 02:09:23 GMT\r\netag: \"726a74f55cd33ae5a9defabdb0f99cda\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 1VZJ2aizjZUANxsvRY1b_3e59Ex2y_ZG\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 7f4ce23397408092dc910b2d5162f0a2.cloudfront.net (CloudFront)\r\nage: 1011004\r\nvary: Origin, accept-encoding\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: AMS56-P1\r\nx-amz-cf-id: hraa3bMyeK3hqVb5Lgw1ZIpEAlIHoIa0NkpELz2lksopUaK7XEh3iw==\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=sTux1xuR7Dg_myMjhAIa9gy9WvyBsf03XWnpymV3Mog-1780227663.6529772-1.0.1.1-Pr8tlOcV_FgPS27En0Ne3Ym8QXuUdRfg9FpmYV60MDedBc2VbCFGRxPi2V.mNb.X0i0O18OPBpsFh39Qx7o.jqcMbdZsQ1C37FUSvA.0tUEI_1EEWo32ygTyOATCiftG; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=7yiRzJ8Yvv9XDc2Dip941kfGoR35fI4Rc5cCmgw1kYE-1780227663.6529772-1.0.1.1-F2DeSHENY03QUZeJNyyCXjBmVS.l6HakWzduNZfQJlw; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511df5e712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"726a74f55cd33ae5a9defabdb0f99cda","sha1":"4522405008544eeb7508fada230e57b16d117497","sha256":"9d229037dd69939fd8a119dff488c2a4d11fb441e28720d892862fc306ca1d60","sha512":"1d50b6573df53519022110ee005b0139674c0c5abb5b8ed2fe6ad26b2d3a615472721d5cefb0fdc6742e7687b4a6bb8740cda02c92d0b33c1089b35bca968ddc","ssdeep":"384:JNEUvMEcewcIvURx5bs2cq96O536MRqyOiQR55bRhkEHrJ+fPfC8Pzqnt6w:JNEUJxUvURx5b36SRqyOiy5UBPQt7","tlshash":"8db2f04d8b3682fec74d2151d91c31bdf4014e0d6e2989a26c71ed6f81a1c7cfb9d456","first_seen":"2025-09-09T17:46:49.330473Z","last_seen":"2026-05-31T12:24:22.859776Z","times_seen":17,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":141,"dns":131,"connect":1,"send":0,"wait":23,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/favicon-16x16.png","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:06.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/favicon-16x16.png HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 167\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8e2072f070cf715c67a120efc8b1a922\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDy6Ddr6VmuWUjqMK%2BSVLXFZVGvCbBj6VV9Ae%2BtL4qAKfI%2BaT6tAsfqr1HdtAdKtrYp%2BOSIJPkGdMelt0eh2Vd7Wzya29UcCCm2X7lxUJYAv0%2FUhMDA8Qt9JAA61C4Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:06 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a045b5235cf0d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"eb2a70fddfcc12889c9ab101fe059f2b","sha1":"8aa79ba4ea0cd53f68b0661c0ef7ffaa0fdbde9f","sha256":"8da9bd247bcc2b3463f45534d7c265f788dbf5a7894d8814c325028876065bed","sha512":"0f4b4b7d5d031db3568bbe16d041929837a022e5be7addeaa0fe923f8263006e253f0f471caf410cec07246635cad8366a702fb0ef99e60332d03810ea6d1517","ssdeep":"","tlshash":"1fc0c0521d5b2e18c721373b123122604517111c9ca875c95d116025444b10580b0d73","first_seen":"2025-09-09T17:46:49.285016Z","last_seen":"2026-05-31T12:24:22.86293Z","times_seen":11,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/b1a026841a6b.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/b1a026841a6b.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26636\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:44 GMT\r\netag: \"0b60cd1b6d4130967695d0bb6063583e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: iByf3dJvqhovzkE4epDyslYISTdfYjzX\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 84108ef424580a453dedef6c251553d6.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: IO4fdocKfKERQ6zdtE3d2-Xv51ATagHrzOcs7TbZeo1oU0qIIiaInw==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158987\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=gP6Q8sWlpSFhmvU73DrKc8uOFJ2WzWiffuix3WDpbj4-1780227663.6656058-1.0.1.1-KFgi3Ro.Vc5ce4H7Q5CvfzvYDUdTmPp6ZHQjC0mHZAtOHdtCTlVXawdnp3rVjphTm5HpGLeK2ablHNAwKKR_sTJTOrfCbze2Jiw0OuKsv_74DcayNkWFeSxdowrJPIyo; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=Jhk3lkk3XEZWb.BlLJQKs_aq3o_PRK3QoqDTLUsPmUI-1780227663.6656058-1.0.1.1-SpNnhryH1JVh5EXm1HLGwKlAUL8Q0HMdJFucGHIA4tk; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511ef81712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 952x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b60cd1b6d4130967695d0bb6063583e","sha1":"d5fb9af18fe22f6811a803201268d68e1c6fa583","sha256":"46f5ea6249344fc97e367b5c42153c6260a1e9063cbb50cae418c9af158c3388","sha512":"f93b118834968cded536d44840546f4097cc225b0f5ea1b9e4c5979ca11218f5dee71d9c16be3d0e4b6a09ab566ed329062bee9be4d9a9a98947cebe03a9f1a8","ssdeep":"768:EVWrehSkHDjkqiHbxg5AfmPSM3hkSks6JI63:EVWq4WDgqIbxg5PSikLJf","tlshash":"4cc2e099c184d18f6ca8b17a1434db33d3c5b8640b3da4a5b908c6db119d3882fd72f7","first_seen":"2025-09-09T17:46:49.339091Z","last_seen":"2026-05-31T12:24:22.864796Z","times_seen":17,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":150,"dns":130,"connect":1,"send":0,"wait":21,"receive":2,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall2.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall2.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 13573\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-13572/13573\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1c65c1fda79249fd9e6c52f0ff2cac51\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKnEwzDShMe703fOgBN6qI5yeuYW6fI34SQNRLpSO8jeeAM7caZ4RrjO22PwuoX%2BLyh9fw12wliOQarAy8P66Iy7lxkQECqlY8MrsmdjA2fKqc8Th9SPwVjKX3itRm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db14d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13573,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"d058f045858f10e1545868a526afa002","sha1":"2bf783cef590d3ee58acdcc21c9d12e0cda1a92d","sha256":"cb9c368043ae1a8eb1b0a32aa46e131c6d53db8b8bf530101fecdcca1f938376","sha512":"ce8c36e850471a98945899c81a875a50d03fbfc5809103caef0df54bdd7351250b457a3995029d8a7520d580afeec048663f2c3ee591a51c8c78b6169bae56ec","ssdeep":"192:Q0xgggo3aWIwLBWL5RnFEiPoaEmoAp+ZO+ZZnia0dGm1UA8G11rzkPMamOF7VoQL:Q72Xe5vroU+rih5p11/kPMal1L","tlshash":"07522aedd446b9cbd894a73ec30baf4a4445318b16181d2579fa52c69834dccf268f73","first_seen":"2025-09-09T17:46:49.190438Z","last_seen":"2026-05-31T12:24:22.915273Z","times_seen":17,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":129,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/f84b9173413a.png","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/f84b9173413a.png HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 2087\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"260f62d14a56243b72f3d254c9311457\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s35xJTZ28RRjAq0b0Y7KbZW5tf1UU0wAoHDeiN06AfNCpTj47VagEKgRTqGG4D7%2BVI64boYtikK4HIlv5Vo9SUXgIEOCGt60wA%2F6P6rqs8558G93kNlAYJxfra3ThK8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b510cae6d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2087,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 381 x 60, 8-bit colormap, non-interlaced","md5":"8509462542a57ada4c6839fef163ea7d","sha1":"a76422ce2708c32679c810a3d30aa7c3801a8832","sha256":"984738a8416b7ea559dee9a399ea1c95e008608ca7470f58e6c691d6f7e3bc50","sha512":"ff8c47e5c495dd2b06cdac7282eabf0bf8d530764a0dfdb1d3d844e242906d4824a68872b442749dec4f1339786d854806c7541dc53e8c906496684917b85bc5","ssdeep":"","tlshash":"6c41d7a6a374cb19d13e590ac5ca00afcfbc6c87295559c228babb314ec1a53d14d346","first_seen":"2026-03-21T00:47:05.752538Z","last_seen":"2026-05-31T12:24:22.922385Z","times_seen":8,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/92d74f1865f9.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/92d74f1865f9.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8540\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:44 GMT\r\netag: \"aa92c6aef9429ece454dfb96f44ea12e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: XfrQwgCkSUOnTY3kxtyBqJiFIJ5dmZ4h\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 bc7c353da4431a6dd3688d01f8a48b98.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: FRA56-P13\r\nx-amz-cf-id: tRqNQvNUEaHwzGleAV2RaO8p73aej6vS9CDWza2WCtOCWFA0Az-Ueg==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158526\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=vvioqXmcijGOiFXPhsZN8sInbhsu2kSTy4EU0.xzNVE-1780227663.6539192-1.0.1.1-UaNeUTlHGEwg22MOSR8qa8t8Z7BhTleaBIaK2kfSU20Kh53SpIOm9pT7oNuNw8xqu2pOC34lK3sqpKhtvRaVLkutgS2i5_pygMXgZ3EbZuiBTgh9yFfuQW5YMp8j_5y9; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=.J4wRtsc.mAyFzLcy0KrTpNhkdFs2G8Tm5Mk3dBK__U-1780227663.6539192-1.0.1.1-Dn6T0ca1cxUT3imvQImmqEPkHR.eewvBiY8bwkDzylw; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511df63712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa92c6aef9429ece454dfb96f44ea12e","sha1":"0201a88174355a885e37aad366d8c9ce56423446","sha256":"efbbdc2697f9ea8503c8a535f387092ca87b60d9e761973479c7455c7a23a6ca","sha512":"765f9d7321acd60079dda481b0f3d7c65c5dd4b1d784a12d50c2f38c25316b3a5883af8804c030e9fc9258ada0d33dcad4f19daf3a735a904ef6e5d31a9034b2","ssdeep":"192:9/2u8r7yhGrI3HyAX9Z6caKc9zCMbg9KoBldkZhvFMXM:h78r+U83r9paKc9DoTd0hvFMXM","tlshash":"b102be52bf35d38b4f1f3b3856a7486986f0d4e909a75b312e34048c81180ae1d45e38","first_seen":"2025-09-09T17:46:49.253638Z","last_seen":"2026-05-31T12:24:22.824001Z","times_seen":17,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/js/ac54384f6444.js","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /js/ac54384f6444.js HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cKXDHf6o3sqNkb0FU1qejhLR9QTkAN79mQFuPYJewaOP3UtjozzjuwNPxhejfioS5vor4CvBwJm5EImg%2BM9kyNkh%2FyBiiRJWNGdY4yuAWL1INEn0EjEzm7dpaBi%2BYY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"58d52d9e615c451467c544104b250ade\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5111b00d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1233337,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (64348), with no line terminators","md5":"7fb7d128b269bbdc843c8a7d0af21147","sha1":"6619c32869838efa0dd9cbc08852bf70e2d98381","sha256":"6400c9495c58ffac26de8bbd5eea298b19035efdc6598329b71aba8c52d16bc3","sha512":"c165482b225e6dab87333fb7fcd1207798c9f4b7193a9e769c857126519579dde274b41ac196b75bf3b09dea545ae8400bf0d11625108bf28c681c9b1df20e30","ssdeep":"24576:4epx7RCzpxxGzhDb607rWVz48Fp07KmHp3sGTneWkHwjV/BE95Riew05TLyyMXDb:4epx7RCzpxxGzhDb607rWVz48Fp0KmHB","tlshash":"a565d6a5416a13181dee3687f8493bc56f61caa4a3ddf8ef88dcc31914de3e0d135a92","first_seen":"2026-05-31T11:41:49.395599Z","last_seen":"2026-05-31T11:41:49.395599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall7.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall7.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 39852\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-39851/39852\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e32cfd59dc3ac35fc12c9d2a710598c4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jce3zphbRqxAZ9bjNApcgH9XpieCpUO4HcrDXNGFnygim5CoxSyqtNlPXvxX1N6j0VkEoiuzr8GrM4NA5aXNrxuFrhZe0hr3B%2Fkr8xiUzNhV1E6ksD%2FmBAFcnkXxcIo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db1ad2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39852,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"bd2278a8d45e24de293bb65b3edcfcee","sha1":"85385feca9a9c47eea5c50bc803fbb1469a4132e","sha256":"65dd1cc6e0538345d2c7c7bd5718ba1ac87b6dc9f8a47846f77d4d344bbd1633","sha512":"055cd443cf71aaf669c0281242a59dee0dda9a388fca63ce92ea76f62d1e05303693fea1bd62dbee2e83f6d66c8587ded43d4517971755d8a1deb973d95890c6","ssdeep":"768:QG4KEqDyexIV7KeVELbBzY+e0Z1Kks5iT4VB4jRqWHe9ZLUXCQ0:t4myuJ4EvBBPZ1TkxUjRqW+96CQ0","tlshash":"3203b0dcce913ce3dd1506b7538ba2075608e44b1f360967f7b69e22edb860d482a727","first_seen":"2025-09-09T17:46:49.294273Z","last_seen":"2026-05-31T12:24:22.919353Z","times_seen":17,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/f23d06449c06.png","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:04.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/f23d06449c06.png HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/css/a97b0f138b4d.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1857\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"332e61eb75aa3627e5635e74eea4b45a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzwsBINz7AXOZU49pXWFmwNKct5iT7V7AWOGWq3v9qfRq2tUd7n16SxFB1xUU2I0XlRAC2TalCmTIpNYuLMefz2%2BgXDu9%2FNSUbmoSYMkkF129TiccyuWIr8sbTJ1Vo0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b5165b94d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 420 x 342, 2-bit colormap, non-interlaced","md5":"127232577a7c2a91db805745622d5293","sha1":"cd4761d0726f2269a530a48c4b670c35ba97fa6c","sha256":"f9b61bd0effd728d8a4b19f8cbf5d71665662cfc2cf367c17115a5ed9a30d946","sha512":"d605f929682c51376d017451fdfe2b1de2f6a9658f4aebef5cb85e872f200910d6fc7970ec365af81ecd386263fdc8c4b832a2c5e7b1b1b2cd28f8b425c4af61","ssdeep":"","tlshash":"b93109edb1080cd048b5699b7837eee4f9a79f227d740a0bd569260026598c93515439","first_seen":"2026-03-21T00:47:05.850895Z","last_seen":"2026-05-31T12:24:22.921637Z","times_seen":8,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/fonts/d5c4e6582acd.ttf","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:04.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /fonts/d5c4e6582acd.ttf HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/css/b5490f269744.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxgA%2F%2BVtOdUyufGkYdSavw%2BhJpHiQ8Zbvl0mMO6yQFLZFFTCPA07qpTz19P6VX9zztPQ%2FzLt1rYrCQ1%2BLpMC7BQyTKiu0fOgPVaKQeblzrJdYKXBtCk%2FaFr%2BualPAbA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"115f0bcbea71dcf20109318fd40ecfa3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5166b97d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146164,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 14 tables, 1st \"DSIG\", 23 names, Macintosh, Copyright 2021 Huawei Device Co., Ltd. All Rights Reserved.HarmonyOS SansMediumHarmonyOS Sans Me","md5":"1ec44b30a3b03d9267628d6f8969ea53","sha1":"f422fe9489424971b9baa2841dda6b5c88580899","sha256":"f6b009d07d8d894d55eadeb7080b4916c3a2c83ff3ee60bbe851e6698d73bafd","sha512":"c159481d4bd20acff1eaa383892aa7059f18ed91da6cd614f10cc50f490666932c497cb33de5f45799f56baedf3d319105ba1f51763b85c00d99b1b840f861e2","ssdeep":"3072:/MMRRJRRRRRxwGAzoeThBr2AXV6UHrIt4Z8X8IXZBlt7SnC9IR8JGCDfW35hCY0:/NRRJRRRRRSGAfyAXV6UHrX8X/XZBltZ","tlshash":"bce34a07f3a3c71eee17aeb99b32e3a25a8ef5357e7e435ea9005163e44b4d1c894140","first_seen":"2023-04-17T09:11:55Z","last_seen":"2026-06-03T15:09:58.587488Z","times_seen":203,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/css/976ab34eac68.css","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /css/976ab34eac68.css HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TfMrDZY9cgxCcBpU%2FOO8fnwRDlkoMmNITNw9ElBYZ3s3VbiRQ8gA%2BmwRBcOgIDgFctpwUA9jw4m1dOi2GnR3ORzU8stlzIWZ2manUiYIUvljY0Z%2FJs0ltl8PE31bPgc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0fd45d4eb1950c38b7ce175d3346f7c3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510bae2d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32971,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (32971), with no line terminators","md5":"e03758078b6d0f87f28ad10bc177fd0d","sha1":"6cfa65cd4c9793a04b8112604c94ecb785fa63e7","sha256":"e177c94bccab815abfb5377d127706084466e99b211410af64f1fbef0a220219","sha512":"23171a3384397764f95fe78f1bd99351262e91749432ff1c22052342bfe83a8cb4d964b3dea259b44ae64d917490a148b2001c9bc5a22ad230acb2fb41bec53b","ssdeep":"384:nFxt6+MEMHS1qkDkm0RdmkkQJIQwFcEqaRyxjVXaSDpLNsktuzWWmm1GSAXu0iTO:nbtPMjGCFbMGIG7","tlshash":"24e2a875793d221ab437d096e444aa4e37a9f607d30659bfef19e22fc9cb5893a30304","first_seen":"2026-05-31T11:41:49.398742Z","last_seen":"2026-05-31T12:24:22.751718Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/7532f0f1d763.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/7532f0f1d763.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10496\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:44 GMT\r\netag: \"4bca4f3d9d6f36688ea93ae83a5f3acb\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ia7j_xCSYKsfF3N9S8xGVF_c7ZkDiB4e\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 7281e778b21e92ff73ec9f16472b87fa.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: FRA56-P13\r\nx-amz-cf-id: ClM9YCFDis7ZSmsorgI2oi8JSsOhj51jaba_g2PWzJfo8Oei82RvFg==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158526\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=28QVddoDliRABQoOIBwJFC50MPwnKh5nWZI3SXv.Exo-1780227663.6557238-1.0.1.1-qQoPwDBtJKhL6U1z5asdYvtE7PSYJt7J2TOkDbsMx_vMT5k2EoH1EyLTQxiwznz2Kr8kE5drB2nVeAEhfG5Ah2btv8E2wUDFvTx7aNHWD4Y976ddCCFWM8D.TFI8SqJo; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=DMSxcPg8KKi00iGSyHe5n.5sTe3kO_gjjXDv2c61PFs-1780227663.6557238-1.0.1.1-SDnhPwcAm8K8iPoqXgOMZSAz9lQXlAK2FSsWCleYju0; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511df6a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4bca4f3d9d6f36688ea93ae83a5f3acb","sha1":"4bcd0501f76b9793ca34ca2709d9b645e097761a","sha256":"a43771dd197991f03bc4ede783ceb08ccb3a2a058d65f4b94de764eed3b1d171","sha512":"2fd34c5923d93484a5d4e4e09e8b0c351623e750cd9fb0209273af4617c5a8d8800b18805100ecd245806e86ca2c5540499a0e6d87edf7cde25c170c3b34bbb3","ssdeep":"192:uU/mCMiotSxc+mJJo/VvjIpzmR6iEYtdEUuA2gsTaYMO51jvd54IS+:T/XdoQxcrLo/ZEpGBEUumsWYl1jvdyId","tlshash":"fa22bed59d3c8f81ab3c9edb2c88c13524c74f04cd8559ecce9a5adcca2a956257ca31","first_seen":"2025-09-09T17:46:49.143776Z","last_seen":"2026-05-31T12:24:22.911145Z","times_seen":17,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall9.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall9.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 14845\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-14844/14845\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c1d0d433f0e099e06f6da7706ce6f962\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyaBgYitf8KEcxGyQ4Uuwwl%2F0Z%2F0G9HrCSp0OAIB0kaGnMIXSEe6gxFLE5TGIGjDfinLQHwGfgkid34eDopnAy3H0%2FV%2BLtnjEfRyjv0FVbhC4ybAdPm%2BZieV5v2tNic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db1dd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14845,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"9eb67d298d2dd8e73389de4fc58fabde","sha1":"42d384eaaa24dde7a758919794b922d7c494b19a","sha256":"67cdc39affee6d2fdcbbded8d23d6115fe5f3d5b9b6c200df723c7fca3612376","sha512":"e0c419cd053dfd4981f3035adfaa404776caae28fe756c48779e87c3b125a421cb469564a8b53016b9f2d266a4ead06d95b51dceb0af1914d75e5bfbbd364ca4","ssdeep":"384:QMr+GgljaEuokAnHavcbWSOaX8sL7WZ4upTGn:JbYvnHkcNOaMs3Q5pT2","tlshash":"37623cbad891accbcdc0277dc34f6f15a955718b11106a2534bb57c688348ece628f57","first_seen":"2025-09-09T17:46:49.345065Z","last_seen":"2026-05-31T12:24:22.840549Z","times_seen":17,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall10.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall10.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 43208\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-43207/43208\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3c0e5020a73716468c23189871253598\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2mpsFP4Q7NPZ79HVtfx6ro1T3fw5jZ%2F7mVCu2HHc9JCEDJJ8T%2BiuL1GU9rgrMBw1jgRD%2BumP%2ByTO5ejjsInig0C8UMfTLXB07FlKbeGuZA%2F3ajdO41%2B0v9dRxbP1SY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db1ed2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43208,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"d30cbc89b17da62b6d99d841e64e57a2","sha1":"9fdb42c78f144e6a71ad1a3adb5c18160075eda3","sha256":"e29976a56cc41d9c9d0f890df112cd674b1f0f1b880967fe629f3f3a8061414b","sha512":"6febf97946e2d43931f444b6e9675361bae1145ee08cb49e4aa0a7513c7765d57aa3dfbc81f0af85128dd97d19bfd3bab1704cfe324cb158b7e9b1b8fa612b76","ssdeep":"768:TrQ4z8/PO3P1QQsry7mZVItxe/pNtGNZM077acNlXfQmd+oVt+JlKYhrOThG:Lz+PQiQspMxmLt4jTNNI0+oVt+/ZrO9G","tlshash":"9e13e1dda1a2a8dfc4e0473dc31baf4b9065314b2f48682979f54ac29414bccd5a9f73","first_seen":"2025-09-09T17:46:49.198408Z","last_seen":"2026-05-31T12:24:22.891108Z","times_seen":17,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/css/b717f88eca15.css","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /css/b717f88eca15.css HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQU8ewHgYrkBrZicGqkXosU49Ig5Ri7CbQCT9%2BGxpDy6gmHu5%2F5Mm4sJzHxsTxwQVp3TXeLEbRmN0AwHmYhvYHcPjZ2rsLd2O5gRU%2FgLn8obXmeZaD7LUV7ZRfp2KXQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d199e5caa8ad037e2ac149d9979150e7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510bae0d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13483,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13483), with no line terminators","md5":"e132f32c2073a5ac70d1e07c12a235b9","sha1":"5ce8a14950f4b0ca4f868df6a6ce2ce857629e96","sha256":"320f6c02e4b73062bad29a86c7961a5633d87d304a4bbc39ab7ad3c893b7cb2d","sha512":"dba1517de478d6f922a7aef1d54b80e841db2745bc30ab498fc70c0365ebb13df35ae6512cb7b352261276e4f320860b258ed84c2880729133ff5006a3fee150","ssdeep":"384:mUbeQQPxg2SBUNFbWCbJf61Wd1mT2AsJ9Jt:PbYPZgKFbW8Jf61Wd1mT2AsJ1","tlshash":"0a52426417002877f3730f6e0a61e6b59f60c8838a934e9d71c0ed44d6fa8b9132eba5","first_seen":"2024-08-29T17:45:19.009095Z","last_seen":"2026-06-05T09:33:31.764721Z","times_seen":84,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/ee0dc5501028.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/ee0dc5501028.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19412\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:45 GMT\r\netag: \"3fcda99ac2bad2046787dfaeb791304b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5A87LxKQeao1yogmvZrKmRRRniRE9q7I\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 9786ec469d62f3b53938082150cd0248.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: FRA56-P13\r\nx-amz-cf-id: 8PbJCwN4T_J3d0E4Cgcov2Fsw44pSCjmO2_JR39_E-9Hl-rigtjESQ==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158526\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=3To29F19Uo04Vc9.WIkuyngsMPebUKptRGj49OS.IB4-1780227663.6542778-1.0.1.1-rl_u23P4ietLJ386BazqHfec7zZwDTnpZRCJZMG6SV7mHTe3Vq3S1fZrvbE4rYVH7ui0mIMnT_u9iVWkJn1hpAwTLyAlKXK9sXgFCe_8bB0dzvqEWRf5wTeTNW2nSkjp; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=eCdLrAUU8ARPFKNQXveccC1eH1m0EF9xaHKwHGkvOzc-1780227663.6542778-1.0.1.1-.FqdLhQeiZldY_HyAL1t8Z2JK2RHHW7qvtlZ74Vs0kA; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511df64712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 952x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3fcda99ac2bad2046787dfaeb791304b","sha1":"e501a057b92a096eca526f8837c9c56dd6016a3f","sha256":"974139c93c142230d245baa6108c5e2fca70e252f054e6fc5f567d1a631a73dc","sha512":"a35bd28688bb1b2f4a43972a5490629592fd168de21a5bcd7fcb18208a7e607ac298cf1a1f7fad687855176fc7d255687a49bd1c75d7283130dd62a134e731e3","ssdeep":"384:Jkitjy2gNAgPUC0ufanUl3LUNyOBDjaAIXmV8NujrGz6hyVUj35:JkWmOCO4rORuAIXHN8rGz6hrj35","tlshash":"3a92cf13cbdfb0a78036e96b427ba2457237074f72ab049700f5679875a8dc0de612aa","first_seen":"2025-09-09T17:46:49.115652Z","last_seen":"2026-05-31T12:24:22.882337Z","times_seen":17,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":130,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/a0d98c4a1941.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/a0d98c4a1941.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6569\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2ecfd272d4eabc1a796b3c5a5b0090aa\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VgqgEwEuiInsUoo6%2Beb%2B2j%2B907JeJuT102PSpP5nGAM9Y9zxSClcqlFQnifaaxmj0b4UloPDFzoVK5JurHfbuL1Tga%2BkJwSdHIR%2FhTgHGzpQlVjKZmQtR2iV5z%2BhbHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b510daecd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6569,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 720 x 720, 8-bit colormap, non-interlaced","md5":"bcfa2dd2f71f7e915b59edad2c0d2584","sha1":"580ea06427e51d0fefa2dcebfa7815aae8cd0bfe","sha256":"765c1775f5cd6b5f09e22a2e3cd13e8348e9b77403c4af38423ee1309d75c211","sha512":"1f21ded2b8bf86138aa88b78006af6cfb49a97d69a74d633a9ce2fd1e0c72de6f525dc1308f1b5be8ce2ec6627c5cbaa3c383c9e1b500fa622a61a03b115faab","ssdeep":"192:RYz6FNm11nDjJl63IE0jogBM6/HWcaYX8X8f:azuGpv6YE0ogb/HWhV6","tlshash":"bed19f9c36d0322ef32750b590424e25e961c703f3bac816e8fba25f65d78146327127","first_seen":"2025-09-09T17:46:49.269968Z","last_seen":"2026-05-31T12:24:22.923048Z","times_seen":17,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/fonts/b04efd429005.ttf","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:04.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /fonts/b04efd429005.ttf HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/css/b5490f269744.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: font/ttf\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06aWe0xETW7i5mYSSZIJWn%2Frp7jerVZEXWp5HCFhNrLdza0%2F8M159EcCLsd4435NnZ2Q92%2BdVS4mrOjnR6rLz4HWaboGXTqPX2vR8FJv7%2Fy3w1yt3OE2Ol9A%2FR9VWM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c415d59433f38b84821ab4802cd3363f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5167b9ad2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145860,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 14 tables, 1st \"DSIG\", 21 names, Macintosh, Copyright 2021 Huawei Device Co., Ltd. All Rights Reserved.HarmonyOS SansBoldHarmonyOS Sans Bold","md5":"06fb3d4be835cdfda0fcc9e63f6c0392","sha1":"24ecae3d602aa62d6834b7b7c8ddd686f0ffe2f5","sha256":"7f973862c42353c9cc372dc2ae891d12c9ea5fe2a01b449adaf1eade9b469b47","sha512":"c4c8ca8163662595316cb81bb2e122bec824de6c2ff25e3db7a4991c1b5c5b9ebf09796e32a56b61624ac22c8d738cd24da20f11bf6f53229468d3dfa57245d2","ssdeep":"3072:QdX5GAzoeThBC1kZPsylRpuwaEKMP0E5kpH55500:QdJGAfvZPsylRpuwaE3Wpl","tlshash":"6ee34a57f3b3c78edf165e79a761e2615bfef8326e39474fa4006062e88b8e0c894145","first_seen":"2023-04-07T05:22:56Z","last_seen":"2026-06-06T02:19:26.821169Z","times_seen":472,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/css/cb76994c9b90.css","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /css/cb76994c9b90.css HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6%2BtqZjavL7eGXGCHKGcaG5TzL8OrTc2ObCRjowEIfrQe%2BAUtvJIAyjoDSkkS%2F%2BdJUihEEpjcysj9WkFMH5Bf1KzdYSPiL%2B8de3GLMATOJsuUEqZPBUXDn8SaeCu9qaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d882706c716e22acc214bff57792582e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510badfd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5002,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5002), with no line terminators","md5":"87fb9f40d69d51e630c75fd2a7cf1296","sha1":"139fddc80338850feccce2d9a93a8580ce43aa47","sha256":"628dbea98336406bda891c5d0a0babbb15a7aa52b0de0905a6c2fbac3456fa5d","sha512":"6ba284dd344fcf5cf2150bff560cb55312a6a8051e16cf17dc990938611f2458607f32a873df3088843dc0e9f79f080aec84b5db5a5cd4be1fe4d8d4a10beca3","ssdeep":"48:rnGdgync1UetUM4CLYRf4ZKOVebUilVtggB5D8IGZxeTyMg5fy5g5N9t3+GIjbM/:rnV154Z+VYUqt1gt6OH56C5TjV","tlshash":"f0a1852241c53f9e94525b33299debedb0e98333446a427aeedfd11002855594fec6cf","first_seen":"2023-04-18T16:14:46Z","last_seen":"2026-06-04T03:20:08.964024Z","times_seen":62,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/69e120d3b3a4.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/69e120d3b3a4.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 19468\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a732d68bb892ae203150d92262d93d57\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zG3IEeBtF6qf5gVjl6yRKmwIcDJJsOicGDkcMtpMvRbQUXOUURLa663mglauxHQbZXjOGfKi3S%2F%2BfBNPhU0nPGz23dZtK8ircbs%2F0MVY22EAJ38KpjqAgPackmqRh3E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b510daead2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"327142258b2d044b37cb4e2d1fbc155c","sha1":"2b19dd847d04533be46e4e7d9628e7dd34a36b20","sha256":"b9f69e062a17237fded4e6573f7c44dce8e00817bd3aa0311f9eb95567cc451a","sha512":"28b8565da671458b90e30b769c017098e0677929dd4b6e3b646ebc14495d7aa38fe2ede2200c9e93094dae6754b6f81437d46b3ad701b28bc9cba60618d4f77f","ssdeep":"384:vTdUC2Nw4ubtyNrwYqfymIMk7mFEKci3NjM9cmfYL:xKCNb0rwDndOyL","tlshash":"c092c17519b0e3a8f7c06eb50d9635fd95101c25e5e1c9b2c2a8de2a3398c45ca90b77","first_seen":"2025-09-09T17:46:49.214643Z","last_seen":"2026-05-31T12:24:22.809096Z","times_seen":17,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":172,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/6c2ad777ce96.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/6c2ad777ce96.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8240\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"edf1889c23339c256d6aafc0993c8b1f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x87K%2BBRfkeRdsF8W0fVKSWhNm1y0x83nAaUaafgG4rHcXQ0yiC%2Fw8jxhW8W8lyAVYcVkLgY3v56PGFQ5MiGeJwUGMdn6lgXTUEnuTX5gs25jZR2JTltOADnbLPZsYE4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b510daeed2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8240,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 720 x 720, 8-bit colormap, non-interlaced","md5":"2d908872f6b5a66a94aae73184c6a966","sha1":"8ad42398aea01e7cbb3e3f29700cd2f5e4742301","sha256":"142a712545bd546039e2f0fd6450d99a2499b1e82add93056bd5dcaf0ae44c3b","sha512":"c9b28ac5251a248f9fa6a6581b3e5da78ae6476d42129dd3d2757c046dcc02737e562176f7a13130ad57e6c4bc35ed4e813b294232574c4d93b8bae82a7d4bfb","ssdeep":"192:Vwxg00Ofais5B5uHZdzVaMv+FKHUzKQ15Jd9eqhdm7j5Z:uxgyCis5DAZtvvUzH5M8K","tlshash":"9802af9a41239aa9f4bb7bb8f0021d16c9c09755ee44c8839d332f51464fdba03a1f47","first_seen":"2025-09-09T17:46:49.232784Z","last_seen":"2026-05-31T12:24:22.886922Z","times_seen":17,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/a6a3c840ef8e.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/a6a3c840ef8e.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7560\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"59f4d9cef3ebc0f4b3664c712d3cec05\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TtUxxijJL4GGhUn7zXb2FIEwd5P4pxbeBhBTtqh%2BZlsU5iyurhXB8bhKtQ%2F%2Fr1e4mPsIfnbJ4UbUPxJ4txlSypWScAqyWW%2Fk4cwtj87OmPdZpBQ5aVhu6JN4l%2B4ZcZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncf-ray: a045b510daedd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7560,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 720 x 720, 8-bit colormap, non-interlaced","md5":"347c4933f56a920bb0403cff694bba74","sha1":"eb8274411e3376f8f591470b907f32c8d9f5c6e9","sha256":"00c04061fc866383ae367ebb1ae0fcace2e2dcad3567f62ea90510bfb2ba75ee","sha512":"064b4b1ebe0a44901ece8463c1a9496f739dd3bc6b106120b2812b22464198c6c87865ffaa20ea58282f6925021873df27de92041124c96c6eca6931037a679a","ssdeep":"96:ETyjgJO9jOrqrM8rvjfETVYjFfgUk3htdW7BnvfUSfE91gytDjovJxR2IrGEULcG:ETegJWagrvjfEOjNOheRvM9SyExivLZx","tlshash":"5bf19ebe913214ebc51a5fb3fb13a7b5be25c768320aa301cfaa714975a453098c0f42","first_seen":"2025-09-09T17:46:49.16244Z","last_seen":"2026-05-31T12:24:22.895415Z","times_seen":17,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/32074122ac12.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/32074122ac12.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22052\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:44 GMT\r\netag: \"3cfdd3e02b6736800b34efc4e6cdd7af\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: H_Z7eEAvXt3TgOsQ3CdEm7o.57jNKsg_\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 2e2cd26377bb06b8822b6af4f9930856.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: MXP53-P5\r\nx-amz-cf-id: yJRE32ea1xKRusMzfd7i2eFCZ9gQi_Zw4_7kkZ6B_v7r03hY5-4TTg==\r\nx-frame-options: SAMEORIGIN\r\nage: 1615249\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=S8cxieE60QnvOf_oZtoccx8fcz42us58mTdG3VdVZ64-1780227663.6627245-1.0.1.1-SA4lyIx9SPzjfHheDXG0lUx753Wj7gyMARqDRWgiftwHaZ9VjAigYgCLAPE_gcNlW8s_u8oXa0bsXEtGSku0WapJ5rqJ_jbIBihj_9w4OIx1eV.DC4hjkYS1XOXFxKRO; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=g9F0VItNwd6cphv1.7uPp7tbMsftKHJROOZ2TGpHf3k-1780227663.6627245-1.0.1.1-j5dSlroJsUZEMhC79IdZKbNNO22s2NB6z8gcTn_.0B8; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511ef75712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":22052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 636x766, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3cfdd3e02b6736800b34efc4e6cdd7af","sha1":"cefbfbf5bd7cc6ba63e4ce0152269314867dffa1","sha256":"7fb5046c08d7f9254499c6367751136b23d0e00e518af9bc315c809ef3eb28a8","sha512":"027906e0744605cdee3bb2fb4f083c0df3fbcad6a73a1252a3e474de89efdc8b6a2bbc2983794391a736e4832344d0ebce503d92f37e58644414b80c702de731","ssdeep":"384:s3HtU5O7eW9rEujTYnpZ+oXAI6OAqnxUy4FGnkDuqQfT+lPTnJx/x/O9YRJ:s3HtWkRHovhpDAqnxUNDX3FthO9IJ","tlshash":"71a2e1cb6c1c9dbb614cb2f527d21c48b021c7aa5039832447e97505f895938ef58aff","first_seen":"2025-09-09T17:46:49.117044Z","last_seen":"2026-05-31T12:24:22.810546Z","times_seen":17,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":22,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/js/86d719b1ed99.js","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /js/86d719b1ed99.js HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=adnd6fEcoIvIsbqB%2BbjNgoyDT098R1wBD2k9cYfisi%2FJKYW9BZppET%2BLqUDgYRHCrI9U7qQDNGEj8PIuidb8M4Yz8whUqUsyQImijOQndtePXP1dum1kJXy8G%2F0z6Bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"97437c0ed3c92bfb9cd3aacc4952b932\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5110afcd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":935448,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (64725), with no line terminators","md5":"4c12686fa7af16f90b0ee6523f8c9f58","sha1":"e7ec3ae9123b489ec13166f56741835d47a69b7f","sha256":"83864118565e69864a9dd2b4d306d32f87ed0c1658a3ffaf78a63ffdaeb44477","sha512":"45adb664ba0f5b0c52926973e55309d5c68c73690a78f89b7a76dbabb66c0ca9610c3d076f3d6cbe99c9eecf97344679e0c43e3a52f953a1a395750136b8b136","ssdeep":"24576:KWOTRfDqTCUTRfHHtRzB7hlSq+2/AKndwo4YwOm2AQWwXJUiNZdgHpjs:KWOTRfDqTCUTRfHHtRzB7hlSq+2/AKnV","tlshash":"3325d97d8bd8377e4afe32c476d8abf364884234d3d4f39f98d0b164148ace88159a59","first_seen":"2026-05-31T11:41:49.410483Z","last_seen":"2026-05-31T11:41:49.410483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/favicon-192x192.png","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:06.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/favicon-192x192.png HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 5023\r\npriority: u=6,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b860d7d17455df0e5d25c67447eb27e5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWcGMKjyEYWmdBJI6%2FLS7oN3XOZplOcXP%2Flzpk4xN6j8DtI4tc1fkGhlLbyTbHx7d5znla06DaNOIcBCa8RbD6HXrHB%2B6pJ65mOOJT0ZwBxox6EUTkGVGUNWv4M0Ry8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 11:41:06 GMT\r\ncf-ray: a045b5235cefd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5023,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"278f3a73bf9f69cf114d6bbd0ecde16c","sha1":"a468d8124c74f1307ab2065e3059632a48f0d342","sha256":"0ebfbcbdd214d421bb1279ea0858575bc864794f5ee2d462fcc41641c8d1a831","sha512":"1804f215528061281867e3ec2090c42f62f582ff4fa658f554fe5c2e173050058018f100ccdc62f4be509a95d992fe9ff72daae839893001fb2180de4c0801df","ssdeep":"96:yI/7xzQgtKhVuQxuQe1hhch6s3DszJKH+NulO/thWZGbTlfSnNE9Btm8Fn1e:poRekDyO4ulO1NRI78Fnk","tlshash":"c3a17d45aa64c61521eddef7ee3c06a0c3fab3e7235460005f14c5a7e104bfb95cd816","first_seen":"2025-09-09T17:46:49.129339Z","last_seen":"2026-05-31T12:24:22.832575Z","times_seen":9,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/css/b5490f269744.css","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /css/b5490f269744.css HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uw6HdzK4kpCUJ3KWHO1qwkdpm%2BGApskfy4GpET4YPmGWL9hU%2Bt4fNqA2a%2B9Lk%2B91XaELbUy6EaWcHivZ3atb61b5BtaQaofX81f5hAwxBgSCrVFwhyNn3FKDxLgWI7M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4070d24d267d71cd228aa953ee035e95\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510bae1d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199184,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a5e250025cdf2101cb2361101db3b7c2","sha1":"2a95e279d5b5d3b06228bf7ce313816ef3d682e8","sha256":"3b19c323d904039e89b5203b0722a1108bd1aad86895d3b459b0bd9a6b30059e","sha512":"bd6d9bc37686c11efc6f32af06b756ff6a61317eebd230b0ac4a58c8e3cbb4a7745c35e875226456a295dac2fdcc18640c399269fa32416e8c664b518fae49af","ssdeep":"3072:Qaf9jyDv5lYuH+HQYwpxpXMQbwdkXUb1z9bgul1ozQh7fLEuBG:i5lYuH+HQYwpgdkXxzY6","tlshash":"ae14f722761c1029b57bd421a4a177ad622abb23c71353bdf991723eccdb5873b31b48","first_seen":"2026-05-31T11:41:49.412804Z","last_seen":"2026-05-31T12:24:22.777174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/e538ea0bf257.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/e538ea0bf257.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9834\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:45 GMT\r\netag: \"89dd85d63ece4259dbc0a369041c2fcc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Moq4ZiK_jX.S4WTPWd3bek7voKro2jpR\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 31609816d2408b1ea80e31e71665dfbc.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: PV7T0fHJXMwxBMDjxqleJsmJa70kDSRYGxWl5vPrqj9oL5e9g6L4XA==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158988\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=ACZrhDN16Ixz6jBIZxY5Uc7ojNQanlZ8g6GB_YvHRVg-1780227663.6757283-1.0.1.1-eo2B9KyieBI8mkJ1HuIH.ig.7.oerh2y4iaOn2Healh4UH4nNpDVL4Ulfr._40W6zZfxodzz6Edr7UtjOBneVrcMm6CLuiXYh7ZvmZO141USfHZBFCS0qimihw.FasvT; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=8hjPbMjCBXy9g5PgFnjZAweksYKy6MY37FJ5oaI0AW8-1780227663.6757283-1.0.1.1-cg9oocVud1wMIQ6aMp58jl.CUW.jxooO88qMIPDzP_0; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511ff8d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":9834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"89dd85d63ece4259dbc0a369041c2fcc","sha1":"e9cac52e1ff8402df8d71154f4b27327e19f9c16","sha256":"945ee054f306221c4bc3a346106197c7920c2afb744b1e43a66de20016c0a7f5","sha512":"f547e4b928ba100f0601637e4b3c8244980c40ea58ba0fe331c5bd21e299e0e368de3bfc4aee0671ed2f82a45f117d7764ff9bc49c35994017efb33917b5e3b9","ssdeep":"192:X6V0jrtfqdjMTGrUR9v2pV2MBUy1rzJe7ma0qJVWgi+gjNp:XnlqdIzRA2MeCXa0WM+gn","tlshash":"1812c00cb1672af5d9818f997437e17bddc833d59a2067c8d8968704d1f08272d93e6c","first_seen":"2025-09-09T17:46:49.341283Z","last_seen":"2026-05-31T12:24:22.775288Z","times_seen":17,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":128,"connect":16,"send":0,"wait":19,"receive":1,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/js/2b39c0a40572.js","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /js/2b39c0a40572.js HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T63j4Nqgf%2FjdPq3JxBqbytKBHeA63b4YV9xMxBVH7A88YhleDT7DBeULC72T17RKfMXFqDnLNzLgPHFBtDsGDN7cwzHqLZF67y4gilUSu9FNrwImi4rmvJnhtUb%2F9cE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f73dcbd790714a6d9a6f1eb729ed334a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510faf9d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":738,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (738), with no line terminators","md5":"b714e08488ff68f43043e3b99766e6e4","sha1":"5c8be3a0ef6a0c4866cc4507b8d2127f829ee386","sha256":"0706e4a55c7c652d178e7073a12facac2045d0796937eca238fecf29f9719a51","sha512":"b314b7ceef8c0a29221f312630b806b6d3c7b9b1488b552c56bdf5bb5039d0a25d6bb529664441b1bc408f30aeedfa5de900706d1d2ff8274d4cea704f2b74e8","ssdeep":"","tlshash":"cb01bd2dbfc0b471373a04d0110f258582429014dbab8c9095b9e492d4f390f34cbf5d","first_seen":"2026-05-31T11:41:49.414785Z","last_seen":"2026-05-31T12:24:22.899436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-31T11:41:02.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://cdn.bitkeep.vip\u003e; rel=\"preconnect\", \u003chttps://static-web.jjdsn.vip\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1LCTrNKGJHLQvtnZ9fAdSq2Il%2BRvbWNK7XNFSHPXVGgO4kFenc4wQPoI0%2BurLqlYqyplnrFwggYH310aPFytxZ1wUDnhj3eQik1VdjQWeA%2BD3P3OEGB3BMybB0Pt1Tg%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a045b50e78a6dc76-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":44235,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11858)","md5":"072642e95ee1609f468b1ec11c021225","sha1":"3a1bde23efaae5a232dbba7d6c2537d7b9298a08","sha256":"1029da39578cf353bb56942e0bf68b00e19fda75b0344dbf02c593e2811113cd","sha512":"f9c2c49c529bdda5e2c68b8a1dcda66c6a7b9f3b56a27b6f05905098da9cab87b1dbef20ca6ba7343572af35588715df235b7b78623ef665085f1d990ee0868b","ssdeep":"768:oY6AG0zzqn+3jK4caGLaBLUyka2XEDgogcQXuw+xLPQg+bcGOcC7d4KN/JVTWGBe:oY6AGgG+e4caGaBgyka2XEDgcQew+xLE","tlshash":"d11382723e983849223381d52d672f49be87e34fce9845e3b6ac03384be7df56816951","first_seen":"2026-05-31T11:41:49.415662Z","last_seen":"2026-05-31T12:24:22.768348Z","times_seen":2,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":143,"dns":28,"connect":42,"send":0,"wait":118,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BW4GVE68H3","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.1.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:35 GMT","end":"Thu, 30 Jul 2026 15:51:34 GMT"},"fingerprint":{"sha1":"4F:F6:A0:5C:88:9C:38:C1:57:D2:C2:16:50:CD:79:E3:67:50:CC:B0","sha256":"93:D6:F4:89:DB:C5:7B:E8:C8:73:F7:36:40:1B:87:32:83:AA:3F:54:8B:26:97:45:83:DB:E6:BF:FD:F5:70:33"}}},"request":{"raw":"GET /gtag/js?id=G-BW4GVE68H3 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nexpires: Sun, 31 May 2026 11:41:03 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 158540\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":479179,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"626709bf13040484343db495859d10dc","sha1":"4d641d57e71549889129cf8e81a75e1c27377de0","sha256":"3b1d5f91bd960061cba054e37f22c0df99e577da67e68ec4b4d912ad4c221c7a","sha512":"a4007825d39843df982c1dac0cf3fb4440da769afac13b222d07b7b88545ed1a3a6899b7fab65abe718693ff4dfd75e3c1c33e9b617497e282f1bd020366b652","ssdeep":"6144:SLdRfDNalVf36lwSXbDQCtEhuX7aWCBbn05ma5V/i3+:i8lVf36RDQY75xU+","tlshash":"bfa4e9cdb3d674625396f478503f018ba57b28e2b44cc89ab189cce42e7469a4277f7c","first_seen":"2026-05-31T11:41:49.416536Z","last_seen":"2026-05-31T11:41:49.416536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":188,"dns":1,"connect":28,"send":0,"wait":45,"receive":89,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/js/095ebdc37614.js","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /js/095ebdc37614.js HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHPROEMUt2wnhYGoLDZaxW%2BvUNtkQW1lMIEfafrDSqQzdhcjCafy65amZjAWPYrB0oeDmVP7y8H41dKifTuUngvx3ueD6r4KRipDxLoZV0Kp5ixLVP0X0EdOR5W3%2Bcw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"483f469fce89ed381bf2a2dab7860435\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b5110afbd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":398758,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44111), with no line terminators","md5":"b7cf428455f69ca250f692e3dcfcbd80","sha1":"01eeb71a3255393e12c3e701dd4d9c900c603730","sha256":"e5494808263d2f4f99a477ee42ab79ab400f3dbef170c3c1397a3965018f585a","sha512":"38622cfbd59c16490d60ec277c680105cf6fc0a7c60b182c98f61c98cc045bb039e274f2fd71b358fbea56e1cd2b313db3314adef5f00554dacf118838d4d469","ssdeep":"12288:YY9nP/VZ/hFVmbJwRFQ3gqGsGaEFtq/OzAsCYGaEk37pAHARsZV:YY9nP/VZ/hDOJwFQ3gqGsGaErFzAbYGv","tlshash":"b9944aec47dfaf9c878b23c85b0ca0c938a1976cc1f5d29a9f9554d929e8dd805c2b43","first_seen":"2026-05-31T11:41:49.417261Z","last_seen":"2026-05-31T11:41:49.417261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall1.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall1.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 15434\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-15433/15434\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"3c83389a9240556d29965c8abc3fbf9b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iInqmcmzMGs1lSAWCzcbfSlzVFHRQZr%2FbWHdm9ogI2EMmM%2BMpwWdj%2FpxKFZcZM3hW6WoI9hkFxwXl35V%2Fyg6nv%2Blv%2BEKStmoud2qo6zafVncVMp8BSLKwIYSBuzerZY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db13d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15434,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"fe6e4a3e45bf0466136e93bc5ae97caa","sha1":"30c50293fbb92f65455a0c9907a3599031b0aece","sha256":"5aa5ba2d5d7594a27a0c7dce408ca986b3603e6ae21a497769459ea8c93a5c38","sha512":"4cf664b5d5496e498087e1abf3f8054b1d8e721ca611a54220626439988bb0a93aa764b35abca5a3a03c7bc84423c68cb7b9fd26b3303e83166f042d6050eee5","ssdeep":"384:QvJegQMI9j9UIGPUx3ENR6uWxN3xXD087Ns6Hqtsb/TF:QwbX9GUBW6Z3O87Ns6HqtsV","tlshash":"ad6239b99595a8cbc890a33cd30fef06a950368e11402a29b9f546c6cc75dfde21df63","first_seen":"2025-09-09T17:46:49.160043Z","last_seen":"2026-05-31T12:24:22.826782Z","times_seen":17,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":130,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/picWall8.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/picWall8.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 15533\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-15532/15533\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"4788a159c387c2339f5bd7b2ac6c6a68\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mIX8NFhHzHuXz6ah1nZj96CR%2FtcELAD1JFXM35%2BF02yfNdMu26GdJPR0EX%2BbB4W37XRzOpKmIwuzHxdsNckh%2FSTZXpA%2FMtb9JjIUK1gr%2FIVafceU1qWEwZO1KB2OLpo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db1cd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15533,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"3c3d393bec15733b7dd3b5955ab63d01","sha1":"08f36a5ea748d2404a957cf2d534933276a64f2e","sha256":"7bd124ced40af9b29140204d3d9d85e369a93654f3021e35693edecbc3709a84","sha512":"2cd9e033712f1ff104b7e9a00a66d9ae789a4992b7eaf98287a93b62314d4acacacf3f57201a91c16d5a462184612f734368175903ee713b6bf325a006c72b88","ssdeep":"192:QABWbFSj2XTEZbuCsi31zdhkHT33c4Q3LMfuK0R7P1jcyNI8r0wD0RtIKISl4okP:QU24uOl5y332tR7p1NJDumlrN740Mm","tlshash":"44622aa9c8a6edcfc884633dc35faf528855328a0250692939f685c68c744dde52ef73","first_seen":"2025-09-09T17:46:49.296786Z","last_seen":"2026-05-31T12:24:22.878192Z","times_seen":17,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/a50a916d1212.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/a50a916d1212.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8512\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:44 GMT\r\netag: \"2f6c45c09944166d8b61f666e427222e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 75TB1yhJ9ZooZ_x.C.H7g._l8XPvzBWm\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 1a61dccfa43ad7a6e24bf7fcb93ea430.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: FRA56-P13\r\nx-amz-cf-id: bLXxeunOOnxrQLbmrc1BcGRuv3B5bl8vx1HDK-3GqwAnMEOZXqkLyg==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158526\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=RG0Mt1k2qTTAORKHAU4JZY.3Ultj8fwuN3nx0cZ4GFo-1780227663.6601675-1.0.1.1-9ZvH2QyZQfaqZ5Vn184_829ryXamc1jxm5..x_Y3zJkS7usIj_iCsDBfCXXK1DjLfGX1VjXnEV1a9aJXM9bk4knq95u61rP9WtcPIeA9tTtYVKcc2BfmGZCKctzbnIkD; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=q.K6.wFcM.VmNrPtJmky2HuMcMyMvk0L_QgfqfEy66Q-1780227663.6601675-1.0.1.1-_6fQm.t08.7P8JoOW93fVowA8q_etMEC5nUCr_DmiKY; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511df70712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":8512,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2f6c45c09944166d8b61f666e427222e","sha1":"4e59032c04b917915c0d69ac7deaef7a36e4a411","sha256":"5d5d33b965d3c9b55f353a5cee88725a56d48515a09ec03f351162973ab061ea","sha512":"bfd593ac3ec30c0b45306c4a1ab4e4aa11b71a6f5aed316cfb38c058620c5397640bc239b1436cbd53902cc098f4964f2f4ed90cc21924022fc447543b712135","ssdeep":"192:nyAqCiJHOhgCha00xBQH1xfEnJafXnaBeotrmhfIkHgo90cS+f:nXHhR0xBQVxfEJafXBotS53af+f","tlshash":"1802af40ce868f09f60da1a2e462cb9b2f0a93e74b9304de7a60fd61e460bc18757981","first_seen":"2025-09-09T17:46:49.240526Z","last_seen":"2026-05-31T12:24:22.918433Z","times_seen":17,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":25,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/c96ffb76cff1.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/c96ffb76cff1.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10644\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:44 GMT\r\netag: \"6101d6fde29cf2ac056b456efdfa4f27\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5xu8FfZTOcsHpAKREuL3XK5TIuOQKHrA\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 79cf3ce01a6f4dda5cddf27b94ad6a3a.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: ThhvyNGhZyY_pmzQfuKDNqAtcU8ZdnOEKmRIEpSmkSn9DtWETxP2Yw==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158988\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=CcxZkK6cAZb5ywOIjgextg23cRtWsKoLJn71dRB3up0-1780227663.6534407-1.0.1.1-JhfWLYd8KbX0muN3xGtIU3QGE.WEosFZssQ_.9Hp2AS97EsTA2pEk0sc0kmlytLy8tOKDqn2C4QtlLhtU0gRax1G8AemzNUNvQJTEcDCS_DcYuYytZSmeUkGYIzoKeZQ; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=luRvXpdymVhtCa4aJERWeuaRQJzNn3sMkpn6.XbNt9o-1780227663.6534407-1.0.1.1-kSoG9dRkbWF1E.wbDlLnLBoW1bf_OJ9CPr4ptPekolo; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511df62712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":10644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6101d6fde29cf2ac056b456efdfa4f27","sha1":"62577098a1a9722ef24848abc8f7d9933a5e3bd7","sha256":"95ec92b703f72e28682bb56555b801ca7017f9ef218ba5e26d2e703c8211e3c8","sha512":"c2fc9bd3b32592e8d4292f3660f54a99f96ee74f0c2556f60a2a9b4a52dc39637803c48c730f5663588db2f9d965275c68689b172958332f8660629ed15088d8","ssdeep":"192:Uy7+0cfDCFxSCsV4iV8JUr4F+eKOyN7g8EWEU73vBjULDTWN/smYweM5:f8fkajr4DyN73f73vBjU/TGsm9h5","tlshash":"8622bfa48c335bdecf9ba50e5178c16321b2eb5c2b9b262d9e52cdc546274ae27d6020","first_seen":"2025-09-09T17:46:49.343233Z","last_seen":"2026-05-31T12:24:22.855547Z","times_seen":17,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/3f7402312e43.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/3f7402312e43.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20462\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 06 May 2026 11:51:44 GMT\r\netag: \"f935ee431fa981baacc97536cf4edf71\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: k4KD.QEBzJgzfYSlR4JvfGsgZDlqGTf4\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 391801d04a1823ba3c4add32d61d974a.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: MXP53-P5\r\nx-amz-cf-id: seRZPmcuVTPxNle76dSxpdqpB-53aMzOywQpcPXyhzCstWTgADwyNQ==\r\nx-frame-options: SAMEORIGIN\r\nage: 2158813\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=qbYnfBfYlXaTScoDXNAl6I95Xr6pMM2btQUkrilphuQ-1780227663.661597-1.0.1.1-ouL5HClfdGNgRmxEsz41IMOKr1_s3.ryfgQqXkW0q0ZCR75r4m8BYBNVnD1QVLV45lv7DXExIaACvsiwze.fgne1ifmmizPEIWwyZB.SX5QCzB_lPV5pn8.MYnwfK.Dg; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=5MB7mxBpid0.Jjyri5Vm.P.02DnplkPMy3pPb0SyKP0-1780227663.661597-1.0.1.1-V7KK8Z4X2mdaQjc_ufn6hFNtA3XVAotIm0eAuOtPepw; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511ef72712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":20462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 636x766, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f935ee431fa981baacc97536cf4edf71","sha1":"d105094db93717388c3e7ccd020fffa54229dc4a","sha256":"5e27ed5db62ed9e296063c55ae1bb6a49d13f852d282da2ebc3004724f2eb7e5","sha512":"0d35fb16e4b6e6669c22abba14fe80a8b00d0a3a76c43bdcb4a25b5b867001b28629366f7b3e96da42321463c54bf9abacb7cd19e9a46ae52a5d5d5e70cd22c5","ssdeep":"384:U/1m5LdSUFanm8nFJtmnXI0Idad5vFrYZkCTvaM6MSUdU+eAS5fVo:U/1m5LvSbFWI0ndFrViiM6wU+eAp","tlshash":"8392d0215cab39b2fb110f42c4ad3175e54df06c406c6e296fb863f971b487accae199","first_seen":"2025-09-09T17:46:49.202982Z","last_seen":"2026-05-31T12:24:22.912185Z","times_seen":17,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":116,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/footer_ani_banner_dark.png","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:04.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/footer_ani_banner_dark.png HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 16508\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"7c3cc819075de142058aa2e398e25629\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkACLw6ioe1vA%2F5geIHGuA1ddH3bDPFEzmW3vY%2FZZGl%2Bn45udGLfO9yxTo0mmo6YW3q2HIwyvIU0WU6C9%2FY8xW8%2FtoqzCtryBf1kRm18%2Fx14xjlECEXpgu7FfbvgY70%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 11:41:04 GMT\r\ncf-ray: a045b5169b9ed2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16508,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2492 x 116, 8-bit/color RGBA, non-interlaced","md5":"c8100da1646febef20e5a23e2f2300fc","sha1":"5510fd32383cb0bb7cf4f0611ba4dae95fe43bfa","sha256":"ce824a23270b5e4e85da150b067b251d3f98a777ddabc482ed23a62ad90508bc","sha512":"b3c1c481e5f55e7874077b56944696e997e7b9bab73dc4cdee75f8cb248db0c2f7596aee5908d984d7aad16d4b7af04da769b8b91e5a0a65e614e6fe69b36018","ssdeep":"192:KeTHHfTcLejR9FNRJReXdk44QCHqE2K3hwIeRVVgcROXMGWKUFSkwyAo4u1UZ9jg:KeTboejR9FNRJRp53ePHORUwlyAlFg0c","tlshash":"8a72c0730e2fc0b76412ddf99725bbd96c3019ba85fbc68a14dc82d5493d6401cee239","first_seen":"2025-09-09T17:46:49.205062Z","last_seen":"2026-05-31T12:24:22.830658Z","times_seen":13,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/css/bff98681e92c.css","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /css/bff98681e92c.css HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxcoSoHx7%2BDNwStNGiFl5VO2Bb%2FEVY0xkeW%2FduXEo5pJoUbgenebVyVZFjc5nScfwT6DPTQ%2FynpiBDWHGtYb%2FKcm59Lm%2BLI3ucZa1qzeyI2l46uYMtepvvY7Oggj2rA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f1ce48c42108b81aa0f419280a60b06d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510baddd2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":190841,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"992e10db7ac6841fb5bf4fbe78c023a5","sha1":"22180c23f556b2e7ad92a7080abaae52d56270e6","sha256":"d96874da57cf95c029602074bbf3d8ac6b79201734eb4e98fdd4e97d1e06008a","sha512":"a3d8d4fdfb28668a40418f06d4b58874a2d0484325f9195ceaddd3f29f82433b67fab15c6303d5b5f08fd774edf708bf8d30ed3605bd6f2bdc25d531232bc246","ssdeep":"768:SnARRRRbI2JNv1JZDP/K+lm0jdnrxJ/A9bTMTjDayNbR4YbqRmGDJ8j+lLAXVf7n:IARRTnPJ/im94jRmAO+lUFf7qZVO","tlshash":"4314c8582750316daadbc727a9f0b9a68c319513e63fdd6ff2e03da8834664b0563d03","first_seen":"2025-08-29T13:28:18.277918Z","last_seen":"2026-05-31T12:24:22.771236Z","times_seen":26,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/media/tapCard.webm","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /media/tapCard.webm HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bltget.click/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-length: 109437\r\ncf-cache-status: MISS\r\ncontent-type: video/webm\r\ncontent-range: bytes 0-109436/109437\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2a72ba2a23f5a580e6b09fcab561c0df\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=abA3jllBjRIZtg84tQj%2F3Or4k%2Be2PmsPRbAAz9ot9o%2B3VMusJeRlwygJ7qywgvxupHctEyXCJ1QE6rI0jDmxQG3e8DBoCj%2B8Z9jf3EydwrQNGXsa4CZ7AHlEdjNnybA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b511db21d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109437,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"c0caf3c63e85ca9a16687ae317065b21","sha1":"408a61fe5fc8c5c235e6e290a0724bbbd7895fc8","sha256":"5cb15618c6886873093eaa467bfd9082afc54933a62bb69c7fd848d1b78d8dfd","sha512":"a04d645a0d5925cd8e8d253a1c8a7659c6bb65c400a53586b809ea3bc8b74d0a6e6074ea05ba1e55d0b91a0d500a3312dc47a6a188be878ec2e38241e52c7b66","ssdeep":"3072:nifEsM5HldUppYSsvCqzTeLwlynLrkwOv8aJZbv:nif5QFuppYpCuqLFfk/","tlshash":"16b30298ee57a6dfe5a142375e039302ae7e8c606335410af7750d25fc847b8449f673","first_seen":"2025-09-09T17:46:49.108388Z","last_seen":"2026-05-31T12:24:22.890032Z","times_seen":17,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/f37e4dd46f38.png","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:04.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/f37e4dd46f38.png HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/css/a97b0f138b4d.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1817\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"fae5a7a73401589b055e5a44e218efac\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00YTgCIVLRbOWxSyBDJzQ1wATYKmSlPFwMWROWuCo0YB2XAM73OEqwXCDqykKzAzARn5YWPpsd%2FkcSER6cZlqhkyAEc1Dl5SB9tUmNhqjdF49iLo%2FHirjdCHpwq8N28%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b5165b95d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1817,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 424 x 346, 2-bit colormap, non-interlaced","md5":"118477aaef029929aba9d89cb9f0103a","sha1":"8c3e2f3424f01ccd8ccdcc1c86c149cad6d94d2e","sha256":"5ab0932583dbbce24fdf8411a8b1138465445cdc3dbe73801b90bdfb00f940be","sha512":"917f242b54d0afd15a855f9f78dec8de7639635d3470f0073d6e0d0cfdd21443a2288cc7e37426015a5bd1987efa21b8b18e4021b3ee9c4ef4ab26ad0b49eb2f","ssdeep":"","tlshash":"ea314df9c9ac9d50647076ef8910de36cda42b08dd250c16f2fb5d507f46d83d14141a","first_seen":"2025-09-09T17:46:49.347041Z","last_seen":"2026-05-31T12:24:22.766286Z","times_seen":17,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/css/a97b0f138b4d.css","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /css/a97b0f138b4d.css HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNnvpDWCnph4oG8yUGK28mArBVfTn6kUkmplfqgRT5ZHS%2F2PJcyFcp4bbZ53uKDHtIOqBuMYWGkQhnEkmWoppzwluS2DPBBUXplg%2FoXdJb%2BnFXkUMS8JJLuFHrdNAo0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4e702758e364f5366c46fc702c224590\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a045b510bae4d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176055,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"5102bc61fbcb31dd251797d89eb3d7e4","sha1":"deec4ec8c261c726c9cc2af9162efd45b150755e","sha256":"4736cee65fb8b44396dae5334e01cf15e61e5e510c88a320762413e6d0ce0daf","sha512":"4a7f6b5fe838f306807cc3104f0498028224043bba54269bfa71a3790699b57628f7e696a900de8e26192c562e5ad7c00bc797ce969c7dd0b6937b180a3064e1","ssdeep":"3072:w8thCquWWZNZ7ZyQrJMAzARWw0DOd8kg74CJRb:wghCquWWZNZ7ZyQrJMAzARWw0DOd8kgR","tlshash":"3804a666bb953128b437c07970c1296c293da35396261cf97b76292eced73db323124b","first_seen":"2026-05-31T11:41:49.426764Z","last_seen":"2026-05-31T12:24:22.808103Z","times_seen":2,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-web.jjdsn.vip/17c3dc65b04a52709561f1c2f7d0ccd8/img/64ba391b39ef.webp","fqdn":"static-web.jjdsn.vip","domain":"jjdsn.vip","tld":"vip"},"ip":{"addr":"104.18.18.183","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jjdsn.vip","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Apr 2026 16:15:10 GMT","end":"Thu, 16 Jul 2026 16:15:09 GMT"},"fingerprint":{"sha1":"4C:02:41:D6:CE:8E:7B:4A:C3:5B:F2:DD:F7:E1:FC:7E:06:86:2A:41","sha256":"62:C6:B5:1A:82:14:18:23:C4:FF:A0:F4:0D:32:3D:94:82:C6:C0:50:DD:18:CD:BE:59:10:76:C9:88:AC:3A:86"}}},"request":{"raw":"GET /17c3dc65b04a52709561f1c2f7d0ccd8/img/64ba391b39ef.webp HTTP/1.1\r\nHost: static-web.jjdsn.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7066\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 12 May 2026 08:46:57 GMT\r\netag: \"1e9d687fa53ebd5b7be0c1298a0db20d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: QV.IvUpO7Yt60JLd9_._wQO54MJA8y4c\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=2592000;\r\nvia: 1.1 dc7ff0d7d079406ad1a54c1834b4085c.cloudfront.net (CloudFront)\r\nvary: Origin, accept-encoding\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: PRG50-P2\r\nx-amz-cf-id: oxQkI0UFnO6qinPIOm7uneDGo621BSQi_BDo7R_xci2HcpEXzyLgjQ==\r\nx-frame-options: SAMEORIGIN\r\nage: 1596623\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=.IC8Y4Ab1t8KXentXoDg2BjtPlrQpPeE3YHWFjmGRFw-1780227663.6651046-1.0.1.1-3euZbuvpxtC2W8FMVMpgIxqq_Al3x017mXoZEtvLCQ_DBvSIGWFA9chPFC5jAWMVI594uy_0NapMiMhze0Yoe5bi4.zw4xXu6oqpz3eGUN.737ZVRBmN.KAv9LgcQwjH; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip; Expires=Sun, 31 May 2026 12:11:03 GMT\n_cfuvid=UiHfhwEw3HitulGbijX_2t8fsoEjrMA1Dgvr_FZs3SU-1780227663.6651046-1.0.1.1-YOEGpaA5K94YlN8aFvXcLGRQ.nTUt_EqzN_t0EtGnhs; HttpOnly; SameSite=None; Secure; Path=/; Domain=jjdsn.vip\r\ncf-ray: a045b511ef7f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7066,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 476x476, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1e9d687fa53ebd5b7be0c1298a0db20d","sha1":"ccda1bee05fbff271a459b2c62c0c360d0b4ea07","sha256":"4259a7dba2047f16ea6230c6d724cea23f90fcc6dd732c4d8ea47688d3b8e2fb","sha512":"b0f633189e4f794c48a12b04f64e57046d26e8967e570a05495c2f879ddd74f3367a400fdf0bfe450ad4ec7432381cc81f80b7c0b49ddc5617f7bb6e999f21a3","ssdeep":"192:/zcEnxvD3+gWHaCGl8Gg2hY6IHevuG4MARC9Zj3LO:AFXdzGg2hJIHevERcj3LO","tlshash":"8ee19ef36f709f4634e1b3427028d6d6b82fcb54a2d0fbe5d5a7a9b9209a15a3837014","first_seen":"2025-09-09T17:46:49.230173Z","last_seen":"2026-05-31T12:24:22.78877Z","times_seen":17,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":152,"dns":131,"connect":1,"send":0,"wait":28,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/f1c1768444e7.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/f1c1768444e7.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 43184\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d23e6b22be719ba050fca2d9f139700d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQPSmh5eIfvu3zyayPhoa183f%2FInYaBm%2FEAbb4h1E7aqE0qsEB9Tec0NUIvTvhmaU8vIOPn3sQ77qjfe3qDh8cqfb%2FfSZtJtE%2BobckU6SAx%2B6ZtURTIHALUsvPSBVLI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncf-ray: a045b510eaf4d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43184,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2880x1886, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f70c41b368424ea4568d5543131fadb3","sha1":"bb0e745c3ebf3ff224d3a58d06dd6f5cca3367df","sha256":"d6450fe1f55782286692b25a700852434a459b9d5156aaad7533575ecaf88487","sha512":"2260c62ccf06f07e85007165f7557eb97115115cfeb3505487028af955f27ce72785de28508a1953b76d3147351a338ed125e34e64272a7c63db088c9f7f0f4a","ssdeep":"768:mv5TRd3P9Fd9UnV81eVQRWm63b0YTfnT7WV3Yb4jTWQ8:ERd3P9Fd9UnViRWm63bPnWu1/","tlshash":"4d13f1418ed606303cdff42b21690d54cc79e6fadb9a4af7933a48490b2ddc8e1428bc","first_seen":"2025-09-09T17:46:49.235537Z","last_seen":"2026-05-31T12:24:22.863755Z","times_seen":17,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/6eed91bdb28a.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/6eed91bdb28a.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1030\r\npriority: u=4,i=?0\r\ncontent-type: image/webp\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1cfd1ba77c064010d398e0df66026203\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FPz4cJ05dXiqor%2FboRxhz2VVSTzlaRvhUJ%2BUB1a8JiCv6E5rgQsh8BhnnDWjSiU9vGXezUKDtCzf3quKpuTsEtSs9rKzeM7MWKYdbJkFPFCbBEXnW7HQEfhBjAmqgY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\ncf-ray: a045b510eaf3d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 104x104, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bea6c9b662e8ebd2789c15142482a673","sha1":"410d55e6bdd93c7d7051c39648bd99049a70e5d3","sha256":"943bc0dc95e60904cd5243c1235f155c650af95b4d582dd2baa8043d7e7eb392","sha512":"7ad05e2b19db3767f36cbc63b97c3b5ff5fbc7e7c875e25539e1269239aff31f846036785174aa92fc3eb2955a8fb88be84830c3ca14d47d359a25732994ff85","ssdeep":"","tlshash":"941175f44532f2d3d69729854ea38699a15885c48194b94395f5898ac1262db83288ab","first_seen":"2025-09-09T17:46:49.242995Z","last_seen":"2026-05-31T12:24:22.88847Z","times_seen":17,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bltget.click/images/2adc86882e4b.webp","fqdn":"bltget.click","domain":"bltget.click","tld":"click"},"ip":{"addr":"104.21.34.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bltget.click/","date":"2026-05-31T11:41:03.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bltget.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 16:03:09 GMT","end":"Sun, 16 Aug 2026 17:03:01 GMT"},"fingerprint":{"sha1":"28:C6:52:3C:1B:E8:5B:11:19:94:C4:36:1F:C5:2F:AF:4B:AE:B6:45","sha256":"28:CA:1C:29:E2:CD:D3:8B:8E:20:EB:0E:30:99:AE:70:25:AC:4E:5F:8A:8D:4B:6B:8E:5C:CB:2E:A1:E3:AE:1B"}}},"request":{"raw":"GET /images/2adc86882e4b.webp HTTP/1.1\r\nHost: bltget.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bltget.click/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 1144\r\ncf-cache-status: MISS\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"dc6dfaf3cd3b4de7cfd4f4531747c777\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9QNevjwiV5BzM7XjJ9VgKUJq%2FeqmnONISIkqXXJXdNFsrqAURug78DS1Th6Jua4C18FDVwPyYQaq7UqIn9%2Bl2a2uIhQvhCJJgbxuo330aiv4JST3bGfGOrizipWA4Zk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 31 May 2026 11:41:03 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: a045b510eaf6d2a6-FRA\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"04257b199f75da726acbf3404e7d8cd7","sha1":"e6c02aea6945b89e6e75f090f35c9fad1c2a4fa8","sha256":"46e090a4bb2760ad3dbaf06aee322e1425bf188e43b194a29c3e1255cc5f4592","sha512":"ecf7c1b253c9e26c875991b739365620a75f4e8c05b0925b50f7464c3888b1dd9f0f6212e2fa9d88e76cf868bd30b37cc2f41122ef63055e688a7a2ab6869ce6","ssdeep":"","tlshash":"0921062792df1e47b23572d061a75ef128868230d062434c8c1a0b76c3fc1d8e224e2b","first_seen":"2025-09-09T17:46:49.333093Z","last_seen":"2026-05-31T12:24:22.893934Z","times_seen":15,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-31","alert":"Sinkholed","trigger":"bltget.click","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}