{"report_id":"58af1863-7c9a-4d80-9c6a-ee2d19f7de46","version":6,"status":"done","tags":[],"date":"2026-01-05T22:37:59Z","url":{"schema":"http","addr":"api.jcerp.vip/","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"172.67.223.154","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"api.jcerp.vip/#/login","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"title":"D2","dom":{"size":13061,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4024)","md5":"b830eefda22c398e0fe45d3a4f6cc108","sha1":"1afcc7ed4223d48ec8fa697a8224adc2648f5cb9","sha256":"f764876da72eab883544ee0ed1f0c57140bc0c5c24bfec7ec82ad65c572679e3","sha512":"2ee48b84662be94e547cde5d9b0a15e3e7c16b6314de85c5a45217aa4db6c93562bf1a1bf93030e28412b31243942f96902bd568d5c5ab2f7ef17801ce242de2","ssdeep":"384:76YUhUFf9ZCxMo6tazouHInYalCcIrHnA:76fhUFFQxYaMuHGYanIbnA","tlshash":"f3421a7c5675813f1107eaea76f1cb283379a55be20b8c04b2dc02985f92e948dd7db0","dom_hash":"domhash8b0d4865a4da75eadaecb6d4c3ed81d0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"api.jcerp.vip/","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"172.67.223.154","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-09T22:37:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.jcerp.vip","ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-24","domain_rank":0,"first_seen":"2025-11-19T08:59:23.578889Z","last_seen":"2025-11-29T08:14:53.156251Z","alert_count":14,"request_count":14,"received_data":2614199,"sent_data":6448,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api.jcerp.vip/","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a4b236d1fba74c0c485918aa830a818b","sha1":"2c2ec3e8a791f1e51149fb00bc030cbf9d117a67","sha256":"1b3e4a1a2b1630873e1e5705d37255e4d618189a6f3cf3da7dbd54326e8ff84b","sha512":"51a945d24a49fb12853c474f24c47b4d6bf81998c5bdd3d53afdf32d078c5817d32bd980df4397130fa05258616736ee97849086ed1140ec05000093c0a50e18","ssdeep":"","tlshash":"51c02266a21dae388862656a1810a2380918088a1a04e2093b9c1504bbe600e0266682","size":188,"data":"","first_seen":"2025-11-19T08:59:30.24191Z","last_seen":"2026-01-21T09:49:53.047823Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0index.6be2c8fb.js","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0052fe67340c2d9d1041eb072227be4f","sha1":"47f7c97c2c2848b740d0dfc637da1260aaaae81b","sha256":"f2f815f4ddb0b1755ef19a12a9851705072b0d9e54b693e136997839d397d1cc","sha512":"02cc13407164bc35db95370c3c497618921eee5b6b1dcf476da10bc125a6150ad9fb8f57695a011eca4a01302ccf8a211b0afe95de5b90698ac43ede310a1e78","ssdeep":"24576:kS1zDvUI8WQup85gJFAtdd2s0AXkehlAKoXEoSYOADFNVHLwheXAWuVcIK0VRadv:kS1zDvUI8WQup85gJFAtdd2s0AXkehlQ","tlshash":"c0653aa4346a787d97ff54d5506a0000a33d2f59b408c4e0b5be9d393a6bd11e2abfbc","size":1447502,"data":"","first_seen":"2026-01-05T22:38:05.168722Z","last_seen":"2026-01-05T22:38:05.168722Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0index.5b9a7a67.js","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43e29751831b3df6247c3ae573ffd6f","sha1":"111e7ca05e5f717b2650d2b375c4bf784d2be855","sha256":"d1f3d06d3a285b5ff060a33aa15a3f317e271ebb9d345ec32692fa4a9c3adf8d","sha512":"96ed321712d264133ecb7d2880fb80f448ffaf4a53317ce71f46013fd521d6a7c72d833a2e3ba88908ebf967b65977073e07c6c90254d7b47b8b1b73b7ed054b","ssdeep":"96:EeZj9V7z2NsKyxBfTvHsUpoDBB/Rz8lBM+X2o2T5X6lYaY4X:EeN7zxTbvHJpkB/Rz8lBM+XPQXGYaYY","tlshash":"a291d61d6474cafc68974921b98a94b0f05cbeeef2391c06b1fc06213f66de4ca5935a","size":4576,"data":"","first_seen":"2026-01-05T22:38:05.161487Z","last_seen":"2026-01-05T22:38:05.161487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/#/login","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"64ac192877c0d91505e3a17da05fa420","sha1":"a1e42a3d98de9a02113991432ebf11079c5d838d","sha256":"76a3a88e81c39cae9105a05aa5163dfcda8fc7c36f8725150314317b7073f2b4","sha512":"16d30f1e1f174dd0337b097ef4aafb72476eb21e8a5ee64332adba7f5fab5727d6805501ad918337286cd1ecf7dfd2bdb2e00cb0196c0211b0a29429203c0058","ssdeep":"","tlshash":"34c08cc5b0c73d007a92a96150af39e4a038402bb44c2b83acd4e9882f674b0c333fec","size":167,"data":"","first_seen":"2025-11-19T08:59:30.250004Z","last_seen":"2026-01-21T09:49:53.055498Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/#/login","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e234692b7e2dc8743ff8734c30396cd","sha1":"3679009b2060558436a6a6917b4d1c6ba44c52b2","sha256":"67e441e5c171b654dee3f9c88f29201a402908f773708074495797288a603f2d","sha512":"37f1dd2511b4fc80d8e055193c2c3ac873296c01d1016161b90d37b20811a42125bcc094137b5d9f6bee1668a64cfc53be962355277effcba63c02c7c6d83f61","ssdeep":"","tlshash":"4ac08cc8b0c32d001606a45054af34f89024846a704c1f03ada8e8693ea30b48233e98","size":154,"data":"","first_seen":"2024-08-19T14:58:54.206615Z","last_seen":"2026-03-11T10:53:18.46242Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/#/login","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"45d4d4edd671bac1211aecc8ecdbd296","sha1":"3f5b724b67703c5097824632b795d0b90228de29","sha256":"192c40beb2a2e7bf0d00a3b8f3eabf9e8df82732870264b93584fb967fb706c8","sha512":"491d97d53dcdbcb6169ad1f9ee2d556caadb2c6b3c9e5b2ccf6382db9c72275c3e83f7effd39e78d852205057238438111da2dca694c186364d12d554faf1601","ssdeep":"","tlshash":"2dc08cc8a0c32d002607a51064af38f4a034846b704c1f038ea8ec693e630f48233e98","size":154,"data":"","first_seen":"2023-09-27T19:17:21Z","last_seen":"2026-03-31T16:33:58.014558Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-05T14:04:10.586503Z","times_seen":29769,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0login_right_banner.5570baea.js","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d7584c1257f64bda53cc3677b01369f1","sha1":"9eb63b6b04a450cd1e7ba348cf609e70a576124c","sha256":"ec5d678912ddc1ff64e05997e9e5f4fe4a30a4ed9347148cdb4cfa3ec782cc55","sha512":"d902105abc72a5645ae910639a45e00ba3396dd507f6130de36effefbec677c0a3ec0aa98cf982889676f07433a78edc583ac96afc529f48757a2575cb49c569","ssdeep":"","tlshash":"e4c02b1008bc4d72607a1096c730c0d16436782c700acfd8041a4b082e39583fc0b801","size":143,"data":"","first_seen":"2026-01-05T22:38:05.160612Z","last_seen":"2026-01-05T22:38:05.160612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/#/login","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-04-05T13:43:58.011533Z","times_seen":5305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-05T14:04:10.587474Z","times_seen":33629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b381a12ae81636a38022fe241a26e3ad","sha1":"7f20d98f0485fb240d86e0d89f72f7780ae5b71e","sha256":"c5711592286ba4d190d3bafab6e638e1bd1dc4390473ae658b31734b693db720","sha512":"ac720484f98249655d592daacd60f2f2ba4f340c6363b09e785e4e148af03e3968c361ef89bd8d81f2c8f96ffdb4908693aef7f0c2b3bc5b0022745c1d4b2adb","ssdeep":"","tlshash":"7dc02bc4b0d33d001602641050bf34e490344027784c1b03ccd4dc493e234f08233edc","size":135,"data":"","first_seen":"2025-11-19T08:59:30.246008Z","last_seen":"2026-01-05T22:38:05.178029Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"api.jcerp.vip/v1/base/captcha","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"POST /v1/base/captcha HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nx-token: \r\nOrigin: https://api.jcerp.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type,AccessToken,X-CSRF-Token, Authorization, Token, x-token\r\naccess-control-allow-methods: POST, GET, OPTIONS, DELETE, PATCH, PUT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Access-Control-Allow-Origin, Access-Control-Allow-Headers, Content-Type\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsRPw23CRe3B1fhnJpS6KZasxwTQKIdBQHc7HRFUZCtLAQmQsu8B6TEm7Udq8r8feF%2FR2P5boeJDR3kyrY%2B2LUW03%2FgGhBud6cAJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9676248cfa568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2297,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7aeaf72f1970971077a31f21c99bbfc0","sha1":"04d3db8141da1575ba9964edd473f13922829469","sha256":"fbac59707a345c797adeee1f1c0a4793d2a7741c9a6c1687184113793b014976","sha512":"b3dd33c504f4f0d06cc181a68f753052f87d602dfabbf4e1ddadde7ee32fceaac951f8d71aaa2e315a4f05002eab70f1397bb6a2013f9c2e3f36e9a6ea78826d","ssdeep":"","tlshash":"2c411b7a55890b435b5b4391054bd3d04e969cdaf0f0479f357f95cd928ddea9c180cc","first_seen":"2026-01-05T22:38:05.157021Z","last_seen":"2026-01-05T22:38:05.157021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":594,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0index.6be2c8fb.js","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:37.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0index.6be2c8fb.js HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694e369a-16164e\"\r\nexpires: Tue, 06 Jan 2026 10:37:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fr07BMLyCAMJvIBqRBBA%2F73kgui5P%2FplM%2B6aWVWzLNGDr%2BPXoBKAkiyG1NMTPwhlcTw7AjZK0vw4YWvhj7liC4vMSOCS7jHKqrhy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9676150c47568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1447502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44117)","md5":"8ddb68e16a5d840f91032c0c3e34aaa8","sha1":"2123cd3a2bd4dfbe781640b6257d3e65abf5034d","sha256":"a2e05df0b7bf7057d77eefb4e6ff18bdb0deb0e793b5e0429226d6962af09605","sha512":"060ea5533fdaa20e33c3a93e61ed8bb93fc4b5c09dab816051f0505fdb123d59fb9a15b7b88a9b01dc0816d3a0fbd18e9fa13fb5c6765ac8d4deb1b8ddd384ad","ssdeep":"24576:kS1zDvUI8WQup85gJFAtdd2s0AXkehlAKoXEoSYOADFNVHLwheXAWuVcIK0VRaj:kS1zDvUI8WQup85gJFAtdd2s0AXkehlC","tlshash":"79254b947995b47d87bb85c8507b0001b33e2b89780c88f0f1be9969366bd54d2abf7c","first_seen":"2026-01-05T22:38:05.158362Z","last_seen":"2026-01-05T22:38:05.158362Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":755,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0index.1e2cd7d7.css","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:37.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0index.1e2cd7d7.css HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694e369a-5e1a3\"\r\nexpires: Tue, 06 Jan 2026 10:37:37 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZlQgH1hnD8NiNakdeQqEE1E3gkD%2FPwnNx%2B5yoz3TCVyBZZpE9nLiu19wnTunSCdCLpSvuQxGX%2BuScGvsXNm48AET7%2Bo9pRR70cW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9676150c48568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":385443,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65467)","md5":"0e74d96ba68cb73660d9840f52e702f6","sha1":"6d7834e329c494ef01314bf78aed2ad65112bee5","sha256":"b14de5a99f344264e38bf1b05263122c7631b7e4fd6a32df3b1f782f24dfcb83","sha512":"2321679884aa4b041cc59b73b63a15a387bd8392e3c1da1de41a4c10f7b267b2456c021cff18a1414dd7a2d8ef752861dbe4c2c3436de0ed4b97cb69946138ef","ssdeep":"6144:RSI0MGuhT7M8EcH7pTVkad36fFhsSIcO3jVMa/4uta78+B36JL7u1A+wMif/x0r2:l4axD","tlshash":"6384d665f713543b2817d67d79c0e9a95f18ce92c9228bb6fa40b50491c7ae202e3d3f","first_seen":"2026-01-05T22:38:05.159314Z","last_seen":"2026-01-05T22:38:05.159314Z","times_seen":1,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0login_right_banner.5570baea.js","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0login_right_banner.5570baea.js HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.jcerp.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:39 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 06 Jan 2026 10:37:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"694e369a-8f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfUSutSodYBaQGou88kIeziFcArcy2C3wOuUIsxQyFsl%2BH%2FbFKupNz0NIlkA3wligNotUVQNad2oC79jLRS%2BoMiCk%2BSO1hlDyCPq\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b96761ffc98568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d7584c1257f64bda53cc3677b01369f1","sha1":"9eb63b6b04a450cd1e7ba348cf609e70a576124c","sha256":"ec5d678912ddc1ff64e05997e9e5f4fe4a30a4ed9347148cdb4cfa3ec782cc55","sha512":"d902105abc72a5645ae910639a45e00ba3396dd507f6130de36effefbec677c0a3ec0aa98cf982889676f07433a78edc583ac96afc529f48757a2575cb49c569","ssdeep":"","tlshash":"e4c02b1008bc4d72607a1096c730c0d16436782c700acfd8041a4b082e39583fc0b801","first_seen":"2026-01-05T22:38:05.160612Z","last_seen":"2026-01-05T22:38:05.160612Z","times_seen":1,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0index.5b9a7a67.js","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0index.5b9a7a67.js HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/assets/087AC4D233B64EB0index.6be2c8fb.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694e369a-11e0\"\r\nexpires: Tue, 06 Jan 2026 10:37:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ir4GVcXDFbcIAt0v5ipnXVrTWPxKegBLkookTLGZ1CL66IdzcTuZuoxLO4Adzs6X1D%2B0KFy44rgp%2B7tpe%2BnPXV%2F1o2CUuxt5%2FPvs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b967623dcee568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4576,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4502)","md5":"e43e29751831b3df6247c3ae573ffd6f","sha1":"111e7ca05e5f717b2650d2b375c4bf784d2be855","sha256":"d1f3d06d3a285b5ff060a33aa15a3f317e271ebb9d345ec32692fa4a9c3adf8d","sha512":"96ed321712d264133ecb7d2880fb80f448ffaf4a53317ce71f46013fd521d6a7c72d833a2e3ba88908ebf967b65977073e07c6c90254d7b47b8b1b73b7ed054b","ssdeep":"96:EeZj9V7z2NsKyxBfTvHsUpoDBB/Rz8lBM+X2o2T5X6lYaY4X:EeN7zxTbvHJpkB/Rz8lBM+XPQXGYaYY","tlshash":"a291d61d6474cafc68974921b98a94b0f05cbeeef2391c06b1fc06213f66de4ca5935a","first_seen":"2026-01-05T22:38:05.161487Z","last_seen":"2026-01-05T22:38:05.161487Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/logo.png","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:40 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwasYJgMMgt%2F4wtcRMo1lgK%2FLe6EP2BK886ni6SKVw4Z8H1qLgOB4Z3SkOJ2%2BxxLWN8gf4KSPnbf0sepCm1nVuskxbwsD016%2BIfF\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9676242cf4568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-05T14:48:22.829826Z","times_seen":479663,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0login_right_banner.f7acb81b.jpg","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0login_right_banner.f7acb81b.jpg HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694e369a-af8b4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZv%2Bf7ZcBeJS%2BUUrOM1wMiupzMBzL7oAbKa40D908pk%2B8YdC8fGybcch%2BUHfydoOZF1bLtcff1LXD0cW9AOmQkF2ZjYj2hWjBnA8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9676247cf9568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":719028,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1951, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1277], baseline, precision 8, 1530x1951, components 3","md5":"fc87253a7ee5529dbc60886938becdaf","sha1":"528d6b1fe073486c7b9d120a243b58a1c703c3d5","sha256":"f7acb81b4795e14e23282cc4e6cc658f33e5287acf848a94a1cd8cba49d9369a","sha512":"03fe1b5706b5fd6339841210b34cffdd75b7ebf168c72f8bdda0c7539278376be789b1ce7588d2a3e287bacbdb3221293d99de62a48ecea08b7b93ebaa66c1f2","ssdeep":"12288:fLf5D6YBlj2Wtv2b4RPPX4i45Y2IWupKfyuapyahFonI0BadqbtQKm:DBlj2ieSnXA5CpKfykouIypE","tlshash":"7fe4c4f288b4bf13b7361d1d63655e991419193b0be80149f4afdb8632d3caa706f983","first_seen":"2025-09-15T02:27:49.277435Z","last_seen":"2026-01-21T09:49:53.039456Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1724,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":852,"receive":872,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-05T22:37:36.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 05 Jan 2026 22:37:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dklmy%2B8yBWXjngi2b0W%2B3vYyDJbpmyiTN3l6mIF4GbIth76KXqsEp08JJVXFMpufITMNsXN0pAxmKn2eolnB4davPstD5YVE%2Fy9Arqc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b9676100e7f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8292,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3055), with CRLF, LF line terminators","md5":"2a10c03ade9a791e57cd472c5ac0307f","sha1":"23c0d00a34fb0161c0347dafaf09961105f29f8e","sha256":"4108593a732ed3977120e238616252de37f5967165e911878c8e08033efbbc05","sha512":"7a7018e16ccdb6838dd603d693363fb55224265215357f3ddeb9cec251e7b3f530ca6bf784adf60771b3dfecf7952a5870ddffb238bc14f2cae32b9a3b53d707","ssdeep":"192:lJmAYZmIxfjRs64AW1PN/FLFyJJIZCxfuhnaTVHzt74974zkrFXVuB1Xir6inf8:lTYfhUFQIZCxWtaKF6SrJn0","tlshash":"e9020ca596ba407d6917d39b3eb1a1147b385067b70acc2837cd17915f22be84dc3da0","first_seen":"2026-01-05T22:38:05.163368Z","last_seen":"2026-01-05T22:38:05.163368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":32,"dns":15,"connect":1,"send":0,"wait":626,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0form-item.354ae6cc.css","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0form-item.354ae6cc.css HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694e369a-12bc\"\r\nexpires: Tue, 06 Jan 2026 10:37:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2FfabK6IenO6un%2FCIrUjzDuSJKqYiIt%2FSqLoj9ayNCopK9yhWn5ksAIwVgypD5kCRjlJKoqeC%2FvAiuPulATO3U1XEnnHTvmFNg0v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b96761fec92568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4796,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4734)","md5":"4bdb219b612ef87e7cfec54a93b53bc3","sha1":"797be92c34b37d415a9f1a83326923328d2bccb8","sha256":"f526e051e6439888e09b084849b9650590e2f0aac08be2b5ea483fdbfedffb1e","sha512":"a428d7de7f47ce9ddcd8403d556e0d9d088d81e2dbcb8683b6bc03aaaf0f313f2ba6767d67ee72b5bf9687128a5fc5abbac3393e92bd14e05bebeac19d9fa777","ssdeep":"96:EmrPHurzfp9ZvQW0qjufd98DwHPDWrGHrYr+rxrbRrbBrbvrbSrAHryrErfrBXHb:EOt9c6HEKlxhPykHugjJHZ3BwHmIcx","tlshash":"efa1f022171b177fb641b6fc96c26363bf18a632c0121492fea0819c43ce3791bb5b95","first_seen":"2026-01-05T22:38:05.164724Z","last_seen":"2026-01-05T22:38:05.164724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0button.404bcc88.css","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0button.404bcc88.css HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694e369a-3db3\"\r\nexpires: Tue, 06 Jan 2026 10:37:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LguXf4Y%2FdVFI37PKhw268GCpVCeBwqIpS4YYoWL8ljb6mxbNni65A4XLZIWVc%2FEbPfNgBPD%2FnQtRWAd3a4mimPDNXMVbjk274Do5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b96761fec94568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15795,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15733)","md5":"576a914efb10e677fcf03a54ce0dc97b","sha1":"6225d33e8bef2ba134d7dd393c5a9f027fee4c74","sha256":"61f9aa97a00c12b3b23a32847672fd83ba17bfbe8a40403d9293100ac1673e7c","sha512":"c3c2ccf0c35a7c2d8e87c2a9d2cca0b6088dd778402b069708db05d069283bed1b42fe93807bbff2f130a6139cb8fa826bb59d86d27c13aa4816245cb47fd8b3","ssdeep":"192:E1D7DaG92aPrFDoPZQ+D4X7gk1RXXV8DoaKbaJwnqjkqDeD9Dg7Y/o9t4qKm2z9i:zwp2W3gjRO2FbBmJoPQGFhaE9","tlshash":"526217d7e751eb7f1e039bbc4b9af9a5b781adc4c5006762f208908c20c65b5268ad73","first_seen":"2026-01-05T22:38:05.165609Z","last_seen":"2026-01-05T22:38:05.165609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0input.0fe97abc.css","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0input.0fe97abc.css HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694e369a-2ac1\"\r\nexpires: Tue, 06 Jan 2026 10:37:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptg7BcoCWZzq%2BrWTkKKFyPOzsAfRV7jJNfEUCrWEcvSEOJKNpFnIqdbUNJrCxB4mexfvB9rCni363xJ861zDMpYJzEkPuBf%2Fl0uQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b96761fec95568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10945,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10883)","md5":"52a04e85b5407db72daf14dd28066ce7","sha1":"ccbf8b84768a49b5f5ec658fb22ce4d6390a046b","sha256":"0db1afe3b62dfc878f33eb64d37326e19e91afdf48dd1b56dd7fab2715ba5443","sha512":"9ebaa00a0bdb0c3300dbc0ede89db96fbb735aa3f9569e2725423de4fd1c50aac4175743206629ab7eed9d42811adf50560621f1dd20679a01be6dd24a173e93","ssdeep":"192:Eoq3OAsRrq3S2WtNhOIhD2Nei4QB6buHNg:t1t2k7OW/","tlshash":"5732ba78e392923b2c13df7c6ac8db796a04db02dd418250f694a11cd096aa517ffdbc","first_seen":"2026-01-05T22:38:05.16663Z","last_seen":"2026-01-05T22:38:05.16663Z","times_seen":1,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0index.5b9a7a67.js","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0index.5b9a7a67.js HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://api.jcerp.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"694e369a-11e0\"\r\nexpires: Tue, 06 Jan 2026 10:37:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aaqpjXtY5mtcOVuqjVzvL%2FWbApv9pW%2BcbiUWafs0ng%2Fe%2FMiWhrO8UBf9BnyWSuaTdnJ%2FqHZW%2BAvKSBVlPKivtNZDlbiQT%2BBXGBIU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b96761ffc97568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4576,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4502)","md5":"e43e29751831b3df6247c3ae573ffd6f","sha1":"111e7ca05e5f717b2650d2b375c4bf784d2be855","sha256":"d1f3d06d3a285b5ff060a33aa15a3f317e271ebb9d345ec32692fa4a9c3adf8d","sha512":"96ed321712d264133ecb7d2880fb80f448ffaf4a53317ce71f46013fd521d6a7c72d833a2e3ba88908ebf967b65977073e07c6c90254d7b47b8b1b73b7ed054b","ssdeep":"96:EeZj9V7z2NsKyxBfTvHsUpoDBB/Rz8lBM+X2o2T5X6lYaY4X:EeN7zxTbvHJpkB/Rz8lBM+XPQXGYaYY","tlshash":"a291d61d6474cafc68974921b98a94b0f05cbeeef2391c06b1fc06213f66de4ca5935a","first_seen":"2026-01-05T22:38:05.161487Z","last_seen":"2026-01-05T22:38:05.161487Z","times_seen":1,"resource_available":true,"data":null}},"time_used":623,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":622,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/favicon.ico","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:40 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RNVINgwbyMyHmaE8DHpkeHVl9Lb%2FB20WWUCxc9FsXUkz2zy4rNId5kye1%2FKLG6EPIbgkkTIPtUkKW5qwsdoWeW3Mqrm0T95WCZEs\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9676232ce9568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-04-05T14:48:22.829826Z","times_seen":479663,"resource_available":true,"data":null}},"time_used":577,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":576,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.jcerp.vip/assets/087AC4D233B64EB0login_right_banner.5570baea.js","fqdn":"api.jcerp.vip","domain":"jcerp.vip","tld":"vip"},"ip":{"addr":"104.21.54.48","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://api.jcerp.vip/","date":"2026-01-05T22:37:39.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jcerp.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Dec 2025 03:57:58 GMT","end":"Sun, 01 Mar 2026 04:54:21 GMT"},"fingerprint":{"sha1":"8E:40:35:D6:AA:01:97:F7:A3:22:91:42:7B:35:6F:6D:FD:98:3A:76","sha256":"0A:99:20:C1:4B:9F:04:DB:3D:EE:44:2C:71:01:5F:57:38:C1:97:63:4C:D2:6D:4D:8B:70:EC:CE:4E:89:0E:4C"}}},"request":{"raw":"GET /assets/087AC4D233B64EB0login_right_banner.5570baea.js HTTP/1.1\r\nHost: api.jcerp.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.jcerp.vip/assets/087AC4D233B64EB0index.5b9a7a67.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 05 Jan 2026 22:37:39 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 26 Dec 2025 07:17:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 06 Jan 2026 10:37:39 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"694e369a-8f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTUtCDNTCV3Z%2B%2B6Rx7EYqQEWLncObyspMs%2BQHVvvVS6hlCwieGA5PQQSwpaeRTy00PnBXUmp893t8dTVmUUNzhv67z%2B3dIvnTYsO\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9b967623ecf1568e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d7584c1257f64bda53cc3677b01369f1","sha1":"9eb63b6b04a450cd1e7ba348cf609e70a576124c","sha256":"ec5d678912ddc1ff64e05997e9e5f4fe4a30a4ed9347148cdb4cfa3ec782cc55","sha512":"d902105abc72a5645ae910639a45e00ba3396dd507f6130de36effefbec677c0a3ec0aa98cf982889676f07433a78edc583ac96afc529f48757a2575cb49c569","ssdeep":"","tlshash":"e4c02b1008bc4d72607a1096c730c0d16436782c700acfd8041a4b082e39583fc0b801","first_seen":"2026-01-05T22:38:05.160612Z","last_seen":"2026-01-05T22:38:05.160612Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-05","alert":"Sinkholed","trigger":"api.jcerp.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}