{"report_id":"7a9c7d85-3096-439c-99d0-7784e8ef8f7b","version":6,"status":"done","tags":[],"date":"2026-02-01T16:26:19Z","url":{"schema":"https","addr":"jeffrycoin.vip/","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"jeffrycoin.vip/","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"title":"JEFFRY","dom":{"size":4935,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c9ddd79446188ddaf3f314c02ee54da6","sha1":"78320712ab3cd8290f0b941502a97480bb260eee","sha256":"f70ca038d526f6b5d4ef9926331ee6f123e8339aa2db8ce10ca16c748c759810","sha512":"385aea5c796a306c1630a3f5176bc8894a3712626db210bf114e08d63f698209dbb442fe9a4d864ce21ec8b2eedc9a9e374679f48ce0b801b372aa4229c67883","ssdeep":"96:W/gWPzyHNz21SvVQkeJ1jM/qqtEjv12WqylPNEvo5j:OVPzyHNz6SdQkeJ1t+oIij","tlshash":"83a11d9144f21423514398d499b27b2abee1d607db0b999876fd13f58fcbe86cca708c","dom_hash":"domhash41420bbd1f84aff8a973c81a4315bc4f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jeffrycoin.vip/","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T16:26:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"jeffrycoin.vip","ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2025-12-31","domain_rank":0,"first_seen":"2026-02-01T01:35:03.821209Z","last_seen":"2026-02-01T01:35:03.821209Z","alert_count":10,"request_count":10,"received_data":1124762,"sent_data":4618,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":1535,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":1,"received_data":21722,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"userstat.net","ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"domain_registered":"2024-03-20","domain_rank":129019,"first_seen":"2024-03-22T18:32:27Z","last_seen":"2026-01-30T13:47:59.133602Z","alert_count":0,"request_count":1,"received_data":527,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jeffrycoin.vip/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f37dc029aa068394bc0f14aa0682d4b","sha1":"0618e3f184222f89641c048332313aacc72c4ed5","sha256":"9bb1f762b2d7d3d3448bc79cebad4f89be9c490b6033e50d011f81ed3ce9f90e","sha512":"5182057151eb2d4278916e7cda07f06af28de90f8d1ce49a4984a0202476604adda0c82d1b9f7666a066b57fa18a7d27238447dfca71c59abc39414c58395883","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDL6ip3h8cAowEjOPrBeU6QLiTFbc0QlQvakV:AYh8Gip3hubf6IidlrvakdtQ47GKl","tlshash":"f99309ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bc78a4e827bf7d","size":89935,"data":"","first_seen":"2024-06-04T08:59:04Z","last_seen":"2026-06-10T21:09:45.238727Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/js/webflow.a7484ce1b.js","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68fc7bf4cd45882db7e08c562af5a0e4","sha1":"ed9b24accbffae3989b9c41ff13c54687a095a04","sha256":"252911bb776dbef5111a58c3cfdbbd7e10191398a44fe40d4f7238f8889da9cd","sha512":"259a154c0676ef0ed47fc9aa5309d2bd30aa0a14ca327ffce6c1bddddfffb1f1096e6fa1fad8967c389468a4a815bf374814616d4bd5779a0eefa83d86502d82","ssdeep":"6144:MDkedMEgntmHbJjagf3q1K0GLHVZdG3C2:MdgnwNWaHVZc","tlshash":"16741e4aaae33074a223b13d8b5fd9097625454b1d48fe143e9ca2a45f1c82d93f6fdc","size":347378,"data":"","first_seen":"2026-02-01T01:35:07.400747Z","last_seen":"2026-02-01T16:26:21.608228Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"userstat.net/get/script.js?referrer=https://jeffrycoin.vip/","fqdn":"userstat.net","domain":"userstat.net","tld":"net"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b83abc09acc9db5bad34c9f8aeab76a","sha1":"6751abd42863800222b93ffb19582d10dcd64fe1","sha256":"15ce5c1c9ba32dcc6ad17bb12d61ead8aafba652147c3c51d0e200a16a992d67","sha512":"d6db5159ca1da9b58fb838ceb44b8b2181ad28035db2cd1a457917ef3750c9b84e6ba4223e719049708514cb484aba4265c346af030f8fdd7702e9fd8352ec8b","ssdeep":"","tlshash":"2db02b104f1d86b9203241df60e3c3c88870206670054046640f04b41189dd30e81d80","size":129,"data":"","first_seen":"2024-03-28T06:14:56Z","last_seen":"2026-07-26T06:31:51.641623Z","times_seen":3375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jeffrycoin.vip/","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T16:25:58.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 31 Dec 2025 22:54:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1423\r\ndate: Sun, 01 Feb 2026 16:25:58 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4727,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"347d020d8f4596428b1bac01f2ceab51","sha1":"23588394e4ca2d389f9a6d35d309fa32385622ff","sha256":"9ae6aa2f5c01052481e945670d34209ec8a414431a6d292f951702c0719ac83d","sha512":"6e644595ec0190319a4eb23ecf602928d463e8f87e23374eb7f4524f610aa5ec6f3d622864bf02773853071810e642f6870a3851af60bb66c55676ebf55cda2e","ssdeep":"96:MgWPzyHNz21SvVQkeJ1js/qqtEahWqylPNEvoH:MVPzyHNz6SdQkeJ1F+cIu","tlshash":"f8a12f9144f21423414398d099b67b2abee0d607d70b999876fd13e58fcbe86cca318c","first_seen":"2026-02-01T01:35:07.410993Z","last_seen":"2026-02-01T16:26:21.599001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1449,"timings":{"blocked":641,"dns":39,"connect":161,"send":0,"wait":164,"receive":0,"ssl":441},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/css/all.min.css","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /css/all.min.css HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:25:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 17:43:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 17237\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":83921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65311)","md5":"0c53e2226f5638b49b44d6597e7f2a5f","sha1":"22e8c270a5d6e3e59646c48267cae8dd282ae74a","sha256":"e62e00f94f561d007a6fde0f63889f82fcc23594f97a2b50bddbfdea4df2a406","sha512":"ce533a59801705aa6f96e34746d11038551aa137495026c3675a4b8eea183abd536177e8d841a89d997edde48530f3057b731d3882d3096c61783f6c0944a8b2","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITTUHrt+v:sdhgw9kITTULt+v","tlshash":"038376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2024-01-03T12:10:53Z","last_seen":"2026-07-13T08:58:25.626941Z","times_seen":80,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Caprasimo\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"GET /css2?family=Caprasimo\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Feb 2026 16:25:59 GMT\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d1b5e1a66468161229d33d2cbbc75559","sha1":"18430846d9c831cd82487ea0c1fa9abec7f108c6","sha256":"98f06b9511f2fa65f0d7983e3ac82978dc1032328bba35729d8ea64cb454f610","sha512":"6e6ab693f0888b2d2ce0b0467711e22ab53dcbf335771a6d37f103bb173db0938787b98a906e981098c81769ccd499017923388f13c8bf5db566c93753c468dd","ssdeep":"","tlshash":"83011e80082ba504db931cc522ce3e33ee0e61a1a4449a39affd08ccfca6c275316b4d","first_seen":"2025-06-18T22:21:13.912481Z","last_seen":"2026-07-20T20:43:38.414103Z","times_seen":94,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":121,"dns":0,"connect":28,"send":0,"wait":45,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/css/ape-lol.webflow.28c6ed295.css","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /css/ape-lol.webflow.28c6ed295.css HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:25:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Dec 2025 17:43:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16784\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":97557,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (2567)","md5":"910d071624b406920f02fd31e6706acb","sha1":"66bffe570261a86b4010df44e123f25fe2c3d30c","sha256":"cec085a347faf94baa4845da02cb65b8fb890f2f8ebe371baea71e8f96f758cc","sha512":"54207d02ba3c32647377e7b73ccff07f1d71d410650e8e744ec745e4e3611a953c282bc4c0c58eb12bc37e204671cdf2bb9371ee7d036c0192c20457dbcfd164","ssdeep":"768:yIXf7A1zkJFIFN4mkxWaIitaUuN9ZllFKFfFoFNgVx67hUBnzw//HEwDworRwjPW:yIE1zkJuEUY9uN7h4zG3Nwj0X","tlshash":"609375042bf02914b40f94e5d5dab690b73a44838f0fcf9ab9e26056df8d2d96472f9c","first_seen":"2026-02-01T01:35:07.415728Z","last_seen":"2026-02-01T16:26:21.605583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/js/webflow.a7484ce1b.js","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /js/webflow.a7484ce1b.js HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Dec 2025 17:43:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 78595\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":347378,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"68fc7bf4cd45882db7e08c562af5a0e4","sha1":"ed9b24accbffae3989b9c41ff13c54687a095a04","sha256":"252911bb776dbef5111a58c3cfdbbd7e10191398a44fe40d4f7238f8889da9cd","sha512":"259a154c0676ef0ed47fc9aa5309d2bd30aa0a14ca327ffce6c1bddddfffb1f1096e6fa1fad8967c389468a4a815bf374814616d4bd5779a0eefa83d86502d82","ssdeep":"6144:MDkedMEgntmHbJjagf3q1K0GLHVZdG3C2:MdgnwNWaHVZc","tlshash":"16741e4aaae33074a223b13d8b5fd9097625454b1d48fe143e9ca2a45f1c82d93f6fdc","first_seen":"2026-02-01T01:35:07.400747Z","last_seen":"2026-02-01T16:26:21.608228Z","times_seen":2,"resource_available":true,"data":null}},"time_used":649,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/fonts/6647298f9cf5f147da5692d6_UncutSans-Variable.ttf","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /fonts/6647298f9cf5f147da5692d6_UncutSans-Variable.ttf HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/css/ape-lol.webflow.28c6ed295.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:25:59 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Tue, 16 Dec 2025 17:43:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 201532\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":201532,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 50 names, Microsoft, language 0x409, Copyright 2021 Kasper NordkvistUncut Sans VariableRegular1.304;UKWN;UncutSans-VariableVersion 1.","md5":"f34eab9f74da7ccbc3ba642e5fee121e","sha1":"2cd0ad5fb0ff257c6e17e13c719b11528747aa5a","sha256":"9a7ef47d2d71dbb807d4d1d24331230fcf63cdf5312daa0439891f54664d89dc","sha512":"bd97bd6d2b7aa15d7ef9a1903483cc5e5cb26219e53dd6c651145ee32f40d12528e62d17d947292447035040188ed28a5994868f37c7f87b93d78f8fd9a50111","ssdeep":"3072:gSvnqZAjPBmlBerr4aP0RtnPunUs/jLe/p332zpNCWyzbImXsrJ0/cI8:4ADBmlBLtnPunUoYWzpgb8rJV","tlshash":"8d145d12f149ef06d1556b35c1f3db65933ab468ef2b030fa9a9f635adab3811c07290","first_seen":"2025-12-11T04:56:08.242462Z","last_seen":"2026-07-24T11:36:56.094464Z","times_seen":19,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":300,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/caprasimo/v6/esDT31JQOPuXIUGBp72Ukp8D.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/caprasimo/v6/esDT31JQOPuXIUGBp72Ukp8D.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jeffrycoin.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20888\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 15:26:21 GMT\r\nexpires: Sun, 31 Jan 2027 15:26:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 89978\r\nlast-modified: Mon, 02 Jun 2025 16:45:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20888,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20888, version 1.0","md5":"c7371a20ecd7b49b15f630621016f4df","sha1":"96278b066b244b00a3b695682f794c8b9325b51f","sha256":"b1969861df075a84958e7085a04de23f57a2fb6872be63d15dfaad0963c181e5","sha512":"42ad69d3561846d160d17c700aff65443717c580e5374b8a8ea139b5b0a4bf1a7b3723bb260e8fbbd4444b1680e489d5a45237c76717058ef91c74772810c858","ssdeep":"384:gBCnoBcdHKdkC8I3733WtSCLnmA23bVXP9sHV31Pr81n6ICZAKBHIUhvGcN:gBityDH6tPnmR5Xi1r8cTLrN","tlshash":"2992f2e10779387a5d25cb721aabbf2f380c6b0884ca46e58cfdc68416d4b067f5ce45","first_seen":"2024-06-20T19:24:56Z","last_seen":"2026-07-14T16:22:48.450084Z","times_seen":145,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":83,"dns":1,"connect":15,"send":0,"wait":15,"receive":5,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/images/66475c192719e9ff728de768_image%2052.png","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /images/66475c192719e9ff728de768_image%2052.png HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:25:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 17:43:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 245595\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":245595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 748 x 748, 8-bit/color RGBA, non-interlaced","md5":"39e3e6a5f6f7784de898bc9899b266a7","sha1":"9c7d2a72fca9c432875cc960ab24f7761f031cbb","sha256":"84a5b89ea4a1010bdaa699590307a23724a4aa86944d05cbb7cd0a2b37d85f5e","sha512":"dabcd86defcaf0cc9a9d830d9ba6943d5a386fb87dd23cf665ffd5a9d9b4b4f381c2630b45635da948e1bc3df78c1fc811c653815ad80f0c066efee6370063ea","ssdeep":"6144:0do1Wkp7U2+FlvFNAlyimYycJC+C3v/06GWrEu5:0doAgRclvo8i9k30MrEu5","tlshash":"a03413927a30feea616009b25f146de09f2040ebb35741e3ae275d5fa6c947a3f73015","first_seen":"2026-02-01T01:35:07.426448Z","last_seen":"2026-02-01T16:26:21.613206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/images/logo-icon.png","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /images/logo-icon.png HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:25:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 17:43:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 22371\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"921187fa23b5060b8f767085914811d4","sha1":"47b84f1e787840950561b57c4445db36150a8ad9","sha256":"717cd645fc09079401369cb257f619007e3d4327a1c5c534171396d1b4a0a121","sha512":"e02adc5a9a66f372ddfd256d831838c36786d5f5afd62b897b04b418fd681f574be138655e183cdc6c2a5a07cff1109e86801c1bbe5acb8d7d9ecb8fd0bfa836","ssdeep":"384:UoRBbJkTiV/FNO6pUQD9jAtd15U+auM8czCUW7hViOYmMw4oEFX9N2EPEMWmiHK:RBbJkC/FvpU6stz+1uSCDrihBN2sEMpH","tlshash":"42a2e0e14983c33fc7d51da8e68931b18c1d89e79b18913ec1cb0a20fb248d5e6ded96","first_seen":"2026-02-01T01:35:07.418252Z","last_seen":"2026-02-01T16:26:21.615451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Dec 2025 17:43:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30545\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":89935,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"3f37dc029aa068394bc0f14aa0682d4b","sha1":"0618e3f184222f89641c048332313aacc72c4ed5","sha256":"9bb1f762b2d7d3d3448bc79cebad4f89be9c490b6033e50d011f81ed3ce9f90e","sha512":"5182057151eb2d4278916e7cda07f06af28de90f8d1ce49a4984a0202476604adda0c82d1b9f7666a066b57fa18a7d27238447dfca71c59abc39414c58395883","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDL6ip3h8cAowEjOPrBeU6QLiTFbc0QlQvakV:AYh8Gip3hubf6IidlrvakdtQ47GKl","tlshash":"f99309ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bc78a4e827bf7d","first_seen":"2024-06-04T08:59:04Z","last_seen":"2026-06-10T21:09:45.238727Z","times_seen":92,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/images/66475e56e098f21a6b6f825b_Frame%2015903.png","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:25:59.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /images/66475e56e098f21a6b6f825b_Frame%2015903.png HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:25:59 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Dec 2025 17:43:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27358\r\ndate: Sun, 01 Feb 2026 16:25:59 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 224 x 195, 8-bit/color RGBA, non-interlaced","md5":"a0888d5129e8f0fda5d09b34e62c7cac","sha1":"c0660779be9b6126ed99ab69c239beebfe938221","sha256":"797dde903e2b7e756ddf4030f13ee56c542275f45faae1ab7adcff793954bd25","sha512":"269e1018e57ec063784e153dde9a3c2140472fc841066e36240f0eb41eb0626e301c25806a3b535361312704de485a96d18f5fc905b816f7a27e7b1447164a75","ssdeep":"768:BlbPruzGmdsuVfFVqxJX5uHLmFqqfq2PI+:BlbDuymthkX5urIfq2P9","tlshash":"82c2f1e7e898b4c9ec45da447edb3ec7cfa2c9106392355567366e12e2488a06074538","first_seen":"2026-02-01T01:35:07.424004Z","last_seen":"2026-02-01T16:26:21.619649Z","times_seen":2,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":451,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jeffrycoin.vip/favicon.ico","fqdn":"jeffrycoin.vip","domain":"jeffrycoin.vip","tld":"vip"},"ip":{"addr":"68.65.120.250","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:26:00.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jeffrycoin.vip","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 31 Dec 2025 00:00:00 GMT","end":"Thu, 31 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:18:0B:2B:56:64:00:9A:99:5F:73:55:34:A3:DF:C0:29:95:23:79","sha256":"62:46:9D:00:0D:6B:CD:69:39:43:F9:BF:B3:40:ED:AB:B4:4D:A9:5C:DB:98:E6:00:73:25:38:FF:43:0B:57:2A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jeffrycoin.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 01 Feb 2026 16:26:00 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-26T12:01:42.181179Z","times_seen":143534,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"jeffrycoin.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"userstat.net/get/script.js?referrer=https://jeffrycoin.vip/","fqdn":"userstat.net","domain":"userstat.net","tld":"net"},"ip":{"addr":"195.177.94.253","port":443,"asn":7029,"as":"WINDSTREAM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jeffrycoin.vip/","date":"2026-02-01T16:26:00.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"userstat.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 22:16:43 GMT","end":"Tue, 24 Mar 2026 22:16:42 GMT"},"fingerprint":{"sha1":"EF:7E:2D:55:BD:68:3D:15:E1:D6:20:BD:C1:EE:50:11:9A:9B:EB:B6","sha256":"0A:C3:01:F2:05:53:9D:22:90:75:8B:1F:C9:28:63:1B:76:EC:62:52:8E:7B:74:34:50:6E:4F:4F:08:11:99:20"}}},"request":{"raw":"GET /get/script.js?referrer=https://jeffrycoin.vip/ HTTP/1.1\r\nHost: userstat.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jeffrycoin.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 01 Feb 2026 16:26:00 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 129\r\nConnection: keep-alive\r\nX-Powered-By: PHP/8.2.1\r\nAccess-Control-Allow-Origin: https://jeffrycoin.vip\r\nAccess-Control-Allow-Methods: GET, POST\r\nAccess-Control-Allow-Headers: X-Requested-With,content-type\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.1","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":129,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2b83abc09acc9db5bad34c9f8aeab76a","sha1":"6751abd42863800222b93ffb19582d10dcd64fe1","sha256":"15ce5c1c9ba32dcc6ad17bb12d61ead8aafba652147c3c51d0e200a16a992d67","sha512":"d6db5159ca1da9b58fb838ceb44b8b2181ad28035db2cd1a457917ef3750c9b84e6ba4223e719049708514cb484aba4265c346af030f8fdd7702e9fd8352ec8b","ssdeep":"","tlshash":"2db02b104f1d86b9203241df60e3c3c88870206670054046640f04b41189dd30e81d80","first_seen":"2024-03-28T06:14:56Z","last_seen":"2026-07-26T06:31:51.641623Z","times_seen":3375,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":108,"dns":34,"connect":32,"send":0,"wait":82,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}