{"report_id":"7dd9641b-44d9-4703-813e-a8d07471dd99","version":6,"status":"done","tags":[],"date":"2025-11-04T13:56:53Z","url":{"schema":"http","addr":"jbgirllsgre.top/","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"final":{"url":{"schema":"https","addr":"jbgirllsgre.top/","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"title":"JBGIRLSGRE","dom":{"size":26540,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (387)","md5":"2adb5092308354f0ae44e59638ddaed1","sha1":"2a93e3cc2cf40ebf4267fc891aa77cdc8e305b1e","sha256":"3167ab4e99d4a2095a03e91bf5441a72b3587c680ea464f88ef76058477d08cd","sha512":"00365585fda8ca0c0180e2e3d62ac1a8425b69d7ca49c98d4f0a3c18dd69355503ae83c95f16fb7f36d3e00048915a3f4dddc7d346fa04c3e6c9b2845325a225","ssdeep":"384:GLdMq3mA6VoZhtIOSsgKZ+VDB3eigPnBaYGvXKZ+v:OMySzjL30Bojv","tlshash":"bac2877290cf693f120182d5e4603f9cc0ab55bdc7995c57f6e21c3b7a85eeaa47228c","dom_hash":"domhash9a1377451bd4da6e48f4a2ffa594b86b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"jbgirllsgre.top/","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":0,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-09T13:56:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"lszone.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"alljb.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"alljb.com.ua","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"alljb.com.ua","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"boobboob.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"xfap.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"teenset.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"i.imgur.com","ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2025-11-03T03:22:27.303829Z","alert_count":0,"request_count":26,"received_data":760976,"sent_data":11243,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"t1.gstatic.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T22:57:20Z","last_seen":"2025-11-03T19:43:22.466692Z","alert_count":0,"request_count":1,"received_data":1076,"sent_data":520,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lszone.cc","ip":{"addr":"104.21.96.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-14","domain_rank":1854876,"first_seen":"2023-09-29T21:46:36Z","last_seen":"2025-10-28T14:03:47.921923Z","alert_count":1,"request_count":1,"received_data":11572,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}]},{"fqdn":"alljb.com.ua","ip":{"addr":"45.95.168.70","port":443,"asn":211619,"as":"MAXKO d.o.o.","country":"Croatia","country_code":"HR"},"domain_registered":"2024-10-18","domain_rank":1634342,"first_seen":"2024-12-07T03:51:55.902751Z","last_seen":"2025-10-28T14:03:47.95313Z","alert_count":3,"request_count":1,"received_data":22356,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jbgirllsgre.top","ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2025-08-05","domain_rank":0,"first_seen":"2025-11-04T13:56:53.849664Z","last_seen":"2025-11-04T13:56:53.849664Z","alert_count":39,"request_count":13,"received_data":223953,"sent_data":7438,"comment":"","tags":null,"fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MyBB","description":"MyBB is a free and open-source forum software written in PHP.","website":"https://mybb.com","common_platform_enumeration":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","icon":"MyBB.png","categories":["Message boards"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"boobboob.top","ip":{"addr":"5.223.42.59","port":443,"asn":215859,"as":"Hetzner Online GmbH","country":"Singapore","country_code":"SG"},"domain_registered":"2022-11-16","domain_rank":775641,"first_seen":"2022-11-16T17:43:34Z","last_seen":"2025-10-28T14:03:47.884578Z","alert_count":1,"request_count":1,"received_data":5325,"sent_data":408,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"teenlist.net","ip":{"addr":"104.21.79.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-05-27","domain_rank":1669675,"first_seen":"2015-05-30T00:34:54Z","last_seen":"2025-10-28T14:03:48.705907Z","alert_count":0,"request_count":2,"received_data":1068,"sent_data":824,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"xfap.top","ip":{"addr":"172.67.131.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-17","domain_rank":2115272,"first_seen":"2025-05-28T09:21:49.942322Z","last_seen":"2025-10-28T14:03:48.453807Z","alert_count":1,"request_count":1,"received_data":56244,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tmf.al","ip":{"addr":"172.67.207.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":575091,"first_seen":"2024-05-02T11:30:01Z","last_seen":"2025-10-28T14:03:49.126362Z","alert_count":0,"request_count":1,"received_data":17481,"sent_data":401,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-02T22:13:19.243005Z","alert_count":0,"request_count":12,"received_data":10898,"sent_data":5466,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t3.gstatic.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:15:36Z","last_seen":"2025-11-04T06:53:35.520349Z","alert_count":0,"request_count":3,"received_data":3261,"sent_data":1560,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tubetiktok.cam","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-08-12","domain_rank":0,"first_seen":"2023-08-12T18:44:36Z","last_seen":"2025-11-01T17:48:03.904831Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":932,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t0.gstatic.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-06T20:22:05Z","last_seen":"2025-10-28T12:04:51.134531Z","alert_count":0,"request_count":1,"received_data":1214,"sent_data":521,"comment":"","tags":null,"fingerprints":null},{"fqdn":"t2.gstatic.com","ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2013-05-07T00:09:56Z","last_seen":"2025-11-04T12:53:54.603748Z","alert_count":0,"request_count":7,"received_data":8880,"sent_data":3645,"comment":"","tags":null,"fingerprints":null},{"fqdn":"teenset.top","ip":{"addr":"104.21.82.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-04-18","domain_rank":701491,"first_seen":"2024-04-18T05:48:13Z","last_seen":"2025-10-28T14:03:48.799701Z","alert_count":1,"request_count":1,"received_data":12274,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"teenset.al","ip":{"addr":"172.67.209.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":715908,"first_seen":"2024-10-27T17:10:04Z","last_seen":"2025-10-28T14:03:48.571695Z","alert_count":0,"request_count":1,"received_data":12791,"sent_data":403,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"jbteen.cc","ip":{"addr":"104.21.15.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-16","domain_rank":666854,"first_seen":"2021-11-21T19:45:26Z","last_seen":"2025-10-28T14:03:48.673912Z","alert_count":0,"request_count":1,"received_data":16971,"sent_data":404,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jbgirllsgre.top/","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8b7716e88c87439d9fc4503d105fec5","sha1":"2a38d1ebc4a48f9bdbae3c2641334aaf410551b5","sha256":"8c471f1dcc97c24896554d26eadf319bc7f2a93cabd248cb73b6dbf3df8cbf98","sha512":"b50d412fa2973464f990537b0f68879ae7fea1a2dc748e4c0964dbbc8994b2360b489c6a00d97e7478763f68ef144f4cb14d8f944ead8950bd7320c4d43b1776","ssdeep":"","tlshash":"264133e3648e2d35004d20a36c7d28c19e4b90c9ab1cac269f29b47d77818ed56b56aa","size":2308,"data":"","first_seen":"2025-11-04T13:57:13.436018Z","last_seen":"2025-11-04T13:57:13.436018Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/jscripts/general.js?ver=1827","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"373ad0e5af45e8cd17b064aaa7c2d465","sha1":"9e83f3daac4c6387937fa2a3e98dbe9cc1c9169e","sha256":"491afa838f1b1eef0454c529c8f6fcdcec59ea31110dda7430f85cc53fb82898","sha512":"0014001020da5ef12874c5727ce95d1163834414dbe201ea72f60423bde91e8e7d2d671fa18ec190d0573e3b76093a496f7662d5b81e0f804d42834dddffd98a","ssdeep":"384:7HrwCLFwqbPl88aLqh8cOrT6CIJ6X5jO1/zD:oqbPltaLqUXCJ0jOx","tlshash":"bb6262c8ff2c152b81be3069949f58c96c3c803188945cf7bc6855d4bae8a1e536fe78","size":15709,"data":"","first_seen":"2023-03-07T01:02:26Z","last_seen":"2026-03-31T10:03:00.030339Z","times_seen":953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e778a0599600893f6740e061f0db321","sha1":"a9f01d1beac63e231a419894462ddf00adcd86ae","sha256":"391dc11066c3b8e2f89bfe77f24d5ccb9f39c5ab3a499559caa7a4d5a8b175c6","sha512":"60da55c43f8b588bfa9c280f855c11935b06942db1ea1dace8e65dfb315d22cde302286d00ab6e5c4db011f0f37faead51987ed5b9a1fef5123fda6fafad5cc6","ssdeep":"","tlshash":"5ab0929862985b5a02f311986a9814a616708abe816c695b2a05b914a20d84462cae43","size":125,"data":"","first_seen":"2023-03-07T14:37:29Z","last_seen":"2026-03-30T23:26:46.807189Z","times_seen":399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/jscripts/jquery.js?ver=1823","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89475,"data":"","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-04-04T02:36:08.601639Z","times_seen":14628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0e774c6eac4073121eb55b9e21d3511","sha1":"5156ea2435d223d0519ddce05085a2510c7b1807","sha256":"45a342390daafbd778ec29ac08c0cd3273410c225c6c1101306700c811b530b5","sha512":"2fd9fdf983e2f651be2955965a0be96ad581a2544bfd5718d3959966bf6d6ed8a39bce6a3d076b735638bb24d1cfc5646f72ac151c295478abe2361e5298f4d9","ssdeep":"","tlshash":"45a012a1c08c0407823411120c002025202fc4780052de496cb159a050c4706036040a","size":77,"data":"","first_seen":"2023-03-07T01:02:26Z","last_seen":"2026-03-30T23:26:46.808397Z","times_seen":991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/jscripts/jquery.plugins.min.js?ver=1821","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf1f71e20e14765d6d5ea640aa4f7fc7","sha1":"d1f3a0e46dd50d3a4d1839cb821ad42802619def","sha256":"a3f1ec1a12c5ba59cf41f98406b4a296f7a54b8c4904de9a6f1fc2e4db19b149","sha512":"db3f8dba9327793a4d00b0e1266ef60d6f2424ab1235d673def9ee026be896aa10cb02e0b95f8b82bdf76ac49720662c84fa2b419026178c905c5a9c2f1bff0a","ssdeep":"384:HWwrEXSUb3GjSPqGorxn+viQRvuB6haZ7braU:HWmE/3G2hcraU","tlshash":"f662924fba7523a48aff2177a01f196521339db508c24858f1bd87d95d78c0492afb3e","size":14799,"data":"","first_seen":"2023-03-07T01:02:26Z","last_seen":"2026-03-31T10:03:00.042067Z","times_seen":1057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"i.imgur.com/KVKjoQY.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /KVKjoQY.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Nov 2024 03:23:23 GMT\r\netag: \"2d95dc632f2b4dc93c8e2a2a5c0f9f0d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD12-P2\r\nx-amz-cf-id: bWxjwLdWj5nqSvFQsP7MH0pAQbWRLDwHK4E3EfMd1DF9xZEGqyxlaQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 2346514\r\nx-served-by: cache-iad-kiad7000166-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 4370, 18\r\nx-timer: S1762264592.537466,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 15641\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 469x67, components 3","md5":"2d95dc632f2b4dc93c8e2a2a5c0f9f0d","sha1":"b48e2ff6e032c51626cf564cde43461871038d25","sha256":"99905cb5636883efa3186b57b6d4bb1cfaaa8a6302709900ab18b99a49bb71c2","sha512":"8edf8b03a326c01ad6f4c78e1b8ed4c44f8df22b76409469232155b210a5d53193bdcd6c695065a5810bc58b0fa4172e4197c3ee527e2fe4f917de9d102f06bc","ssdeep":"384:DEaXjlSg3aTCPomJ637W6r0+dmdxGWaZmtBftZDAnx:hSg3aTCPomKukZma","tlshash":"0562d043eb2260d3f38299f2c1d67d7b8467799bd869d50aad338d10ba1e2e13772580","first_seen":"2024-12-07T03:51:58.613666Z","last_seen":"2026-03-24T00:20:56.212719Z","times_seen":35,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":46,"dns":7,"connect":27,"send":0,"wait":32,"receive":8,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teenset.al/images/teenset.jpg","fqdn":"teenset.al","domain":"teenset.al","tld":"al"},"ip":{"addr":"172.67.209.87","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teenset.al","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 12 Oct 2025 14:26:30 GMT","end":"Sat, 10 Jan 2026 15:24:08 GMT"},"fingerprint":{"sha1":"42:F3:E5:FC:D9:62:34:5F:7E:AD:C3:FC:46:3B:F3:AB:D3:8C:EE:F4","sha256":"14:F5:33:F7:25:DB:C4:BA:B3:1C:71:FB:BD:8C:4E:9F:CE:C6:0B:8A:6E:54:3B:6E:59:3A:04:58:D5:2D:8A:8D"}}},"request":{"raw":"GET /images/teenset.jpg HTTP/1.1\r\nHost: teenset.al\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11728\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 22 Oct 2026 04:50:37 GMT\r\netag: \"2dd0-68906f71-108207a7;;;\"\r\nlast-modified: Mon, 04 Aug 2025 08:29:37 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1155921\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8tnio8fpe6FIncQ4518OiQcLSNXPuZSRjWaRGoEvvuINnZe5ptXvUUB5jz%2FI80JTYxXX3Vsqtqgb2bCijB7o5kQPKLO%2Fs7Rk\"}]}\r\ncf-ray: 99949d86192a569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11728,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 468x60, components 3","md5":"3d94860e67d4331a0c1ff0c47af86cb9","sha1":"e301130ea9850d1bf58db227764a982c8cc531c8","sha256":"b643146b5965f28337737b9f9ff89e46bd3a45d784986272e2ea98be5b38b498","sha512":"cfbff19ad64c5b4e608f0aa6bd08f1c728780b5d1a72f5b8176f32453a8689df1012edc024f71fe25541ebf5d0e22a3fcf5c3a057b1c35c07997c2dcddb7873a","ssdeep":"192:ZgaUHvDKsxwCNDVBdMSbt3yEB5If7cy7B2pWsaFfVxRJK45NQIVWyhRz1madrD:Z9UHvDKgNDpMEXPII7psVLlrQIVWyhJv","tlshash":"8632c0517f4a3f3ae694123288fa975f26019931d4a1001bd6b57f2da53cb1ea742b40","first_seen":"2024-10-13T21:03:38.71791Z","last_seen":"2026-03-29T09:18:00.694237Z","times_seen":70,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":40,"dns":1,"connect":5,"send":0,"wait":12,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=nonubook.gr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=nonubook.gr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonubook.gr\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 331\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:38:25 GMT\r\nexpires: Tue, 04 Nov 2025 14:08:25 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1088\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":239,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":177,"dns":1,"connect":17,"send":0,"wait":29,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuplace.bz\u0026size=16","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuplace.bz\u0026size=16 HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://nonuplace.bz/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 276\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 04:00:50 GMT\r\nexpires: Tue, 11 Nov 2025 04:00:50 GMT\r\ncache-control: public, max-age=604800\r\nage: 35743\r\nlast-modified: Sun, 18 Apr 2021 13:47:15 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":276,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"5486bcc01ef9998d63a012540ea4a421","sha1":"826ca2df8f353a18da2c2be57114fed0e7bd5d6a","sha256":"fd96a86fafca1861913d5184536c41927d9930a9e85de82fc8382f1a6d1d96f2","sha512":"fca4568bb59003f09edf877dd5f4276d1d4279685e22d5c35413a8178b6965e12f82ac174b0d953dfb929ac532aec02a560207d33c227553ca5e130cbd865323","ssdeep":"","tlshash":"00d0ebe322eb6cb2b281013806b310ec5cb2293f005a00a4190f93b3430be5800a0580","first_seen":"2025-06-07T18:44:30.574097Z","last_seen":"2026-03-24T00:37:41.616406Z","times_seen":47,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":206,"dns":2,"connect":16,"send":0,"wait":15,"receive":0,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/ABlPCOp.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /ABlPCOp.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Fri, 01 Mar 2024 07:07:17 GMT\r\netag: \"b291cd2f79864dcd0db66a2da47c1822\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: paWQJdREk4xVImXPk2GP_1WYBJsK4IsYjN4b2VEAYS0AWuIzA2jAsQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 1892635\r\nx-served-by: cache-iad-kcgs7200087-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 3516, 632\r\nx-timer: S1762264592.501959,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 33408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 419 x 60, 8-bit/color RGB, non-interlaced","md5":"b291cd2f79864dcd0db66a2da47c1822","sha1":"69e8dcf7640735b3e0486f9705420a24928d6757","sha256":"2c25aedd71cf5770fb73d8ed4e2222026e2b0ec72693a0c368d8f478f1f7af5e","sha512":"22b8a206244835bef4c30715cb02c1ee87ba8c745de9b33ad33c00f18dfabaa62150dfffd3e051733f9367af4da2cdd71024821c9eb3920996714983986a8865","ssdeep":"768:AG8DuhNsSKDvzzkzuL9hCXeDbjCGto1MPmKcNBDz48/+aG9:4uoSKDvEzuhKeTCGto1WmXd4/","tlshash":"b2e2e1c19ac2de863edaad3308ee242df885920dbb0545a5b51153003cbd4ba7d9ad8b","first_seen":"2024-05-18T19:22:18Z","last_seen":"2026-03-30T23:26:46.790906Z","times_seen":64,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":42,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/dQWWUmi.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /dQWWUmi.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Jun 2025 01:57:05 GMT\r\netag: \"d6428b61a04ac7d7dd6bac8ef36fcb9e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 436RCZ5Z4uszpjw4oWdanMxgVYvsriDQPyGOvW8nqZtSj9e0DnnaZg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 695116\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nx-served-by: cache-iad-kcgs7200149-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 3446, 0\r\nx-timer: S1762264592.501532,VS0,VE2\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 17307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17307,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 468x60, components 3","md5":"d6428b61a04ac7d7dd6bac8ef36fcb9e","sha1":"d487c7f1c62501343e597e03500ce9bd9e35a90f","sha256":"39ae6ef9daf0f8b3c24ead255060b9a789dc04d26c645f22e83fbd54684c6d12","sha512":"9e36c19a5af0838e0c5745ed3b4ac194bd99480b6d08bf481d3753b41ecdbcaa1ce7c5fba8890cb82f50b7eab7ad1dc830f365b251cfb92d6bb9aa29e6fc467a","ssdeep":"384:yFz+chdL5pZAB/ZGoTordfDTKhdZ2DxI9vYKyckalLl4njcxi1I:kzHhdL5HMBBTaDTKbZ2DudGctl4njcoq","tlshash":"b972cf64e5d3309203192fba7c46355e194f40adc32fd9987baa8dfc784ec4caa240bd","first_seen":"2025-06-30T17:31:05.836548Z","last_seen":"2026-03-30T23:26:46.795159Z","times_seen":33,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/hiKoRTd.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /hiKoRTd.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 08 Jul 2023 07:33:19 GMT\r\netag: \"83ff04233567e2a37b30b2aa85b2231a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: ORD56-P6\r\nx-amz-cf-id: tjsRAcFjey2oXWL_ljoTZa7n8kTd4fQhvIuQC3X3FbY6FmYOhJnQjA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 2346513\r\nx-served-by: cache-iad-kcgs7200134-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 7049, 7\r\nx-timer: S1762264592.514337,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 35607\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":35607,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 465x67, components 3","md5":"83ff04233567e2a37b30b2aa85b2231a","sha1":"80a3bbeee38084f2407b44916edefb62a9fbfdba","sha256":"4cf8687c0c4390248241309c9d734a408a04701e4115ca1f422c09fc0b87817b","sha512":"3d9dd8cda9123c17739361c9d25514b5563c7c6373be8bf9b3fde44f01b11db8689d0eb57f9e3f3a2216dffd5e452955dc432fdcdd397a20cc3ce46e48ae6018","ssdeep":"768:2EtGuNkjyHGD4YXP6F9vPgjSYBpuV6Gi6lOgVNNjB:ntGu2WmDWwBQ0G3lOgvNjB","tlshash":"6ef2f10bf71085dcdfb38b30bb2a493b906f1d931c5e5541a789a346e3ae9c99d52338","first_seen":"2024-01-25T18:06:31Z","last_seen":"2026-03-30T23:26:46.782143Z","times_seen":62,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/R8dhg6P.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /R8dhg6P.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 05 Dec 2023 10:07:44 GMT\r\netag: \"2fe014cfe22de8cb339f4cdb99de553a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD12-P2\r\nx-amz-cf-id: UZ8i2cKs5XqfmCX9y5O1ezMs0aT9LpSVbXhpnD-etcC7kkFD23r1gQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 1141225\r\nx-served-by: cache-iad-kiad7000060-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 15254, 5\r\nx-timer: S1762264592.514262,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 107754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":107754,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 935x268, components 3","md5":"2fe014cfe22de8cb339f4cdb99de553a","sha1":"7dc256d3dfddbb7ea831d310cd22619c4b28d5fb","sha256":"9b577686bac32d0da88f68c90e4eadeddcadef75422efe2caa8795b96ed5e08c","sha512":"d73df0d36f21591aea3768083f4ffbe0910e78030e29bef27b4d438073f6c8c0be20e79f4762b51d1b16020c02085d6f80848a884fbac00dced51892c6f311cd","ssdeep":"3072:1reLv4mdVflT7aMFUrsKH/5/sfq7CzCyy91ql:1rAv4mzflT2M5g/ZsfqmrwY","tlshash":"45b30186c1e8737acdd5d6bac04de9dd3e1aea58b3bd4c0c30166f07f61664714a078a","first_seen":"2024-01-25T18:06:31Z","last_seen":"2026-03-30T23:26:46.796163Z","times_seen":61,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lszone.cc/images/banner/lsbanner.jpg","fqdn":"lszone.cc","domain":"lszone.cc","tld":"cc"},"ip":{"addr":"104.21.96.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lszone.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 15:51:13 GMT","end":"Thu, 18 Dec 2025 16:49:52 GMT"},"fingerprint":{"sha1":"9D:20:CB:64:AD:EE:B2:2D:84:D4:F6:0D:FF:80:96:65:FA:C6:B5:14","sha256":"BE:4B:A9:4D:2C:A3:79:50:65:33:34:41:F9:8E:87:FA:4B:90:BF:59:A8:41:10:B3:0C:22:A1:8B:D4:93:DE:27"}}},"request":{"raw":"GET /images/banner/lsbanner.jpg HTTP/1.1\r\nHost: lszone.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10500\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 02 Aug 2026 08:37:38 GMT\r\netag: \"2904-66ceb11e-f80b789;;;\"\r\nlast-modified: Wed, 28 Aug 2024 05:09:50 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 3312070\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umM28KH3p%2BqEA6OmKVhHoq8wdrElhOwXtOlrY7A0tzFBZY1SKeVh9ugFSE3Fhtsee3out%2FXe3ryzlFJWlVI%2Fjq9rRg7OiTQ9Kg%3D%3D\"}]}\r\ncf-ray: 99949d856f4ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10500,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=164, yresolution=172, resolutionunit=2], baseline, precision 8, 468x60, components 3","md5":"bdfc9ef5bcbf86c31d30d0d7c0143996","sha1":"b98d9b469945e4ad785e3d0fd74edc9e0d64e325","sha256":"b5113d5e1963b004c668e0228604d98ada91c88922fc17c1ef0cbb859ee40a4d","sha512":"af799b0b59eb245115084e06ea17cbc954a0b916a31e5955b190502e53554ecdce9965ebfd27bb3ce7920ced596aaa7e13b236fc518f4994d2b7d0618f92522f","ssdeep":"192:xECdxYlpL3GFIpzb1cOeLIwHqTEtkLE5UVKI9eXAQG3lFh0TOTNJEkdY8:xECdxSKGpmI2qT3EyQ+ew17NJEkW8","tlshash":"bb229f7d744213c2e566fd775dfd6b9c55cf4b53fe08229eb9ee04430f604824a9a08a","first_seen":"2024-09-28T07:53:36.640977Z","last_seen":"2026-03-24T00:20:56.183744Z","times_seen":32,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":26,"dns":1,"connect":4,"send":0,"wait":11,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"lszone.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/mij13lc.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /mij13lc.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Jun 2025 23:23:00 GMT\r\netag: \"b325c32468dc8074a48b6c3c72ff2d86\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: THkga9INwfo0zrynh9S95BmK51nsyM9OwYJPGphbXX840tadi_s-vg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 1840692\r\nx-served-by: cache-iad-kcgs7200099-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 4281, 8\r\nx-timer: S1762264592.515084,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 37077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 60, 8-bit/color RGB, non-interlaced","md5":"b325c32468dc8074a48b6c3c72ff2d86","sha1":"f0a3fc812b58c7b71555fbd3c8505145f4849e5d","sha256":"7005526c06b8b3d3614e3137880f7dd6c94c3748f90e4cf3dcbb6cfcec1d0310","sha512":"b62adf7c571f24c643629c93a2f8fce4653a107b8a83bf8954438176f03ce91b91eb48f252640c6e17509242094ebabf692bec83b035fe76ef95198fecaba744","ssdeep":"768:s0XT6KfhQ8nG60JIXiuku4r0ir+PlGgVH0jE0oTeN:s0XT/hRsIYrYv0rmeN","tlshash":"2df2f10bb8acfcf5e122ae15d9e4c950c836882603778cc0dff89e2956e5714db0e5a6","first_seen":"2025-08-25T10:46:21.63938Z","last_seen":"2026-03-30T23:26:46.791431Z","times_seen":36,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alljb.com.ua/ajbanner.gif","fqdn":"alljb.com.ua","domain":"alljb.com.ua","tld":"com.ua"},"ip":{"addr":"45.95.168.70","port":443,"asn":211619,"as":"MAXKO d.o.o.","country":"Croatia","country_code":"HR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"alljb.com.ua","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 01 Oct 2025 14:13:21 GMT","end":"Tue, 30 Dec 2025 14:13:20 GMT"},"fingerprint":{"sha1":"93:80:B9:4E:32:A5:B9:27:A8:F5:78:50:FE:02:11:32:CC:08:3A:83","sha256":"2F:DF:BE:69:BB:C4:AD:A2:80:23:44:5B:58:A1:AA:76:18:C1:A5:4C:72:E3:4F:0F:D4:90:C8:08:44:8D:62:7D"}}},"request":{"raw":"GET /ajbanner.gif HTTP/1.1\r\nHost: alljb.com.ua\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 11 Nov 2025 13:56:31 GMT\r\ncontent-type: image/gif\r\nlast-modified: Thu, 30 Jan 2025 09:44:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21909\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21909,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 468 x 60","md5":"abe793e5abe3aece127afd3efc0ff861","sha1":"e0afddd075edf7473c9e5eddd47bcba9715b8b2e","sha256":"2d983025e98f9d772e7b6edfb7db76c93d0cd480d8d1242993c995a7c41d9574","sha512":"1b098a0d6eea3a8ce67330328354b9f1de495b75ee5f08a05d1a6a104c2fe3e8a01823ac506e8806618ec14c9d679f1c55d6a118f5090d89914dc80aa0a193d2","ssdeep":"384:wVkH8lNqkB1xttlghwfe8YP82xoZiruTdzvPgh1MOY0xSPdfjknJqnH:7xw1xbldGl84Miru5qxQPdInc","tlshash":"99a2d0e3261011c0f18cf2d878abca16ebe63ef76020bb5765866db12583234f7417ca","first_seen":"2025-02-11T03:16:42.481013Z","last_seen":"2026-03-30T23:26:46.800305Z","times_seen":37,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":66,"connect":48,"send":0,"wait":37,"receive":37,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"alljb.com.ua","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"alljb.com.ua","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"alljb.com.ua","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tubetiktok.cam/wp-content/uploads/2022/09/logoleakeds.jpg","fqdn":"tubetiktok.cam","domain":"tubetiktok.cam","tld":"cam"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.213Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2022/09/logoleakeds.jpg HTTP/1.1\r\nHost: tubetiktok.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=nonuville.gr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=nonuville.gr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuville.gr\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 332\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:38:25 GMT\r\nexpires: Tue, 04 Nov 2025 14:08:25 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1087\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":305,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://art-models.gr\u0026size=16","fqdn":"t0.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:46 GMT","end":"Mon, 05 Jan 2026 08:37:45 GMT"},"fingerprint":{"sha1":"2C:0B:CF:F3:2B:F7:F0:76:D4:B1:1F:DB:E2:21:58:B5:EC:B7:6A:FF","sha256":"DE:F5:87:79:4F:56:FB:34:64:B9:21:C9:8F:92:27:D5:ED:C7:A3:88:BD:53:84:65:7D:EF:99:09:59:84:48:BE"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://art-models.gr\u0026size=16 HTTP/1.1\r\nHost: t0.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://art-models.gr/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 400\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Oct 2025 12:30:08 GMT\r\nexpires: Fri, 07 Nov 2025 12:30:08 GMT\r\ncache-control: public, max-age=604800\r\nage: 350785\r\nlast-modified: Wed, 29 Nov 2017 12:34:19 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":400,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b507d8982ca15bc87357b51df1c89ffc","sha1":"5359672ce7a1a36998cb043490eabbc84acc0b25","sha256":"d1c2d1392193223c93802de85928356f31e06d084a1568fe2b4a65b8d402be2c","sha512":"483f6d5bb0eecd93b2a9101b64faea65204c89c38d827b2e9bbe79bbdde8edf04de457dbe9152d05c820dfb6d5649273faefb09678c062c9b711bd8338c01bdf","ssdeep":"","tlshash":"99e0f1e67134d6e0e99012338e3ade729c6812a01ba25ae49d50347d5c1298120e01aa","first_seen":"2025-06-07T18:44:30.576422Z","last_seen":"2026-03-24T00:37:41.588105Z","times_seen":47,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/FtRMJJL.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /FtRMJJL.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Jun 2025 02:00:43 GMT\r\netag: \"b2b49c6d44670c2f8b0ba33cff3dc9bf\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 5g2TFHE_8e75qG3KbdZFEb6osBbLaPU-P2cVf4We8XJseMTFAhdwFw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 1136018\r\nx-served-by: cache-iad-kcgs7200140-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 7928, 5\r\nx-timer: S1762264592.501300,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 13317\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":13317,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 469x67, components 3","md5":"b2b49c6d44670c2f8b0ba33cff3dc9bf","sha1":"43f55ebdd24714e8fe9b69746f9c2d6d4bda4d71","sha256":"0d4107fbfec4ad0cc590e18f92b24328fba8f35b062e17679ac6d21664f3e30f","sha512":"6b9da62b353a3bc4caea83f7cfe2dd36198d94db283e46a17d1900aa21055d59a2e579329381d19ae0feb17745e36d0616776c7edcf5fa6ee8beb6af6c2d313b","ssdeep":"384:y7gEiLNWXCuMcKAV0GuHlezyF5GtGbn6ABFVU:ivGWc20byC7bd7VU","tlshash":"7152bf0bd829024249797afb8cd350be4f73e608f368370b64ad9869e254ba8409c77c","first_seen":"2025-08-01T13:39:12.899085Z","last_seen":"2026-03-24T00:20:56.201837Z","times_seen":20,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":16,"dns":11,"connect":13,"send":0,"wait":15,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/l1Rxlci.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /l1Rxlci.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 13 Sep 2023 07:55:25 GMT\r\netag: \"ddfefe5b83954a203bb9344888cf31fe\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: MIA3-C4\r\nx-amz-cf-id: TuDYbdwA9TxkAYB_5G_iP1QS72lK9OYtqxtoRdVfADJkAeyda3Jw3A==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 2771400\r\nx-served-by: cache-iad-kcgs7200161-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 15692, 9\r\nx-timer: S1762264592.539116,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 39984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":39984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 68, 8-bit/color RGB, non-interlaced","md5":"ddfefe5b83954a203bb9344888cf31fe","sha1":"98c075a5c158d98c30e8b5f6b51ef5e1daedafad","sha256":"7b531b286b50015d92da2212a2eb800e6ae70e877ef0e3b44b4112233cea5e7c","sha512":"c499a924ef50469244c9beee3c278279e3cdc038b1af9b65283a344b37d27a0ff4c45c6bcd412c43fc4f56ff207983289c2a3d60a373544c25369992b003cf6b","ssdeep":"768:PEO+5pwuxqvDAO+bGrAWB58vtNUfj3+SnnqJtwhh3fo12L49:PEO+5hqb+b+AWBoANnnrhhAALU","tlshash":"1c03f2bb01ba9785d17c1833696d148014263d02e7a34f9bb884edd0bd09bbd74dce2e","first_seen":"2024-01-25T18:06:31Z","last_seen":"2026-03-26T07:03:06.335434Z","times_seen":55,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":46,"dns":4,"connect":26,"send":0,"wait":31,"receive":9,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/images/collapse.png","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /images/collapse.png HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 369\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Sat, 03 Jan 2026 13:56:31 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6af553ac5e86504743b02f220405abdd","sha1":"c07e8d586443c0ace4d91eea0d46476845b6baec","sha256":"408e40949e493302b9fd79a82e68c13509ba6370f04be5088ccd7503a4d1f94c","sha512":"ad6b02d1d9bbfd12b1eea6e8e59f5dd29229cefb66f92cef7e6a64f9839fb10273d226b8935bce9d44cabf08ee68c207670917b04322f9d3c8fa11df9ae291f2","ssdeep":"","tlshash":"b2e0f8d6a1522829dc94ae828906d008bb52272802899f4a8a0690a60039fc806b56fa","first_seen":"2023-05-08T13:43:42Z","last_seen":"2026-03-31T10:03:00.001015Z","times_seen":347,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/vCRBShb.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /vCRBShb.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 18 Jun 2025 23:40:21 GMT\r\netag: \"28569fbceb1195c3ed660e3f61d9305d\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: s0kGFPcvtmicCBI-2W4uwGXvuP-vNMzKzdy-KurU9cA85D0k6OEBnQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 681307\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nx-served-by: cache-iad-kcgs7200109-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 5576, 0\r\nx-timer: S1762264592.501643,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 20112\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20112,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 465x67, components 3","md5":"28569fbceb1195c3ed660e3f61d9305d","sha1":"8a644427ab123e32531a32fd5f845ba503767bc6","sha256":"fdce13921e6d668e447c0fa45349ff427a44a8bc4298cc092971625f96c1fda6","sha512":"6f5ed698561fb09c0aa4371cdb9c186c6bd625d297f645129c5b37526ee7bf678dc5838c46cbf4c0e1dda35e743646c8cf85fba85dadf0e68a7df9a1c5221366","ssdeep":"384:yPi7NODE718/2/hbNu2G8RQQiYnfjElj7+ggwQ2WkTa9UOjEbx:uigAWe/h5u58RBTfYl3+vCbx","tlshash":"2692d015e7a28780bbf788fd146c448be17903c7ea290b80977e8cf4ebdd51a1663430","first_seen":"2025-06-30T17:31:05.792894Z","last_seen":"2026-03-22T19:42:52.896264Z","times_seen":17,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonubook.gr\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonubook.gr\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://nonubook.gr/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 239\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 03:04:05 GMT\r\nexpires: Tue, 11 Nov 2025 03:04:05 GMT\r\ncache-control: public, max-age=604800\r\nage: 39148\r\nlast-modified: Wed, 30 Nov 2022 04:04:02 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"2dd22dbc1976568b9db743d2c1e81f3e","sha1":"6ee119b0b351d720d4ccc88f084a84f22bb0dc18","sha256":"44cf871e88d6e51bf2a97efe810eedcebbf0b0435ff1b1c2f51da331c254df73","sha512":"12b4dd764f5d5e17b3b1cd6e07713a96330cbb365cffbfdb65fb20a71178111aae0ddff87fa4c25a124cd5a1a319d4fad9910fe0a4d86d2e34292427351da80b","ssdeep":"","tlshash":"9dd097f692e45ca7c44e02a2c0690201fb300e09a082880a1703e02a676ab2330fed01","first_seen":"2025-06-07T18:44:30.608404Z","last_seen":"2026-03-24T00:37:41.600452Z","times_seen":47,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":91,"dns":1,"connect":28,"send":0,"wait":16,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://modelsblog.gr\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://modelsblog.gr\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://modelsblog.gr/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Nov 2025 22:51:47 GMT\r\nexpires: Mon, 10 Nov 2025 22:51:47 GMT\r\ncache-control: public, max-age=604800\r\nage: 54286\r\nlast-modified: Tue, 18 Jun 2019 21:21:56 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"fb5a29b57ae3e8de13d2e03cd3fc7210","sha1":"c145ef33526d61b4d1bd700aef671365cb418613","sha256":"7178d82a34bef99f152bb52d30913b266748dd4e3f674d7ecd3887bece46b710","sha512":"39705d364e277f12da67f2e130f8c97b35839236a5bbfe776f60eee09418f5f4b50b844dc17e0299edd834e7f876eb54c4ba500aea5b5bfdbbe2b13915925287","ssdeep":"","tlshash":"ddd0e7b9c7092850cecf82516dcfa7549f6505dc4342118c0750cc03892504d8491fc1","first_seen":"2025-06-07T18:44:30.581915Z","last_seen":"2026-03-24T00:37:41.587386Z","times_seen":47,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://useneteens.bz\u0026size=16","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://useneteens.bz\u0026size=16 HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://useneteens.bz/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 302\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:56:33 GMT\r\nexpires: Tue, 11 Nov 2025 13:56:33 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 22 Jan 2020 22:30:53 GMT\r\ncontent-type: image/png\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"c13483efb559a63cc8f8a15cf69f3163","sha1":"cb52ec54695abfdf79766670a8c8a313e366834e","sha256":"76645693eb163afe4bde56c6f7c66909484c4c39498847f386f7bbc744ebf162","sha512":"f81145ae54734cc0bd2d904101ef84e906f95f3892cf2d57dbf22c85ac737b818a3d0fbd07fb4deacb5c77c55ca742cb7b4e408cd04424591ca691764de45353","ssdeep":"","tlshash":"a5e0b7d2b0000c2ec18400b10c431cdfdc104078c0a107d315f5815b303d70c4178fc7","first_seen":"2025-06-07T18:44:30.57535Z","last_seen":"2026-03-24T00:37:41.561596Z","times_seen":47,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":98,"dns":5,"connect":32,"send":0,"wait":26,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/c0EIfww.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /c0EIfww.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 18 Jun 2025 23:39:17 GMT\r\netag: \"6035f8408eec02e0ad11481c1b4c9957\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: jJvyZ1jE0w-E9wQlaiD4PPSbbz3Ib5UWpfQop3g3IXetd-BRKDTJyQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 2343073\r\nx-served-by: cache-iad-kcgs7200106-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 3647, 50\r\nx-timer: S1762264592.535898,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 23220\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":23220,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 468x67, components 3","md5":"6035f8408eec02e0ad11481c1b4c9957","sha1":"550e87c35e42e9b8b96c3800808a3a4ddb1cfb42","sha256":"acbc8f6c513e7e3aa6a83300e3eafe27bab56c4d2bf4b271497f23b5c3944a94","sha512":"fcd87629e40ef773cca1137bb26424c47a72a182ffa8d9054f766be499429b80837a9e22e38288184da40055be7753b6f68a9130300d23d2cd1757a6cbcb36f9","ssdeep":"384:yeEs+PiBPpoC/NmpbC90MnpSOMJ/19tXBQLPA87LiDFaTGppA9t5Wi7qYsWMWLzn:fh+PNC/UglpSx19tXBAj7Lf8A9t5dsrw","tlshash":"9da2e100df19a6a6186701ffa0e229bedffe5d82e72202125e311863b5f5d9790d0c8f","first_seen":"2025-06-30T17:31:05.790388Z","last_seen":"2026-03-30T23:26:46.787542Z","times_seen":44,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":47,"dns":4,"connect":26,"send":0,"wait":33,"receive":9,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/vsHGN1u.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /vsHGN1u.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 08 Jul 2023 07:33:44 GMT\r\netag: \"4ae28f742341777efda80cb4d11bdb96\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 1DIkcgp36vtaiWmI_hatnbQxCLO16J_InPnzg8vrnMSTmJIvAwdedg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 1145902\r\nx-served-by: cache-iad-kjyo7100156-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 2386, 7\r\nx-timer: S1762264592.514273,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 35935\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35935,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 465x67, components 3","md5":"4ae28f742341777efda80cb4d11bdb96","sha1":"5e3abf48bfe4fb33103f096618aef17d673579a4","sha256":"829ce004de3ebdfb4db9546b8d3059441a2e115bb4b939a8a0f1509355d47531","sha512":"8cb3524f2ce90880e618414b028a8eda4f7c9322222d3a88b6b90d2d48f1209dda0d6883aacb00555169f913947df7bfc22a4c71431ee0ccd8f1bc33cc880874","ssdeep":"768:iba/Hd5NQRJGy6N/MTMWQj98s5iwdNxph/8w2wZKY97L4Hrbr7:D/95KJRT+98sbpJ8wJZKY97L43r7","tlshash":"10f2f15b5bdf9ea1f2a6c431c07c9c20bb62577461a50c526535cb2becac8f2190cf9a","first_seen":"2024-01-25T18:06:31Z","last_seen":"2026-03-30T23:26:46.803226Z","times_seen":59,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=nonuplace.bz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=nonuplace.bz HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuplace.bz\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 332\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:38:25 GMT\r\nexpires: Tue, 04 Nov 2025 14:08:25 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1087\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":276,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=nonublog.gr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=nonublog.gr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonublog.gr\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 331\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:36:08 GMT\r\nexpires: Tue, 04 Nov 2025 14:06:08 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1224\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/jscripts/jquery.js?ver=1823","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /jscripts/jquery.js?ver=1823 HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Thu, 04 Dec 2025 13:56:31 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89475,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-04-04T02:36:08.601639Z","times_seen":14628,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/jscripts/general.js?ver=1827","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /jscripts/general.js?ver=1827 HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Thu, 04 Dec 2025 13:56:31 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15709,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (322)","md5":"373ad0e5af45e8cd17b064aaa7c2d465","sha1":"9e83f3daac4c6387937fa2a3e98dbe9cc1c9169e","sha256":"491afa838f1b1eef0454c529c8f6fcdcec59ea31110dda7430f85cc53fb82898","sha512":"0014001020da5ef12874c5727ce95d1163834414dbe201ea72f60423bde91e8e7d2d671fa18ec190d0573e3b76093a496f7662d5b81e0f804d42834dddffd98a","ssdeep":"384:7HrwCLFwqbPl88aLqh8cOrT6CIJ6X5jO1/zD:oqbPltaLqUXCJ0jOx","tlshash":"bb6262c8ff2c152b81be3069949f58c96c3c803188945cf7bc6855d4bae8a1e536fe78","first_seen":"2023-03-07T01:02:26Z","last_seen":"2026-03-31T10:03:00.030339Z","times_seen":953,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/cop2K5Y.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /cop2K5Y.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Jun 2025 01:47:10 GMT\r\netag: \"743d49adb1ca39c018b951184a985ea5\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: G4bjU3mLMMW8nWdVYiPT9IzphlrJPFi_jLGhG_ZKvNewX1GWr8Tf-w==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 1892635\r\nx-served-by: cache-iad-kcgs7200087-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 12865, 7\r\nx-timer: S1762264592.501960,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 19756\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19756,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 472x68, components 3","md5":"743d49adb1ca39c018b951184a985ea5","sha1":"4ca5e9ea4cf537e070f59dfb00d32e3dc186a947","sha256":"7cd4ddd52740ac1a526968ff5810dec7aea362ce35fd585eb9878a7c3c68e4ab","sha512":"9b169d0ff507c579d9acf230286005e9352acfea5860fb3ecc5392c6bfc8f277ecae945ad5da3f6c6e6c8af79f9d7ac77dc33f6a03eae7d78e6bc134c61851f9","ssdeep":"384:yxjZb3ssuxHe7JHu9/91ZllGmxQQg7xLgwO6PALLNQx1Q16xk8gT3:IJsHpe7A91llDxQQMxLgOmNQbQXV3","tlshash":"8192e108d6938e964f156f378a442954f51be116f0307a1f368ae3d273c90423b6e72d","first_seen":"2025-06-30T17:31:05.78022Z","last_seen":"2026-03-30T23:26:46.781598Z","times_seen":39,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":24,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tubetiktok.cam/wp-content/uploads/2022/09/logoleakeds.jpg","fqdn":"tubetiktok.cam","domain":"tubetiktok.cam","tld":"cam"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.525Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2022/09/logoleakeds.jpg HTTP/1.1\r\nHost: tubetiktok.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/images/colors/leaf_header.png","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /images/colors/leaf_header.png HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/css.php?stylesheet%5B0%5D=1\u0026stylesheet%5B1%5D=7\u0026stylesheet%5B2%5D=13\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 171\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Sat, 03 Jan 2026 13:56:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":171,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 100, 8-bit/color RGB, non-interlaced","md5":"ee94cc700d6b712c8089f737bfb9aee8","sha1":"848ccb6a1a507cd9f87e7c9b4ee05e3824677a33","sha256":"e8f17545896f773117d81dda94a75edfd0899855c1540b8047f6d1fbb51c2c2e","sha512":"19dec63904ef3864f96f3c1105c74e438347d90cfe38caadd9bb4d1eb50fbbd45d7006525a0b6da7e39650a6d2204bf80df747f8eb77cfdc49bf6c82cff417b6","ssdeep":"","tlshash":"8bc080e1a5171da8bd345356c6304581dd7a73141b65400d040c86bd3da6190c0c5095","first_seen":"2024-09-28T07:53:36.649959Z","last_seen":"2025-11-27T07:44:45.892114Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=modelsblog.gr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=modelsblog.gr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://modelsblog.gr\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 333\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:36:08 GMT\r\nexpires: Tue, 04 Nov 2025 14:06:08 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1225\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":288,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":184,"dns":1,"connect":14,"send":0,"wait":32,"receive":1,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/images/logo.png","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 31705\r\nlast-modified: Sat, 31 Aug 2024 02:17:57 GMT\r\nexpires: Sat, 03 Jan 2026 13:56:31 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 67, 8-bit/color RGB, non-interlaced","md5":"6524d6ff31db2372b2a34cf4279fa226","sha1":"5b2ed39fbf79c15905a0ca95fff6ebc3f7ea990c","sha256":"58313914d25c2375169cd808a21c86118db788fa4388c3a49085ff0d5a0dd1b8","sha512":"597352901ea846e28cfba0891c7f685920254caaaed685cfd51746ed7b9ef623043896d2957ff2ac0e0a8fa356143e95eda4798bcbf6f2b653b3c7bfdb4b7b44","ssdeep":"768:HtZO7Y0N2szBxIaJdvZ2eRGy0AjoSxfUNZnBoUP26:NIYNsznI0FRQAxxf89BoUP26","tlshash":"5be2f1495f9866b9cab325cfb93905209df64ce8b1812d260dfd47132faa30c3e4e45e","first_seen":"2025-11-04T13:57:13.38642Z","last_seen":"2025-11-27T07:44:45.866121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/Io3dXmu.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /Io3dXmu.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 02 Dec 2024 13:01:31 GMT\r\netag: \"06c8c3c6bc3ef3834e3d61211ad39932\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: JFK50-P6\r\nx-amz-cf-id: LBUXd8iBJVr5hz2ZsbURh2r_mEnB2IcFo5QqKJXP6IcFBWgjVqdDrQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 3634618\r\nx-served-by: cache-iad-kcgs7200136-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 14848, 12\r\nx-timer: S1762264592.535727,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 14307\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14307,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 468x67, components 3","md5":"06c8c3c6bc3ef3834e3d61211ad39932","sha1":"6249e1133bd3d220f74c06102cd190ad3d37b8fa","sha256":"1d18eeef84af6c85a3d35e8ee16e1433ed86d5ae5aef95430ce693cabd5e0f6f","sha512":"9afe023deff11b521030d80c32b6fd381b1263a78598314417ef0249ed1cc03104876682810f978849e5877ba66e7f94c1e3f4b8e7f6d7b5b1f3b76d147eae91","ssdeep":"384:DaixzWcKJERC7CKYR6kAlTxVs1CaEAidgfz/EWO2MuKFNI1/:mikhG4sokAhLsP+dgLmeyNIB","tlshash":"5b52c074e3ca805ed62aa33dde80493cd6531adbf2307761d66a500ec4d5383a72de7a","first_seen":"2024-12-15T03:07:00.83269Z","last_seen":"2026-03-30T23:26:46.798437Z","times_seen":41,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":48,"dns":3,"connect":16,"send":0,"wait":33,"receive":8,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"boobboob.top/images/artreiting.gif","fqdn":"boobboob.top","domain":"boobboob.top","tld":"top"},"ip":{"addr":"5.223.42.59","port":443,"asn":215859,"as":"Hetzner Online GmbH","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.boobboob.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 30 Sep 2025 07:36:23 GMT","end":"Mon, 29 Dec 2025 07:36:22 GMT"},"fingerprint":{"sha1":"6F:6D:2B:6B:49:C0:C5:0F:92:92:2E:43:5C:F6:F6:0D:7D:CB:44:C1","sha256":"03:34:97:B6:60:40:8F:3F:D4:E6:A8:DB:24:E4:D4:B0:0B:3F:1A:54:38:19:93:D7:FE:E5:52:5D:EA:19:53:E4"}}},"request":{"raw":"GET /images/artreiting.gif HTTP/1.1\r\nHost: boobboob.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 04 Nov 2025 13:56:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 5115\r\nConnection: keep-alive\r\nLast-Modified: Mon, 01 Aug 2022 09:40:25 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5115,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 88 x 31","md5":"00dbe11ffaca70171108410d51c9735d","sha1":"def64757d9e3fe196a82cc98747d0c151e1522f8","sha256":"9aba8d3b1dbcfb2e6940ed78e689ec4a7e34c89952280501477f159f1085194f","sha512":"41c0c7dc27420c273fee19e802b602a6d3ef45a2e2702c6d2defeeb7175548fcd5df207b3615d23d37fa8fd8e7fdd47a1d2083f7c263006e8b9714b67043c50b","ssdeep":"96:acP879p36EhQhLM5c7OcElzna3j6exWPB9ZZhS8JuoT33g7EP:acCtxsqksljWjNxufZZhS8kYP","tlshash":"bcb17b6219110157c8a6e6b4ff09f2c4ec2aa884f37b760c42630d9cc92bae4cdd1366","first_seen":"2023-07-25T01:19:55Z","last_seen":"2026-02-09T01:55:55.80261Z","times_seen":50,"resource_available":false,"data":null}},"time_used":1210,"timings":{"blocked":481,"dns":0,"connect":240,"send":0,"wait":240,"receive":0,"ssl":246},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"boobboob.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"teenlist.net/button.php?u=ALLMYBEAUTYS","fqdn":"teenlist.net","domain":"teenlist.net","tld":"net"},"ip":{"addr":"104.21.79.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teenlist.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Nov 2025 04:12:44 GMT","end":"Mon, 02 Feb 2026 05:09:17 GMT"},"fingerprint":{"sha1":"5D:04:22:52:FB:25:86:28:D1:07:8C:45:46:57:90:7E:33:A1:6C:50","sha256":"7F:68:DC:35:18:D3:4E:D3:60:5A:CF:5D:4F:99:C5:CE:89:77:C4:82:4F:40:1A:1C:6E:8C:6A:BE:C1:92:59:3A"}}},"request":{"raw":"GET /button.php?u=ALLMYBEAUTYS HTTP/1.1\r\nHost: teenlist.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHgJ3XBzerAKxUotMMI4VrbnfkN2Yb%2F8vWB8dvDEy8Nlel2dgxD85NIL0CVCTrZa%2BCe6cDUu%2FzKZ25Pd3FXqOUoy8dS87NxnN94%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 99949d857d80568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":430,"timings":{"blocked":34,"dns":0,"connect":1,"send":0,"wait":356,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/images/tcat.png","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /images/tcat.png HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/css.php?stylesheet%5B0%5D=1\u0026stylesheet%5B1%5D=7\u0026stylesheet%5B2%5D=13\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 131\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Sat, 03 Jan 2026 13:56:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":131,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 60, 8-bit/color RGB, non-interlaced","md5":"10b96a318e186e39860a5945a9071b92","sha1":"daa068efc07bb97ff0a2af218aedebbb28c9f1bb","sha256":"91697e7d6cc941b2bff9f05520c0c22b95d460a655e65b480452ce60da209cdf","sha512":"7b1f7e9ee0a9157cf0edebfd597a9f1a7bf42bb1062c63b420a86234799b2db8bc707d4d570d4b5dab3c192347543f35c15767528eb3b390e3b03150e843c33c","ssdeep":"","tlshash":"11c02bf277614836ec150f770fd50124f9b0464072f52620004f80313c71104d4441c2","first_seen":"2023-05-10T14:20:13Z","last_seen":"2026-03-30T23:26:46.792779Z","times_seen":448,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/mGVKbsp.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /mGVKbsp.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Wed, 18 Jun 2025 23:00:28 GMT\r\netag: \"1b5350301650b8b41244e3eee6a3223f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: eApyo8WzlTZqILiPSA_f7vMYo_NXr3W7aX5jSQKLdu77mhgA6el4Yw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1141562\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nx-served-by: cache-iad-kiad7000168-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 6173, 0\r\nx-timer: S1762264592.501187,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 69203\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 68, 8-bit/color RGB, non-interlaced","md5":"1b5350301650b8b41244e3eee6a3223f","sha1":"a4743d1e78aa9870b037008ee9ce670101056dfd","sha256":"63dee89c07540eaccf2037ab1deb06857c630368d76c28214892a3ee290344a1","sha512":"76d01cc7e663e04013dc7197a5aaa0989ae3c6ff1a16f1f537b0a3384434eb8737641cacb86203fd6c7581a5cb998b2cd12c8e62c69f64c92cd9da4387713e4a","ssdeep":"1536:ppz4NlHpjB/ngssXcAEtZyULQCVDpbspuBpUvlARwtGq7C5+xYc:ppzgLjFDAEnLGpuBpUSwtzfxYc","tlshash":"01631227c873bb7593388406141dc0fec9811693d6ef18481debbaa65e859cdfc3b19a","first_seen":"2025-08-01T13:39:12.907856Z","last_seen":"2026-03-30T23:26:46.783187Z","times_seen":50,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":42,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=fashion-models.gr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=fashion-models.gr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://fashion-models.gr\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 337\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:36:08 GMT\r\nexpires: Tue, 04 Nov 2025 14:06:08 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1224\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":911,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":127,"dns":1,"connect":29,"send":0,"wait":28,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/favicon.ico","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:33 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"a34ac19f4afae63adc5d2f7bc970c07f","sha1":"a82190fc530c265aa40a045c21770d967f4767b8","sha256":"d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3","sha512":"42e53d96e5961e95b7a984d9c9778a1d3bd8ee0c87b8b3b515fa31f67c2d073c8565afc2f4b962c43668c4efa1e478da9bb0ecffa79479c7e880731bc4c55765","ssdeep":"","tlshash":"b0e0e75f41473347402252907dc110d1d505236b797161fd3d85b4ab501dc3dc99f7dc","first_seen":"2023-03-07T01:02:33Z","last_seen":"2026-04-04T03:27:35.862696Z","times_seen":143709,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://fashion-models.gr\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://fashion-models.gr\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://fashion-models.gr/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 911\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 30 Oct 2025 03:39:20 GMT\r\nexpires: Thu, 06 Nov 2025 03:39:20 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 29 Nov 2017 12:34:19 GMT\r\ncontent-type: image/png\r\nage: 469033\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":911,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"6b730a91c0a831bbd799f91354a126a6","sha1":"3882dd5363582a37caf556334e13e665df9a430e","sha256":"ab53add221978d405cc0339b754118ca18bf1b86b1addcf5168b06f2f3949688","sha512":"7392a96ac0f8e988a6ee0c6e88d96882fdb8ee749597e24b2bb60394a995ba8769eb9e2c64703b00b0159fd026a7d0ca89252069c76fa2898e7770545af0237a","ssdeep":"","tlshash":"d411bbe7abd136e495d280485077e9e2b58586cc614432406505c4a90307be64b929ce","first_seen":"2025-06-07T18:44:30.601019Z","last_seen":"2026-03-24T00:37:41.567094Z","times_seen":47,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":99,"dns":0,"connect":14,"send":0,"wait":23,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://candydolls.bz\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://candydolls.bz\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://candydolls.bz/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 287\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 08:06:47 GMT\r\nexpires: Tue, 11 Nov 2025 08:06:47 GMT\r\ncache-control: public, max-age=604800\r\nage: 20986\r\nlast-modified: Thu, 30 Aug 2018 12:49:40 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e208aec3d23de690a74cffe23fddd383","sha1":"24cccf8ec4395be61aceb818053fb7b872066d63","sha256":"4f89783991b10a3d3c054ac97cdce70c02b30bb355c105c75aa1473a3c37dbd4","sha512":"ef1aade79932ca43bb09d457aa72983dabc6717042a2c3215c734f8f23a9d29fe5ed9ecdf9d8c16eb806c3a6d22fbce819cef267cd76ba6e2f0cd981d297c029","ssdeep":"","tlshash":"63d0e7f03bd77cb4345433f72305b0947c61475d424403602b51dd507550964dcd4d3a","first_seen":"2025-06-07T18:44:30.572716Z","last_seen":"2026-03-24T00:37:41.60132Z","times_seen":47,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":91,"dns":2,"connect":15,"send":0,"wait":15,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/c85tVhe.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /c85tVhe.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 19 Oct 2023 12:09:32 GMT\r\netag: \"892b0fc35965dacaefe2a70bb36eba02\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD12-P2\r\nx-amz-cf-id: agEtacKUEV582hDjknELzrrzGIShG7Zc4NNkxmYd4iTSeYbpsnIvXQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 3055779\r\nx-served-by: cache-iad-kjyo7100149-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 4267, 47\r\nx-timer: S1762264592.514204,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 4478\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4478,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 468x60, components 3","md5":"892b0fc35965dacaefe2a70bb36eba02","sha1":"996aba7a03aa368df0d2f2450928775a7ac22a29","sha256":"d5920183bc8fbf027feb15ad8bccc860aa892fa8468f8bb0e51f8d9c4d16e21b","sha512":"5343d97c51fdce7e48accd25640443ffd390da07232f4ef4d9b35439c1cf028f9e9e13f1583ca538cdbdf26b138966116bd35d481981ef53c5d5aaf01ac272ce","ssdeep":"96:vSlakwY8ZQwVvGq/rwihtilZ0fYsFu1MIEYtRi1KmK3+FiV4:85wDZQwVvR/EihIlagR1MIEweK53Kii","tlshash":"12917d61fa610c049f0bcbb4b81205a5d2802516fc98c77f6f934af864b698f6f1f161","first_seen":"2023-11-08T23:56:55Z","last_seen":"2026-03-26T07:03:06.33603Z","times_seen":106,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/6JBOnuM.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /6JBOnuM.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 08 Jul 2023 07:33:35 GMT\r\netag: \"ea95a712ec23bd146cc81b36c3e895ee\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: BNA50-P2\r\nx-amz-cf-id: xf83HHTRgCHbNrDoKekpZI5FMVPKjLN4doIpP1VCZUz5nYvzCAZrmQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 2844273\r\nx-served-by: cache-iad-kjyo7100045-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 16019, 793\r\nx-timer: S1762264592.515280,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 36559\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":36559,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 465x67, components 3","md5":"ea95a712ec23bd146cc81b36c3e895ee","sha1":"cc15a4d92a86f51e8183be166e5d7755527afc70","sha256":"3231cc81a6088e2f95684d36b85131a4a1d62caa5cace18f05234d66bd94c442","sha512":"44cfe7c33f107a7a9542f3b5fb8e2b2b60ab790d891ac06b5ee6222061b14831e5b3b547da0bd23b4d21506af32d5dfe7b406060dccb9225115cf77b54460e65","ssdeep":"768:JF3BuPg3ig/JYcL+c7SuvppMaQYSSc2ax0i0I3sTQhlh0vL:7xkYJZ7SW7MaQ7Sc21i0C2QrEL","tlshash":"4bf2f15b65d1da86e0192abeb8c12b601f68b652980de03827516e3febb0d122de7744","first_seen":"2024-01-25T18:06:31Z","last_seen":"2026-03-30T23:26:46.792299Z","times_seen":61,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/jscripts/jquery.plugins.min.js?ver=1821","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /jscripts/jquery.plugins.min.js?ver=1821 HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Thu, 04 Dec 2025 13:56:31 GMT\r\ncache-control: max-age=2592000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14799,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14798)","md5":"cf1f71e20e14765d6d5ea640aa4f7fc7","sha1":"d1f3a0e46dd50d3a4d1839cb821ad42802619def","sha256":"a3f1ec1a12c5ba59cf41f98406b4a296f7a54b8c4904de9a6f1fc2e4db19b149","sha512":"db3f8dba9327793a4d00b0e1266ef60d6f2424ab1235d673def9ee026be896aa10cb02e0b95f8b82bdf76ac49720662c84fa2b419026178c905c5a9c2f1bff0a","ssdeep":"384:HWwrEXSUb3GjSPqGorxn+viQRvuB6haZ7braU:HWmE/3G2hcraU","tlshash":"f662924fba7523a48aff2177a01f196521339db508c24858f1bd87d95d78c0492afb3e","first_seen":"2023-03-07T01:02:26Z","last_seen":"2026-03-31T10:03:00.042067Z","times_seen":1057,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/css.php?stylesheet%5B0%5D=1\u0026stylesheet%5B1%5D=7\u0026stylesheet%5B2%5D=13","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /css.php?stylesheet%5B0%5D=1\u0026stylesheet%5B1%5D=7\u0026stylesheet%5B2%5D=13 HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: EXPIRED\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":34967,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"074924de6ae131b996c25f01608c3fe7","sha1":"b47bc088823f6ec0ee96c0ed1761cd84af1d1f56","sha256":"859cfd80067757b1801c181c178e467c610fa398a68efead8e471b186a099250","sha512":"72fd62a28138cb52c3f13329db9fd7e6d2040d9601f3d6a1e60fc739910885cc4521f6d0ffd7c0b7f7a313f3339f2b41d17d49f8d038c7d48e856338eb540fc9","ssdeep":"768:Sv449UEsD0StaM7xZ6h6tLSGOX3xLnSbcAmSH6BXsNX8:Svh9UEsCMrLSGOxLnSH6BXsNX8","tlshash":"9bf26e7b34051989321fe0dafe15dbd9362f0192ba1e1e25b4ac7d7ca3858e01537eac","first_seen":"2024-09-28T07:53:36.665495Z","last_seen":"2025-11-27T07:44:45.884458Z","times_seen":3,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/EvnYwsD.jpg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /EvnYwsD.jpg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Fri, 08 Nov 2024 01:07:27 GMT\r\netag: \"b24d16f31e76aa13c5139bfcda64d30f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD61-P5\r\nx-amz-cf-id: 03GE4RlZRr4uMD3pHT40AgnyajQ_FGs4CVyew98qeUUkIIMZ9Vl-fQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 684239\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nx-served-by: cache-iad-kjyo7100061-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 8596, 0\r\nx-timer: S1762264592.535885,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 12712\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 419x60, components 3","md5":"b24d16f31e76aa13c5139bfcda64d30f","sha1":"4cc2eb5537f731e53b180c0fbfbc0ff2a87861a6","sha256":"d6790b04fecc237d71f8ac610a4b6732ce3acdded576c773abe6d22f781b9a07","sha512":"7669687d7a3454131e11622fb7e1024ac4f90d6063c257d883f098e3a78ee5269d0d3e33753c58be54c7808c7280d011a68d4938eb513e04f758ae39f22acdcd","ssdeep":"384:D88zzlq1h4Yrl0q0gvf0f2vzoYZ/b/Am80afj:QuqT4YWq0gvf5v06b/d80a7","tlshash":"a442bf01fd765a9b32061cf5913bd002c4353894d0e7f91dab821da7d88e7a4f1937a1","first_seen":"2024-12-07T03:51:58.595034Z","last_seen":"2026-03-30T23:26:46.7798Z","times_seen":41,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":46,"dns":7,"connect":26,"send":0,"wait":34,"receive":7,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/Fh5fn6i.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /Fh5fn6i.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Tue, 12 Sep 2023 09:32:44 GMT\r\netag: \"42c2874d05f458269df0bb77abb8ab68\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD12-P2\r\nx-amz-cf-id: F5GocqqNZzPx5Kaipr51vr25o58zdgroddtarxTDwcL5sX-166tU4A==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 2786292\r\nx-served-by: cache-iad-kiad7000089-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 11710, 45\r\nx-timer: S1762264592.514818,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 34660\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 67, 8-bit/color RGB, non-interlaced","md5":"42c2874d05f458269df0bb77abb8ab68","sha1":"8c66e8823f4b8d9ee75d7be4fea89c8f278142d3","sha256":"43191aae26e454e3111fd73a4b9835d28da2d9a0dbcd12fda0f135cb61c64002","sha512":"96dd26a6a2f6d521cf2ff7b316060cc1f33a79baa2d8d4ce0392fe2b34efb7b266f2e660b3ea3e2c6b7b2976fa14494d340eef334ca2694020aa6178999469eb","ssdeep":"768:SKz3eA9pXqXH3QIxS2yJSd2zmPm3TL8P3o4oDXno605YpUh:Sc3eAdI9FyJWDPmf8nO35AJ","tlshash":"3cf2e10717c139392d755fc4b318a11e9b677f6b9b22c3daf7e402a0218a6844e895ef","first_seen":"2024-01-25T18:06:31Z","last_seen":"2026-03-30T23:26:46.795654Z","times_seen":55,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xfap.top/wp-content/uploads/xfap468.gif","fqdn":"xfap.top","domain":"xfap.top","tld":"top"},"ip":{"addr":"172.67.131.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xfap.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Oct 2025 16:22:39 GMT","end":"Fri, 09 Jan 2026 17:18:41 GMT"},"fingerprint":{"sha1":"23:3B:C6:F5:FC:CB:1B:99:DD:EA:3F:95:D5:BC:2A:DD:5D:D1:E9:0F","sha256":"59:92:DE:FE:84:6B:30:39:FD:A3:1A:E9:BE:51:D3:3D:B6:3B:29:92:C8:B2:E6:83:A6:AA:0C:6C:DA:FF:47:2D"}}},"request":{"raw":"GET /wp-content/uploads/xfap468.gif HTTP/1.1\r\nHost: xfap.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 55180\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 29 Aug 2026 04:50:09 GMT\r\netag: \"d78c-65f7c56f-155935;;;\"\r\nlast-modified: Mon, 18 Mar 2024 04:39:11 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5821349\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGzuQ%2FdO7jaCfnR5xZwlUMCgWov6FWUICPEIQDNbvUarYpk8Ok%2Fe5e5U2Ua6bxQKmapYJn91I6H1whdRSgkJZVYvAvHVcg%3D%3D\"}]}\r\ncf-ray: 99949d80db575685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55180,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 468 x 58","md5":"b26ba0f0086d4a2e0ccee60e49f33e73","sha1":"e1b71ea5f8f15b312a8f0a7f3c41f39417017306","sha256":"615a59b941f48b83ba97f2fd94812f0aa4ec439cfab2328ef481c7e5cbe9bab7","sha512":"65c45208dc8e30f9e3956817e6ded6df37f60bb711aea8373e7d1309ce7b463363103d77b5964703e5b52b54da9c173624fba5a85e815c7e2d027b318d603fc0","ssdeep":"1536:d6l0Tjr5gsYbUhSqsutLLOyj/6iJGC2Nx6i:d158bJ5uNR+5","tlshash":"fb430250380ad09b5dbe2fd58d6203c3b6f75c59a4229229fe68bbdd3530d73d9988c0","first_seen":"2025-01-04T06:11:18.504745Z","last_seen":"2026-03-22T19:42:52.877449Z","times_seen":45,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":14,"receive":3,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"xfap.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/images/headerlinks_sprite.png","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /images/headerlinks_sprite.png HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/css.php?stylesheet%5B0%5D=1\u0026stylesheet%5B1%5D=7\u0026stylesheet%5B2%5D=13\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2342\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Sat, 03 Jan 2026 13:56:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2342,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 196, 8-bit colormap, non-interlaced","md5":"e38f7f29cf3f740d7dc3651cb82098ec","sha1":"65787e91831d3707a9ec747ab272c1fb5d52b2d8","sha256":"bc8ea31d4d1a30effac6bed60a41d1ec64a7cd42a711c694a103e42da7aa4c0a","sha512":"160481f72d35abdbc7114bb1164915891335978ad8f60529af7e03082cbd29b833e761f97422838e05161ccbffc8b9760573ae27a3f35f367342f98b1abceacb","ssdeep":"","tlshash":"cb414bbb7671dd3c78f04437a0e7f598ee505e2c59948d762898b1909d3008294b1c88","first_seen":"2023-05-10T14:20:13Z","last_seen":"2026-03-30T23:26:46.788934Z","times_seen":501,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/D3C3ceZ.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /D3C3ceZ.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Jun 2025 01:52:56 GMT\r\netag: \"41027710572438d3c761ba9681b2a553\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 4HUwFzxMhe724a-QVhUxlEo7_ccYRYPKXXydNTxL-vY9fO0fd561TA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 2789243\r\nx-served-by: cache-iad-kjyo7100145-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 11498, 9\r\nx-timer: S1762264592.514609,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 15026\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15026,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 472x68, components 3","md5":"41027710572438d3c761ba9681b2a553","sha1":"89e5a72bf693ea3fc197a227999ed55e2370499b","sha256":"f610560d43442597a57d0c5f3e98859f5bf940490e080125ac58c06d063cd057","sha512":"d079e4cfe7135f0799c4b7d5a88c1dc6f538c65d6cc0225b039cd5c76a50be5fdd6aef37e9a8f8578b402f56968449a95d776ab50e036aa262110e7bfa49d255","ssdeep":"384:yxuhB26ssHagVAqlRbjBMNpnnxahWoQ02YhcvMF9NQMzAVLTDLTJ:I+YLM3b9OpnxatQ021MR3m","tlshash":"6b62bffdca1523dac43ccbf2d47b10eb14581459f19a24a03c06d535fabe6e63926f16","first_seen":"2025-06-30T17:31:05.785982Z","last_seen":"2026-03-30T23:26:46.798908Z","times_seen":39,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbteen.cc/images/banner/vf.jpg","fqdn":"jbteen.cc","domain":"jbteen.cc","tld":"cc"},"ip":{"addr":"104.21.15.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jbteen.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Oct 2025 23:09:24 GMT","end":"Sat, 03 Jan 2026 00:08:04 GMT"},"fingerprint":{"sha1":"0F:37:C7:DB:49:F7:60:94:C6:DD:E4:B4:73:A6:2D:59:9F:FB:56:51","sha256":"3D:EA:63:CD:16:6A:6B:BE:C1:6B:AF:66:4E:96:30:E7:88:AC:74:D5:12:DD:64:4B:37:C4:18:B0:DB:44:1C:FC"}}},"request":{"raw":"GET /images/banner/vf.jpg HTTP/1.1\r\nHost: jbteen.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-length: 0\r\nlocation: http://tmf.al/images/banner/vf.jpg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OhybdqutW3YJLqzakscimDyc3rp4w%2FQdEuUXFVxMouyquWkNPDCQkRfe0Df6isLAwGcYFgRZz2h%2Bgip%2BYzkFmdxULsr2mmxdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99949d85ddbe32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16421,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=nnmodels.gr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=nnmodels.gr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nnmodels.gr\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 331\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:38:25 GMT\r\nexpires: Tue, 04 Nov 2025 14:08:25 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1087\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":290,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":135,"dns":1,"connect":28,"send":0,"wait":28,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=nonuboard.gr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=nonuboard.gr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuboard.gr\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 332\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:38:25 GMT\r\nexpires: Tue, 04 Nov 2025 14:08:25 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1087\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":245,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuville.gr\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuville.gr\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://nonuville.gr/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 305\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 03 Nov 2025 20:46:30 GMT\r\nexpires: Mon, 10 Nov 2025 20:46:30 GMT\r\ncache-control: public, max-age=604800\r\nage: 61803\r\nlast-modified: Tue, 18 Jun 2019 22:21:02 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"61f98b6b56a49a3f9a9ec4228516e0e9","sha1":"7f8cb239a7397863b71101f41810a4f6bb219885","sha256":"0f04b546901797ff773e43a56867d14d7e2472d402fee9dae6e570a23597cab6","sha512":"5c4b49ab59c085869949fb917c6e86f90a81dc974cec4da786cfababc4e3ebbe243cbaa66d216c287c125fe6f29880af87b4de43ede0a323c0c7ac5412fc5cf8","ssdeep":"","tlshash":"3fe07dfe56635c2994a919249cadb791a4795110a24c437503cc816856475680134e86","first_seen":"2025-06-07T18:44:30.577502Z","last_seen":"2026-03-24T00:37:41.537431Z","times_seen":47,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":169,"dns":1,"connect":14,"send":0,"wait":15,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/juEvBkF.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /juEvBkF.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 18 Jun 2025 23:20:11 GMT\r\netag: \"8c5bad72d202f13aa411c4ff510bc0d1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: px_8w24UTmqLkHhusgek6t54q3cWh71wRgZ_yGiQndwAEjwJAGzdnQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 1140988\r\nx-served-by: cache-iad-kjyo7100060-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 2516, 7\r\nx-timer: S1762264592.514599,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 17763\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17763,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 468x67, components 3","md5":"8c5bad72d202f13aa411c4ff510bc0d1","sha1":"84f6372c3aed16cf98b905253845627ce440f3b6","sha256":"505a5359886067ba86f331ac8238f3d4d527db17f9be381b87e42d46e10077bf","sha512":"74aafa87c51163341efda7a3b2c403b51f95ca610f5bd49f00ab1781b02afba4eef509739ec22972d4af211be5288b52b1c650169d56d977504367b4f3451a80","ssdeep":"384:ye/fgmM7aCbN5fnGri+UVLfiBhpRGEBX2mVPM2HSFRRQvZsZ7:f/fg/bbDiivfiBhDGoX2+HyF7MZG7","tlshash":"cc82d174c02a27d3a34c5abb38ec524403ea1a15f94e2d957fc512708ecceba6d53b65","first_seen":"2025-06-30T17:31:05.761424Z","last_seen":"2026-03-30T23:26:46.805444Z","times_seen":42,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=useneteens.bz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=useneteens.bz HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://useneteens.bz\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 333\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:38:25 GMT\r\nexpires: Tue, 04 Nov 2025 14:08:25 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1088\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":302,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":179,"dns":1,"connect":28,"send":0,"wait":28,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/LPd9Uzm.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /LPd9Uzm.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 18 Jun 2025 23:41:46 GMT\r\netag: \"69817e98b74b828de76cafbe39613165\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: ySqXccDUQA6y4jriZzA6RlGTOPDfRKhKEcYn2KHLPHjaRLu9NULUkw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 692958\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nx-served-by: cache-iad-kcgs7200037-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 330, 0\r\nx-timer: S1762264592.501602,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 13176\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 468x60, components 3","md5":"69817e98b74b828de76cafbe39613165","sha1":"813461e96276e8e4b841e242c845b7555d130213","sha256":"50449cfb35aa333bdc62806b57369608882b3b2957e630ad09b191d02a530aca","sha512":"4f3a00c1ad51b6f7289b81c6ad79088f8dc0d46ad5d55c9ae9d867fe1ee4ec1ecfc520d56a00d2a253bde63918288902a7662bc1dd342bbaf96f00270d0c2ef7","ssdeep":"384:yFBwUXdgcJ57DE+Cv2ZCd/iB8sLksudhGqMMMYv:kuUXyu8+C+Id/63LksYGrMMs","tlshash":"8842b058f86010d0ad6b73f524739c7634ec5c85f8e563ad852203e4a8b9743b4e4ae7","first_seen":"2025-06-30T17:31:05.800274Z","last_seen":"2026-03-30T23:26:46.793288Z","times_seen":37,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teenset.top/images/teenset.jpg","fqdn":"teenset.top","domain":"teenset.top","tld":"top"},"ip":{"addr":"104.21.82.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teenset.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 05:20:30 GMT","end":"Tue, 30 Dec 2025 06:17:57 GMT"},"fingerprint":{"sha1":"54:28:A0:5F:D2:2D:22:54:A0:46:98:62:88:F7:0E:4C:D1:13:92:E5","sha256":"C5:D7:8E:6A:3D:16:6C:CA:94:C4:5E:D8:AB:6A:DD:D6:41:09:45:99:FA:CE:1E:63:57:C8:E6:71:EF:4D:21:59"}}},"request":{"raw":"GET /images/teenset.jpg HTTP/1.1\r\nHost: teenset.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-length: 0\r\nlocation: http://teenset.al/images/teenset.jpg\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKUfC6w%2FtubuSeEfkZkodFo0QctIDH714jcIsZrC8NaPRf6wGuzLgnZCO7VXiNzZ%2FTz30eH50YcWR3trZY6K2EJcVNC2CSZJmPZg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99949d80df9a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11728,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":13,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"teenset.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/images/colors/leaf_thead.png","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /images/colors/leaf_thead.png HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/css.php?stylesheet%5B0%5D=1\u0026stylesheet%5B1%5D=7\u0026stylesheet%5B2%5D=13\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 123\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Sat, 03 Jan 2026 13:56:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]}],"data":{"size":123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 40, 8-bit/color RGB, non-interlaced","md5":"ecd53771083ac67a67b21dc475ff8a77","sha1":"c259d513435d1d5f60edd175a9923b54dfd84bbb","sha256":"db574ee9694afc225ccf45b5864ad3cf3ff66b128c1648684a2f09ee025ab4ca","sha512":"1f27157d68a567acbf20449ca7da9a7e4c55b993a8d0fe57e7ad066cde051a8c8084c28fd357cfc081b67391990cabebe1019be90dadc7d83f75aecaede8f3b2","ssdeep":"","tlshash":"a0b09bd976606c6dc8f2573540890691e47548981e155100055ad45676355aca2987c5","first_seen":"2024-09-28T07:53:36.652997Z","last_seen":"2025-11-27T07:44:45.85737Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://models-me.bz\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://models-me.bz\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://models-me.bz/wp-content/1uuploads/2018/06/favicon-32x32.png\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 695\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 00:31:22 GMT\r\nexpires: Tue, 11 Nov 2025 00:31:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 48311\r\nlast-modified: Sat, 03 Nov 2018 05:51:55 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":695,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"ea61cd46fdfd4aa342c992126d055279","sha1":"a05dbb9c9e9f6cd2665acd5fd0b294c4277ba40c","sha256":"d05c6a69b4c06737dc4d161468b0e1c5a90defd66dd032897bdc81547debb0a5","sha512":"c18813e60008ba2873405b80cc897bf0ba395dd84764ccd90a15bf7aff044c7bd6331fc1a26ffc66b4e323cadbd1bdd74ca78b7d83bf5d20449f7921269bbd9f","ssdeep":"","tlshash":"020144c632d0ac38e7de013d4b7a9810685516a2479122afebd8065f8138a4cb9e4fa2","first_seen":"2025-06-07T18:44:30.605169Z","last_seen":"2026-03-24T00:37:41.609617Z","times_seen":47,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":83,"dns":3,"connect":14,"send":0,"wait":16,"receive":1,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/keXm4Tq.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /keXm4Tq.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Jun 2025 01:50:16 GMT\r\netag: \"aa82702378a753335b1f2d70f0ddc107\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 8XgR56BOZr3vok_WfSqNu-6frFgV42M-BO6oXjINEugtZDYjE5vmRQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 692958\r\nx-served-by: cache-iad-kcgs7200061-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 4914, 6\r\nx-timer: S1762264592.514817,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 16782\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":16782,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 468x60, components 3","md5":"aa82702378a753335b1f2d70f0ddc107","sha1":"eaaf4ccb6de4fd673ea80fa6ef7396ee0c146129","sha256":"89ba1af07265b61e0a4f94a76b8458276c85daa29dc1bad2b03a28ddab2074eb","sha512":"fcf9512d64972606c2a5d34194a8ca7a756f52bdd71cee4cc31b3ee452c40323bcca1dea8790111118ae0ce17c373053c992ff0551192a18884c863d1eede91b","ssdeep":"384:yF8/YYG3iy6LMFCNAvnRz0yIEzJwWZO6ZhdwR9K0+QCHJEFGZiyVD:k8wYn3MoERz0yHzXdAoga+8iCD","tlshash":"5c72bf0adf1785bd25616872e40e60039e7a87c7f2288b96cd7f0557c48f298ba06e35","first_seen":"2025-06-30T17:31:05.798931Z","last_seen":"2026-03-30T23:26:46.804905Z","times_seen":38,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/yVu4OQM.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /yVu4OQM.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Sat, 28 Sep 2024 10:12:28 GMT\r\netag: \"c4858f0f9a6af6a0cecae1247ef26cab\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 2PZNa-QwefsUtCtNO9CbgxCgABMepl5t9PnFbFNgUmQxNpw5XXXuVQ==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 2347917\r\nx-served-by: cache-iad-kiad7000166-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 16095, 8\r\nx-timer: S1762264592.514224,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 38809\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":38809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 60, 8-bit/color RGB, non-interlaced","md5":"c4858f0f9a6af6a0cecae1247ef26cab","sha1":"45586968a1dfc8439a426111140703097857e146","sha256":"12261938be6f8ced977a10a31a557eecadbd834d84a228d540d4cfb07c4afa54","sha512":"909c5bce2f766ae05adef51704de1dc5672859f43371682cda875687f9e3a871150db8d3e8081aea68b399b9c2f1e80d197ce96e2f10f16dc997992e306d6531","ssdeep":"768:FCeBQ5Xs2t1+S0iPfGzAkYg+IXyyiuQtajjA9ivDwAyxC:FzB4sIw4+AdgoOQtajOivEAiC","tlshash":"4403f1dcd8a8edc5f996fe3f66ee89f161305c40426bd1898c30f1a11aaf8da1f4d505","first_seen":"2024-10-13T21:03:38.662559Z","last_seen":"2026-02-22T19:00:02.028138Z","times_seen":45,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/images/forum_icon_sprite.png","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET /images/forum_icon_sprite.png HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/css.php?stylesheet%5B0%5D=1\u0026stylesheet%5B1%5D=7\u0026stylesheet%5B2%5D=13\r\nCookie: mybb[lastvisit]=1762264591; mybb[lastactive]=1762264591; sid=c5a12dd1fda33d335ab3868f4da5e2d2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 1130\r\nlast-modified: Wed, 01 Nov 2023 22:00:00 GMT\r\nexpires: Sat, 03 Jan 2026 13:56:32 GMT\r\ncache-control: max-age=5184000\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: STALE\r\nx-server-powered-by: Engintron\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1130,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 30 x 120, 8-bit colormap, non-interlaced","md5":"212f6e3895ee44bf54b31cf39a162611","sha1":"7d1f15044536b4f243495c47b03b2334b5493b4f","sha256":"b95e7d7fb4d9efd1e305194cd5ec83f0b16a02baad62b355c66f1af8688a528b","sha512":"7c968518495f4b58c53f29a58bc0151ce5d37500769a1c7f838c39b56613eae5ba36a4f3f6fbc059fa117578b098411b56837319d772e61af97c76d4de9d55a9","ssdeep":"","tlshash":"f021b97b4b9164208d8c7bfc691374124e7a999d3846757fb1af2630041d5bb5409150","first_seen":"2023-05-08T13:43:42Z","last_seen":"2026-03-30T23:26:46.789831Z","times_seen":313,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tmf.al/images/banner/vf.jpg","fqdn":"tmf.al","domain":"tmf.al","tld":"al"},"ip":{"addr":"172.67.207.58","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tmf.al","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Sep 2025 06:39:52 GMT","end":"Mon, 15 Dec 2025 07:35:59 GMT"},"fingerprint":{"sha1":"F2:C1:F1:03:BC:C3:70:16:C8:F7:21:F1:9C:39:33:D8:62:7F:F4:CC","sha256":"3C:67:A5:70:5F:9F:6B:D8:73:82:60:53:72:B4:9A:EB:43:25:B2:9F:49:07:20:2A:17:3E:CB:8F:26:EA:1F:2E"}}},"request":{"raw":"GET /images/banner/vf.jpg HTTP/1.1\r\nHost: tmf.al\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16421\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 03 Oct 2026 13:45:02 GMT\r\netag: \"4025-68916fd6-c817e7f;;;\"\r\nlast-modified: Tue, 05 Aug 2025 02:43:34 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nx-xss-protection: 1;mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-powered-by: WPTangTocOLS\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1080788\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=loAVEVXQRdYFeL113SyBwVyPvxPBs49RwvLqD%2BF1ypimuAzTvIHcOyYyvw3pDou6DKXaLzfD76XzaFtIKwk4nF6t7%2FM%3D\"}]}\r\ncf-ray: 99949d869eca56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 467x61, components 3","md5":"9243fb6463b1e81ee45359ec0e05715e","sha1":"682fc00dd66aff1a4b9c811158c1f9874e0998bb","sha256":"48204dd236cb576a89f9ecf3a3752070d79214efb1c7c5f8b074a69119969558","sha512":"d93783816f5c2a34786e710d9b30bd0861ebe30625e998cab2ef4116045ebc4bed1eb9e1f8fa7389d059a128a3f3d5a62ac43974440cb7973347ce8d8f0b5100","ssdeep":"384:bPkxTh+PTRnFL7/FjlrIsgOPxCtjnwQWMf6kOnJ2vIHhSUa1C:b4ThoTLL7z/stjdRm/","tlshash":"c472cfb99d2bcea64bec41348e60d5f1a2a8719e6507385312f1f4c4f6cf04ac74926f","first_seen":"2025-05-22T08:35:26.720843Z","last_seen":"2026-01-21T14:52:16.326847Z","times_seen":59,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":28,"dns":1,"connect":1,"send":0,"wait":15,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=art-models.gr","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=art-models.gr HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t0.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://art-models.gr\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 333\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:36:08 GMT\r\nexpires: Tue, 04 Nov 2025 14:06:08 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1225\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":400,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":180,"dns":0,"connect":27,"send":0,"wait":28,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"teenlist.net/button.php?u=allmybeautys","fqdn":"teenlist.net","domain":"teenlist.net","tld":"net"},"ip":{"addr":"104.21.79.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"teenlist.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Nov 2025 04:12:44 GMT","end":"Mon, 02 Feb 2026 05:09:17 GMT"},"fingerprint":{"sha1":"5D:04:22:52:FB:25:86:28:D1:07:8C:45:46:57:90:7E:33:A1:6C:50","sha256":"7F:68:DC:35:18:D3:4E:D3:60:5A:CF:5D:4F:99:C5:CE:89:77:C4:82:4F:40:1A:1C:6E:8C:6A:BE:C1:92:59:3A"}}},"request":{"raw":"GET /button.php?u=allmybeautys HTTP/1.1\r\nHost: teenlist.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Nov 2025 13:56:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vImj1bsf4yRv6nzLymY5ywsPNC54VYPVJYSDWLvXr7vfahqS8Vl0gXSUsAimmQRt2jCmKmJlhu7gr00fn2tVzj3%2B06pPnNJyCU%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 99949d856d6f568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":24,"dns":0,"connect":1,"send":0,"wait":363,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=models-me.bz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=models-me.bz HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://models-me.bz\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 332\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:38:25 GMT\r\nexpires: Tue, 04 Nov 2025 14:08:25 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1087\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":695,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t1.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuboard.gr\u0026size=16","fqdn":"t1.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonuboard.gr\u0026size=16 HTTP/1.1\r\nHost: t1.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://nonuboard.gr/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 245\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 12:24:23 GMT\r\nexpires: Tue, 11 Nov 2025 12:24:23 GMT\r\ncache-control: public, max-age=604800\r\nage: 5530\r\nlast-modified: Wed, 11 Apr 2018 06:27:24 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"ec7248bca28ec8cb09a23dcaace4a9f7","sha1":"a267da8b0abf1367feb99cad7777fb2bd15ed9a4","sha256":"d4031978b37a4bb97ba2ed0b43a30f28268d00306883c149a02c852e93a89f72","sha512":"a81193627aa3b2f52a227cfdd33a0c7bdc2a4a73e989914268a2ea0865c7433a04fa92a05e1138b44ab5ace5d238b399d634f2336485b7615a4b0a8cd96f0b1f","ssdeep":"","tlshash":"50d022fe72a45b3ddc2a251249d79090de11e23c068c8397833a886bd41002ce174e8f","first_seen":"2025-06-07T18:44:30.607423Z","last_seen":"2026-03-24T00:37:41.602958Z","times_seen":47,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":100,"dns":2,"connect":28,"send":0,"wait":16,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t3.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonublog.gr\u0026size=16","fqdn":"t3.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nonublog.gr\u0026size=16 HTTP/1.1\r\nHost: t3.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncross-origin-resource-policy: cross-origin\r\ncontent-type: image/png\r\nx-content-type-options: nosniff\r\ndate: Tue, 04 Nov 2025 13:56:33 GMT\r\nserver: sffe\r\ncontent-length: 726\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"b8a0bf372c762e966cc99ede8682bc71","sha1":"2d7c9b60d1e2b4f4726141de2e4ab738110b9287","sha256":"59bfe9bc385ad69f50793ce4a53397316d7a875a7148a63c16df9b674c6cda64","sha512":"6883c7a3f702fb3df5e698333c8a05705970fcb476a31a2008444a02122b6870de158176c86a1f6605a0783b88d3523646b4d288696e777b37cc02d5d95266ca","ssdeep":"","tlshash":"fe0165e3a34595286b870a62f4b87082162a6ae560c3c09964e4ec6e1f05168e4e5e9c","first_seen":"2023-04-05T05:54:43Z","last_seen":"2026-04-03T18:04:54.932513Z","times_seen":6575,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":25,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/0eWrV47.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /0eWrV47.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Jun 2025 01:55:32 GMT\r\netag: \"63f5390a9bf4077665346ae9827a84e1\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: WHMd69NJDasCAqbz0CMw6zY6rnjkIcJFS7a-zZGmP05NV4zZe_XN7Q==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 3645256\r\nx-served-by: cache-iad-kiad7000176-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 13467, 8\r\nx-timer: S1762264592.502022,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 16661\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":16661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 468x67, components 3","md5":"63f5390a9bf4077665346ae9827a84e1","sha1":"eeba691e789d338e7e4b7712495dc62d43956875","sha256":"1ebb3f120be0911c415d6f718842d19500fa10f55e4078244f337a1d9b3bdf63","sha512":"b76036422eb3493e021aa59e53f5ce262210e7a788244b46cd48e3740d1d8b7aaf18fa5ad3d5936584df7f6533bb4b2dc365922879b0e4f16fc3b475bf04819e","ssdeep":"384:yeDr7nX7pJp/tuzPtzlThMkBFqC+ZhIl99PDiTIbM+SwCTugbjn:fDLLp/tuzPbTBFr+Xm99P0Tdbjn","tlshash":"0072d082fb4358e2c2d8807546b487398b3b2902ca29f43cddaa5d95f752cdddcd21ad","first_seen":"2025-06-30T17:31:05.831381Z","last_seen":"2026-03-30T23:26:46.784786Z","times_seen":39,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/orfM4JQ.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /orfM4JQ.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Tue, 17 Jun 2025 01:30:29 GMT\r\netag: \"4279c6ed67eae344453c722efaf332fc\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: 3gNIP7eWmQPDSjtujsT8h1bo_mSHXzEEOpvOc5KXrp3QbzWFP3zoyg==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nage: 636501\r\nx-served-by: cache-iad-kcgs7200165-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 4691, 8\r\nx-timer: S1762264592.501219,VS0,VE0\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 20444\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":20444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 469x67, components 3","md5":"4279c6ed67eae344453c722efaf332fc","sha1":"a8d72f4443e973365daf2c9bd35e9ca7850711ae","sha256":"335f12342aaf84788371bbfbf9ee3dfbc6d9890c453fccf1178d254a6a2e338a","sha512":"addf5f2d8ee0190082430563a86391a30686ac6d636596466fff533b7f6e8fa5dde2edfdc8ce6e7e5b561554d952f7be8c1c560d52cfd4cb5f6d7634c42fbcc6","ssdeep":"384:y7hlAHkWnIxDu6RTbBJjyp5Pu9cPGp/xLLI/nNwut8fNaIxeYsa6mBDt41Zv:ihlDWnIlhTbjSmcP+tI/QN3xeY7DBDt0","tlshash":"ee92d022f62a5647ed2e7af54912cd3256a4c8cff8a47b2646700885534cbfab1c35a0","first_seen":"2025-06-30T17:31:05.788376Z","last_seen":"2026-03-30T23:26:46.797051Z","times_seen":39,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/3l1NiYH.png","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.192.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:31.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 29 Jan 2025 00:00:00 GMT","end":"Sat, 14 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E4:72:56:8F:0D:0E:0B:E1:47:1E:79:39:7A:0F:AB:05:30:AF:2A:2D","sha256":"B2:9B:23:54:25:04:8F:9E:C6:BC:84:54:20:8B:AB:34:8C:F1:7E:8A:57:AD:55:F3:C9:40:C3:4E:8B:E5:30:6F"}}},"request":{"raw":"GET /3l1NiYH.png HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nlast-modified: Mon, 13 Nov 2023 01:17:37 GMT\r\netag: \"cb27de085f8bb809c65d1905fbd67226\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD12-P2\r\nx-amz-cf-id: S2akpw_KlNzNKmm9kWXFJkyGWFxvAGVgL6ykksAFtwJtgbbHh9bcBw==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nage: 1839069\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\nx-served-by: cache-iad-kiad7000099-IAD, cache-hel1410027-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 1700, 0\r\nx-timer: S1762264592.514273,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 31567\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 468 x 67, 8-bit/color RGB, non-interlaced","md5":"cb27de085f8bb809c65d1905fbd67226","sha1":"87ece788cc70b886d10031889836e8b13bcb28fa","sha256":"b0dab7ad51792b1edc700a5bffee081851699402bb886afd64d941294fe687be","sha512":"24df5fa8ef2995d4e0dfd71575132a24bb3a54818fd58cb7bc280aaee72b6f385d1467683f1ba9f35e59cd8464d619f9ea2134ffd1dd80ecb3143e9f6a84b182","ssdeep":"768:ItZO7Y0N2szBxIaJdvZ2eRGy0AjoSxfUNZnBoUP26:kIYNsznI0FRQAxxf89BoUP26","tlshash":"8be201495f9866b9cab325cfb93905209df64ca8b18129260dfd07133faa30c3e4e45e","first_seen":"2024-01-25T18:06:31Z","last_seen":"2026-03-30T23:26:46.799776Z","times_seen":60,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/s2/favicons?domain=candydolls.bz","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:32.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:39:48 GMT","end":"Mon, 05 Jan 2026 08:39:47 GMT"},"fingerprint":{"sha1":"34:96:E3:91:95:41:1D:19:32:0F:BF:D5:FD:64:58:3A:9D:78:2B:60","sha256":"62:50:CF:99:9A:03:0D:F9:C6:E2:3B:D5:E6:B0:6E:95:82:57:DA:D5:48:A7:C5:39:E6:47:48:BB:08:13:FE:83"}}},"request":{"raw":"GET /s2/favicons?domain=candydolls.bz HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jbgirllsgre.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://candydolls.bz\u0026size=16\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 333\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 13:38:25 GMT\r\nexpires: Tue, 04 Nov 2025 14:08:25 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 1087\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":287,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:31:09.46171Z","times_seen":13315120,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.gstatic.com/faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nnmodels.gr\u0026size=16","fqdn":"t2.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jbgirllsgre.top/","date":"2025-11-04T13:56:33.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:57 GMT","end":"Mon, 05 Jan 2026 08:38:56 GMT"},"fingerprint":{"sha1":"50:87:4B:4E:FB:30:AB:11:12:23:8E:8F:6B:DB:F7:6D:9A:37:CE:D9","sha256":"E1:35:48:CB:CA:92:00:73:EB:EA:EF:E9:B3:8E:D0:29:54:33:B5:C7:4E:73:DF:B7:7C:F8:B6:07:E7:AD:8C:24"}}},"request":{"raw":"GET /faviconV2?client=SOCIAL\u0026type=FAVICON\u0026fallback_opts=TYPE,SIZE,URL\u0026url=http://nnmodels.gr\u0026size=16 HTTP/1.1\r\nHost: t2.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jbgirllsgre.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-location: http://nnmodels.gr/favicon.ico\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/media-favicon\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"media-favicon\"\r\nreport-to: {\"group\":\"media-favicon\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/media-favicon\"}]}\r\ncontent-length: 290\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Nov 2025 09:52:23 GMT\r\nexpires: Tue, 11 Nov 2025 09:52:23 GMT\r\ncache-control: public, max-age=604800\r\nage: 14650\r\nlast-modified: Sun, 13 Nov 2022 17:24:55 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":290,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"629d2ece19c0794ca2077763421e4737","sha1":"c1e5e7032ed1e0e04d447a872fb73e1155b48f21","sha256":"e824f71fe508eff42b6a48b34e1fffe2d48b3ba02ef38a72670ec9894ba44f9d","sha512":"e3e728da2ac6d0e919c4f0e74212026abd124a7e3734e336ce59cfe442e2512c596b2b40e7970304017cca4e4e53b206cd609b54b803b2a3859769efa9dea5bb","ssdeep":"","tlshash":"bad0e7931a043df4d4b9f323149680d98f3153665004ad33771f14d11d4b54850a4c40","first_seen":"2025-06-07T18:44:30.591479Z","last_seen":"2026-03-24T00:37:41.623516Z","times_seen":47,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":2,"connect":33,"send":0,"wait":15,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jbgirllsgre.top/","fqdn":"jbgirllsgre.top","domain":"jbgirllsgre.top","tld":"top"},"ip":{"addr":"176.123.0.55","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-04T13:56:30.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jbgirllsgre.top","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Oct 2025 11:36:58 GMT","end":"Sat, 03 Jan 2026 11:36:57 GMT"},"fingerprint":{"sha1":"81:29:BC:18:2C:B3:83:B9:72:CB:3F:CB:A9:EA:04:49:75:B6:B4:F6","sha256":"DB:09:1D:0F:0D:7B:90:AB:6B:49:19:45:9A:9F:88:05:E9:99:E3:7A:D2:33:D0:C3:D2:EF:C4:CA:0B:1A:A8:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jbgirllsgre.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 04 Nov 2025 13:56:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/7.3.33\r\ncache-control: no-cache, private\r\nset-cookie: mybb[lastvisit]=1762264591; expires=Wed, 04-Nov-2026 13:56:31 GMT; path=/; domain=.jbgirllsgre.top\nmybb[lastactive]=1762264591; expires=Wed, 04-Nov-2026 13:56:31 GMT; path=/; domain=.jbgirllsgre.top\nsid=c5a12dd1fda33d335ab3868f4da5e2d2; path=/; domain=.jbgirllsgre.top; HttpOnly\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-nginx-upstream-cache-status: MISS\r\nx-server-powered-by: Engintron\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Engintron","description":"Engintron is a plugin that integrates Nginx to cPanel/WHM server.","website":"https://github.com/engintron/engintron","common_platform_enumeration":"","icon":"engintron.png","categories":["Web server extensions"]},{"name":"MyBB","description":"MyBB is a free and open-source forum software written in PHP.","website":"https://mybb.com","common_platform_enumeration":"cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*","icon":"MyBB.png","categories":["Message boards"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":27297,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (387), with CRLF, LF line terminators","md5":"2854dff6151fc4663960c8b7309b9cb1","sha1":"a919fc2690dc840ceb2a33f1c6f86f6dde1a92dc","sha256":"28f5b059e6cd9a95e20487435165e2585a484a947995cc6607d462e25dd37990","sha512":"4a58cc70f1f78da77101c64e15db70354e45d56cbc835868b35a86660fd338cdbca7df8fcd8cc52d72aa2b2a6c4780d7124d1436786e532b12732874992ea199","ssdeep":"384:J8oMQmimToIV3qOJ1xSB+2bVkhZfyCyEwCcWbuncADc3GwNhZfF:1MVblSBVmPMEwCcWbuLGPF","tlshash":"e3c2a72661cf793f131282c6e1713facc1e781bdc6990917f5e5193b7684eeaa47228c","first_seen":"2025-11-04T13:57:13.433205Z","last_seen":"2025-11-04T13:57:13.433205Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1011,"timings":{"blocked":420,"dns":257,"connect":51,"send":0,"wait":171,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-04","alert":"Sinkholed","trigger":"jbgirllsgre.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}