{"report_id":"84996cc1-bb03-4116-85b9-0c45ea22ce72","version":6,"status":"done","tags":[],"date":"2026-05-27T00:33:40Z","url":{"schema":"http","addr":"jokarooms-vip.com","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jokarooms-vip.com/","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"title":"JokaRoom Casino AU Official | Trusted Casino, Bonuses \u0026 Login","dom":{"size":91048,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55539)","md5":"10fa939187192c682374c61a170d0e74","sha1":"9c7576ede7a132fbf55c0857695c75665644042d","sha256":"57472148cd3ef497ed5cf0875a52e47aee4eb367bbfc544607d90c7d7992aa06","sha512":"4dbd7e02cdae905c6e48cfc3cbfd19701740894c89787608b5272084413f1030217a1f7c66c5816f36ad41a180c72e600432b4debcbe3cdd1ab8c374ed5c8de4","ssdeep":"1536:ldP3bD1R5p6LnrBcuyTOylgXXyktbrRWDl+VuGcZSsH0lVYcgMz7g7:ldAXyPGoz","tlshash":"b993e921d7d42c66165b82e5fc3bea9eb3ce502dd3298ca17dfe8a79e3c30294471158","dom_hash":"domhash68c71e411dae2394d98c4d8c913fdc7e","first_seen":"2026-05-27T00:33:43.20489Z","last_seen":"2026-05-27T00:33:43.20489Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"jokarooms-vip.com","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:33:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"jokarooms-vip.com","ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-04-28T15:37:39.65443Z","last_seen":"2026-05-26T17:37:38.400376Z","alert_count":55,"request_count":55,"received_data":1878355,"sent_data":26372,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-07-30T14:06:06.789371Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/webpack-0e12096754e13d32.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"448f9fa329e3c14d3644d7b05d535131","sha1":"ca4d5a3e0644eaa77bbeb89b3197f5a7c52a87ff","sha256":"ca99b1f2ee6bf13a2adca9e045606a380e448ef95c66a2737be97902098c199e","sha512":"6122af9ae3384753d1295ec3d08e8b48c0e7e2b4942e02a12cff87fc4beecfe91a574d2a01b0356a40476f058cabdebf9ddf261a1a759c4fe746c2614cd2f6c3","ssdeep":"96:6IAgDpEzqynRRKEKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY8q:64GzxnjKEMOFLBkQNF9Xe7jKl6nRVG/n","tlshash":"b9c1c79e72a4f8b61743a5a0493f9056f13e207b781ed0a0d70ac9f4bc349688533fe4","size":5968,"data":"","first_seen":"2026-04-28T15:37:44.126331Z","last_seen":"2026-05-27T00:33:43.220898Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-08-07T18:40:27.122406Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/pages/_app-0991c71796cf2047.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5e966f7956c5aeb5481abc5dbfd4d1a","sha1":"547064aa4b041b202c2a6ca59255b9b77943b4b5","sha256":"1c5eaf9f60a8cb76e0cd102e1aa7922abf9349e77880823458375c31fefb8b28","sha512":"c9ac9d2622138242324d0cb28a789b2348083703d87da212f78ee91ce1f7912cbc61c19dd2fc10841b461cc7e9d0f18a67dcc6631eee5b9c3734f21519cb8c08","ssdeep":"3072:ii1PkPUKsWkGI4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxf:iiCcKsRGR3dCadhQ7wsNJiRs1+HZ","tlshash":"efa4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487958,"data":"","first_seen":"2026-04-28T15:37:44.153583Z","last_seen":"2026-05-27T00:33:43.211923Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-08-07T18:40:27.11743Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-08-07T18:40:27.145505Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-08-07T18:40:27.121062Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/tLd5rU2E52tyxTfV0Mdm3/_ssgManifest.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-13T15:32:39.140196Z","times_seen":252736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-08-07T18:40:27.13097Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/4.873a62016c3f6388.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59eb1551dfaf1a5a7505549e65930694","sha1":"c31b90bf895a6f6a485b58d0314173cb7e0accb5","sha256":"f288e4cd556347c1faf2cb51f34e3e3beb0584230d55a4d1abcedca1462064c4","sha512":"cbdad9b5fc4b4ccc305b94fed80d67097032a8452581d4e9aa2da8bebd6750fbe42da14c8d141844793b3b71e84f83fdddc62d3298ccda77d1f4d83bca36117f","ssdeep":"96:oXZAGWabFphNVcQ0HC0FWYQckHS6c2p1O1u9dKT9V1Ol0sX4l:4KWhw1GbUu9wT9V1hsIl","tlshash":"69f17681e287bbf5aeaf58c2412f450e732e290dc7364cb4f670a8129590dd8b5d678d","size":7503,"data":"","first_seen":"2026-04-28T15:37:44.15833Z","last_seen":"2026-05-27T00:33:43.225396Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/15.15fac68198436cf9.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7b11e4d68dfd5dfca276735b05d6a61","sha1":"f6cb58ae2b5548287f2d2a12a1312ba8fa9c31b0","sha256":"2cd69c5258d421f4a93bc2890e11633bd9ed5dfe391bc4d4f94033f25f896c8e","sha512":"185f7f4f56114a0ac350b0755b517d4e022b2b132138a6e15fba9ef32a685bf5ce42dcdf10e9e84106d6b5946daddf7a19d0df9ea085116697a1737b44196c22","ssdeep":"96:p+8tQg5U6n2qKoJn2qK86n2qKYcBEOVSL9gHpDeRyJy1yNQ9Q0:p+8tbn2qKCn2qKZn2qKfpQ9Q0","tlshash":"aea16687a0c7f9989197fcdc801a8a5b703f8589b82954f6f960da3d0415ac0b257f5d","size":4946,"data":"","first_seen":"2025-03-27T03:50:55.684571Z","last_seen":"2026-08-07T18:40:27.114601Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-08-07T18:40:27.16061Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/tLd5rU2E52tyxTfV0Mdm3/_buildManifest.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eea599f4f8f61781ca7370bce3a0cfe","sha1":"d97c944597bfd8f524d4673de3b75479e4b074e0","sha256":"770117b838d261495810351c7ef9ba84e0646eeef34df0b8bc7a3ad207df1980","sha512":"02e81ed019ded2a3145b298b465121d1a9c88140d4f31b0c5611f29a988b6b0b73e5cf5cc28244567eeab6020e3aa107f3d8a5a3a5fea0157be3944234a63785","ssdeep":"","tlshash":"5d11bd82410ae61a2de8ed47373f13a3bf52807a663c0ab78bcc1d6c51900675f3a821","size":1014,"data":"","first_seen":"2026-04-28T15:37:44.150521Z","last_seen":"2026-05-27T00:33:43.223886Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/59-10b9f0fb615301dd.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b01a22c0c7fec20ae6e9a851fa0c9f5d","sha1":"5df7ba4d44648d3b3002e94fcebce9ec82ada0e7","sha256":"454f89aee55003d7778e5d93d7fd5ad6e0c564e1bb0983145c8aa827be29130f","sha512":"10c797479e5c49887e1abd6c47d2cf4360ee68a3db132caa9d1b1a5fa24c1effe2a509de8e2eaa443ce8aedaca1052d036f8d5f3ecac6d0131f3b610d307150e","ssdeep":"192:WzBOuoWj8/DY7lX3uP497gAuk1bqsI7YPKF9:WzBO//rP49Y1B","tlshash":"5d62955d49866cae9abc84e4c42b510cd3ec6206f158bc30e3a58523b1dbedc65b27cf","size":14782,"data":"","first_seen":"2026-04-28T15:37:44.159596Z","last_seen":"2026-05-27T00:33:43.208237Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"18017-19c57a5860e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBzfIZkaW1pfTAxfvtiFPw92LdgB3NjnOUJdfWYJSxaxM%2BULp7aWUSPhFdkP%2BYQRpbEJoxZdTuKNQgl%2FpeoaJ91tIl7XNAi7KX7EiajOReCotIxJJkkr0ZhPli3lWzuhHpPz2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71f9cab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-08-07T18:40:27.11743Z","times_seen":281,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"89fc-19c57a58606\"\r\nage: 24961\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMjGZQcSxemF%2Fl2hrXxq8cD8zhZxMV6m7z%2F8R9xSxIXUtzKw%2Fegw57aV51pKj02jJQLKxzQYHM7syvWqm97v4FuX7yJ3%2BDYeBEJvLoWaZMM2QkpSMvfaasNTTIupfRC9F%2BREvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72a9d5b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-13T15:07:56.780817Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"1759-19c57a5860a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXEfawXatExB7v4UZ2k7qd9fQyQxhj3RkFhgbhFWb2nr2iz7W7dKpsLrpcaEk0QuJeGHcfvNC2slCmtXkU8YFi4J%2FmJ1srq0IRH3WshnJ2O4Lin2ZCTqnE1OYY5BhKpaRqV2uA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9bdb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-08-07T18:40:27.109447Z","times_seen":274,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/css/425cb6e228741817.css","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"eee-19c57a5860e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FYjxrOkNR3jVIgCdfTGchv4F69FvGxWydihktAEdNsQ8CHE3zzXBPqrT4q7xBEoRRu%2FNfSOtEXXx4ZJ1vMqxaInENJoNmD3jMhO%2FmnmGMEp2QLmV%2BpE54NU6SK%2B2rRNjvAxYiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9beb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-07-30T14:06:06.774985Z","times_seen":179,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/59-10b9f0fb615301dd.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/59-10b9f0fb615301dd.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"39be-19c57a5860e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tKvVcTehhBqtC%2FF%2B1lHouLSCGNJI3g7yCMYqtrK8MkrXDP%2Fy4xMKmhgj3NXM1L5V%2FT3xEjgJ23fdy6YojOHQRS7Dw6wONhlsVu4hmBoeMvxfN38tiX5nfuoutkB3WMgtSGBoAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71f9cbb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14782,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14782), with no line terminators","md5":"b01a22c0c7fec20ae6e9a851fa0c9f5d","sha1":"5df7ba4d44648d3b3002e94fcebce9ec82ada0e7","sha256":"454f89aee55003d7778e5d93d7fd5ad6e0c564e1bb0983145c8aa827be29130f","sha512":"10c797479e5c49887e1abd6c47d2cf4360ee68a3db132caa9d1b1a5fa24c1effe2a509de8e2eaa443ce8aedaca1052d036f8d5f3ecac6d0131f3b610d307150e","ssdeep":"192:WzBOuoWj8/DY7lX3uP497gAuk1bqsI7YPKF9:WzBO//rP49Y1B","tlshash":"5d62955d49866cae9abc84e4c42b510cd3ec6206f158bc30e3a58523b1dbedc65b27cf","first_seen":"2026-04-28T15:37:44.159596Z","last_seen":"2026-05-27T00:33:43.208237Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2F9_Coins_Grand_Platinum_Edition_Scorethe_Jackpot94_712c2b3474.jpg\u0026w=1920\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2F9_Coins_Grand_Platinum_Edition_Scorethe_Jackpot94_712c2b3474.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28844\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: AUUm7INkSyywUJ-zG86CM304FKVDpOW9iD2PAtijcqY=\r\ncontent-disposition: inline; filename=\"9_Coins_Grand_Platinum_Edition_Scorethe_Jackpot94_712c2b3474.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Hlf5z%2B%2FfLyWii0qacvwi6%2BT6Rb2XaSeOADm%2FLNNyPHGGiFNjd82x5MeGQxOLMOqZsT1XwDZ3I%2BzQ5fSDNM4DlUVc7HYJijtyxZolMjcOau5ZsgQZNdpRxSpe5o9k7dKKN2JzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72d9d7b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3555702cd9fa0be319a607a9e1200bb8","sha1":"2091f0aa51446f4d50189b14c93865d3e30a1fe3","sha256":"014526ec83644b2cb0509ff31bce82337d3814a543a4e5bd883d8f02d8a372a6","sha512":"c40a42ed6cda05a376359d4e89fe6fd8ab4145ea384ed574b894cb4c79be4774b895b94a35715bcf4a019bde69f1e6d86e0a4c288fba338b61d0a943bd6bede9","ssdeep":"768:3YqBfSUMZPqnI24uZ7X+1gSsRi9Fk/YyKwWiU93+NpTROSVK:o2f+P723SsRcFiKJlAcSVK","tlshash":"98d2f1d52fda039d8ed6ff38dc8e9c616c9bc635514e048700a423babc46f6a7410adb","first_seen":"2026-04-21T04:06:50.967183Z","last_seen":"2026-07-30T14:06:06.74971Z","times_seen":52,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3112\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 1IQ8dZLvJzt7jJSWdq31UItS+8IY-kyELSYl7ymzCN4=\r\ncontent-disposition: inline; filename=\"total-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIy9MEVtmauduD2eC6WdWc1a8aS5jPDm7z5EOXcT%2BcQ7EV%2BXgbd%2F77A4kLBO9oFCj5XvO2RtaqvQvl6sVFv%2BBobD8X7xeyJvyV9fMdlVkpWvm5CDLeAlRxFOEMng1mCqect9ew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72e9dfb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9266ec4c0b5e7ea801409c213828352c","sha1":"d902439770a2f68009eb488fcb951baa968cf6bd","sha256":"d4843c7592ef273b7b8c949676adf5508b52fbc218fe4c842d2625ef29b308de","sha512":"91beb28dafe0f3410ab30fa27e1757ac7fd3107e540330bfeaae0e2246cee3e1d628d577072bd51c169e8a066dd03c9b5c371bc833eda40f7703cc3d55ce9aab","ssdeep":"","tlshash":"7e513b5748b32183decf3207914d412d0782d0df18854db9e8bc2ddea97a2f085898e5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-07-30T14:06:06.743208Z","times_seen":133,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1412\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: NWcNEApufzPN1Z6+CYAf9TbOYMw9v7XHucYwPA8FnBs=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-1@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVmAMLsmjliI6fmA%2B8xBrlDlWGnGb9tNeCVBHMSgkl5GrBLoIkxVMl9ZVSY5sbzlJMkUO6K1sCZJNz49es58kjH6fOEDoDxxyMLJLOU%2Big5YQW%2BnDR7vFOZ2rEOcwtbH5MMIIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72e9e1b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c79467552a70a7e3b9aac5361dca35c","sha1":"c185808d79c2a23b02504ec935117459b1c1b799","sha256":"35670d100a6e7f33cdd59ebe09801ff536ce60cc3dbfb5c7b9c6303c0f059c1b","sha512":"664ee68f3c1334fc77beabd6037b226504bf74cc23bda66ca67f20612c26275690e730cf2eedca94bed50a3554144240c1c59229d98fd63cf7abcf886b877584","ssdeep":"","tlshash":"56213810768cdbf8e771087b765008810acfa4a290370201ee3f4ea4e62af6b2c3c482","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-07-30T14:06:06.793143Z","times_seen":126,"resource_available":false,"data":null}},"time_used":874,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":874,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"89fc-19c57a58606\"\r\nage: 24961\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x8u99q64p4uql5K%2FDr5iw0fAKf0wfu0tA27XouG7TcGuQmSgm1xXpkquU6PHFKy6DZ5u%2FhqtZe4WG8kn7xOm%2Bbo2J3KK47jqGv392lT2lBLrxIl4zWmtQ1pDzSogdAFEMxKWUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72a9d4b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-13T15:07:56.780817Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/api/report-error/","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:21.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"POST /api/report-error/ HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 89\r\nReferer: https://jokarooms-vip.com/\r\nOrigin: https://jokarooms-vip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":89,"data":"{\"text\":\"https://darkjuraustralia.top/8MKmmLm3?aff=art-kor\",\"domain\":\"jokarooms-vip.com\"}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Wed, 27 May 2026 00:33:21 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 6418\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a020ed7c6a3ab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6418,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"4991f4d80092e562733c26b0f91d8db6","sha1":"b7f4b840d2df228ee33b63dec07fccb135e306ac","sha256":"1c62ed60420a48c49856e31b697a3e4e154f3a4b7138e43cdf354c10e1c8e20b","sha512":"c8f0268951a11af09fa3b731b0868c1b269755970b6634d01571ad5cc1f65f77379071d1598b69882f597e74ebc7972464027779266353f0239b60811cc4d5cd","ssdeep":"96:1j9jwIjYjCDK/D9KUnoG4Fh8/G4Ft5Z424Fd+skKmtmnihny7RLlfaQxP:1j9jhjYjGK/Broeti7VMnhy71lSeP","tlshash":"1cd14471b1f512ba10a382923695fb1a79e4c213cbef4494b3dcc2731f9ee81e903195","first_seen":"2026-05-27T00:33:43.210469Z","last_seen":"2026-05-27T00:33:43.210469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":631,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/kalambagames_f6f4be8a96.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:20.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/kalambagames_f6f4be8a96.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/3oaks_d2d5b91c05.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:20.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/3oaks_d2d5b91c05.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/pages/_app-0991c71796cf2047.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-0991c71796cf2047.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"77216-19c57a58606\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTa1lzvPtH0urT8%2FLx8KW36DRyG1Cgyb6dbeQ%2BUPKm40YNXRftlQVnmBHIyhK%2FFKKzrfD3ckQZMI77a%2B1Essv3b1fCJPhDGtsWuFnLoYTY%2BZ6uHto7z%2F3oDRuyMNZgf5%2B5LJCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c9b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487958,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"d5e966f7956c5aeb5481abc5dbfd4d1a","sha1":"547064aa4b041b202c2a6ca59255b9b77943b4b5","sha256":"1c5eaf9f60a8cb76e0cd102e1aa7922abf9349e77880823458375c31fefb8b28","sha512":"c9ac9d2622138242324d0cb28a789b2348083703d87da212f78ee91ce1f7912cbc61c19dd2fc10841b461cc7e9d0f18a67dcc6631eee5b9c3734f21519cb8c08","ssdeep":"3072:ii1PkPUKsWkGI4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxf:iiCcKsRGR3dCadhQ7wsNJiRs1+HZ","tlshash":"efa4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T15:37:44.153583Z","last_seen":"2026-05-27T00:33:43.211923Z","times_seen":6,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/jokaroom_logo_573993d8f5.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/jokaroom_logo_573993d8f5.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 11:23:57 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qpisQtWbJoJJtFMPSmKhh5pGKx1GfLdsTIloXot3OqiL2ejhs%2BqK2pdsDza%2Bs0YLTyrioxJZGhdwN2bf8Xz00GjLiDgyksn3t4OjnLW1rA9NFabBuDLawqjNUwPdndO1Yb4T9A%3D%3D\"}]}\r\ncf-ray: a020ed72d9d6b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":120499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7244acae10c76b50cf24db4162fa2cf8","sha1":"4f1b4929e673e27a6c4baee6d44d2dbd4548fcd6","sha256":"6bb939d4c9f60479b2edaeae6ce7b20be1c41dd0c89159e8348fbc7f1923d2fe","sha512":"90f613a6423f7b0805e50f8f0b1f559119e58e9d4b00dc97607d5b258275746eb5112367842ecd79dc8992d4f644a52eae13b6ecb4078aa0cfa9a306aae1a1a1","ssdeep":"3072:7TJo1TqRzyfcnapxd5IJ0epBocaa+dLkpaGynqwr3l/JG:3aBMAw0epBpaazpynqe/JG","tlshash":"acc312ff191de6f8bd659e4038fe41426c498e97601ce1176ea21ce299ed193ab4cb30","first_seen":"2026-04-28T15:37:44.140878Z","last_seen":"2026-05-27T00:33:43.212502Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1180,"receive":860,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FBookof_Fallen_aeff179720.jpg\u0026w=1920\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FBookof_Fallen_aeff179720.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 41918\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: oA0E1HmUC9-7utbvGnNiryK0f7mFgYV8+TjKjuLPFHQ=\r\ncontent-disposition: inline; filename=\"Bookof_Fallen_aeff179720.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TyxC8fPhkwcMqInWsPfsvOMfpAl%2BnY%2Fk5qbpgNQzoRRGrCssfN%2BojTalY1kO%2BbVE6tz63wHPcAApKcEK0wN5xq51hvVaJRU3euGcrxJnp2WkmrualeIdFnycw%2FL4JcEofdtqIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72d9dcb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"06737cbb0f967bada8d4cc648d887b6a","sha1":"32db7342395650e4059cc3f0feefdd8e307c6980","sha256":"a00d04d479940bdffbbad6ef1a7362af22b47fb98581857cf938ca8ee2cf1474","sha512":"10bece8d4231684d687ad2d4245d83d3aefdcf7e5807eb07a7556dc29568135cdf74bd8163cc32fd8382aa96314d136c90f6f30427ed7d2f33de58e14c2487c8","ssdeep":"768:LsP4r8la7oHPkNdCMMCaCju+VDbIBiCkms5VtoBa8EcHxST:Lsw4lcovkNuCaQu+VD0BiT5VK3DxG","tlshash":"8713f150fee1df6e4cab905af8e021647b5e4edc8c8173d698dd42be056a23b2305c97","first_seen":"2026-04-21T04:06:50.951458Z","last_seen":"2026-07-30T14:06:06.750574Z","times_seen":44,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":880,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/gamingcorps_297075e265.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:21.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/gamingcorps_297075e265.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 13:07:21 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1rkSGeG5WokMijSmqUSXEqCWaLdd5d2jLhdP3eXu0UXC%2FPdyiUV0AvpyyQtkXWxYFUGjfFWMIVKtvSX2UN1XbtQqx9BjRhN0lRnS2n%2BSYFkBf9EtdBadmyey5H0tB9a8v70Pw%3D%3D\"}]}\r\ncf-ray: a020ed7a6a32b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":7606,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"323f56320a7ae69d060d875b4161c99f","sha1":"5025d2a587859447e4fae5f83a97be9df335cedb","sha256":"9c51da01691ef2e5dcd883d5255162694218cdf271d76c289a53c9b78c349a5f","sha512":"797936c642e85d83525207b1b018dd31c005d71364535f3c1fae5eb27f68d9ef6028d45f82060d0fcf72913a17b2f43b0dc307625710b323c09754560264b22b","ssdeep":"96:Dmz2keQxacV4Wi9/gjOgywAJf7JRjXNe2GuaofoAlGRSMJE2dx7kb6+k6U/4YB9M:y2vQg+479/gj4wGfHjk/ILlGtEkyjwe","tlshash":"5bf1e294a3be41bcb2873aed0929e55a4f5338fe3b5314bcc3a81c07451a15ed5918fe","first_seen":"2026-04-28T15:37:44.138428Z","last_seen":"2026-05-27T00:33:43.213611Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:33:17.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HREBULny4OxITsauqWPMwikG6Z6orEvj4IDmqPfoAkYkiBfxskeoO5gLn0j6qj33g5BBdWCu0v9epVh44CqSx8ImNETFMIf1PeQSxYIEsM5yhEG6UBQRVl43xvclDxm812idLA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a020ed676fb55688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85447,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63002)","md5":"aa54eca9b04a8e6d4ee0c32070854365","sha1":"d81814b86b353e86f3f89e8f7a465b68cd1daba0","sha256":"ab17b131d026b864cffdbb8631d1e32a17f1f4c1b87ad0bcbcecdd8d96df7e40","sha512":"dd1c3e614a1ec472bcde081ab28051b7c1d1017a5a5e8cc9fa818c6e40394d48810ec6cde0109ab76d508c5d8002b15c55de9e07f0469456f7e4e4442b17046c","ssdeep":"1536:qS3bD1R5p6vV+sY9tXVelx6bPVtbrRWDl+VuGcZSsH0lVYcgMz7gy:q+bPKGo6","tlshash":"2383fa22c7d42c26165b82dafc37e99eb3cd5429e328cd927dfe8939f3c20694470659","first_seen":"2026-05-26T17:37:39.552426Z","last_seen":"2026-05-27T00:33:43.214121Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1605,"timings":{"blocked":45,"dns":18,"connect":1,"send":0,"wait":1515,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/css/352d5236847d301d.css","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"644-19c57a5860a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7U3Qcg9xjeBwrHupfpWqpLEViDDIsRZ4i45xL8X347F%2F2Spaa9a43r7zoAXvrNPVvD7lwdHUkU4LqjpuaKYyT80whGwxWp3QNLZ6ku9qioGOvj5suyItXlCTm4eMiDxIUqaag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c0b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-08-07T18:40:27.159991Z","times_seen":278,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3382\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: qtgseq43yCPlc4q7UqXglchdAt0qOBOx8mfDTvJp8OU=\r\ncontent-disposition: inline; filename=\"total-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kqjbez9jvI0onCIKmd4LTaDs%2FoGBvL9C7i7e90EeT6gnneourYIUHbCxg0zn8OLx9Sh9x6FX8PgDSrHDtrYbxZh%2FkFsR1559RgIO8D7ibd8%2Bz%2BYEOLo%2Bn2D%2BWcPJ51hTQHaLTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72e9deb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50d69df7565f2adff718b334b2be696e","sha1":"32684076332a394e40ac306390e9ef110369572d","sha256":"aad82c7aae37c823e5738abb52a5e095c85d02dd2a3813b1f267c34ef269f0e5","sha512":"6a0091fdf8e0b8f300404d484bbc5883cd3f7e03a1447acc692b051566490697ba2eeb42be05ac285abda18967cf518a9711bb86ca09bb58e7ff6dcf933b5df8","ssdeep":"","tlshash":"5c617e98605178c1c69be8a146878163d1564650d3c6c874bbf4e62472acc7d4331cf5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-07-30T14:06:06.792259Z","times_seen":133,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":589,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/3oaks_d2d5b91c05.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:21.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/3oaks_d2d5b91c05.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 13:07:21 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZjXtg9pm3gCwK9OtsVP2LxanUA%2BnA5Y%2FnN%2FZ2TPkn5ezRKaD9vRKI3pnDgzkXnyTAbebBqJeVs1zzq2DGbwe%2FDaSn01ZhFUR6izCbbmluw%2BOBYefOyjtQoc%2BTpNsxFk70Sh%2Fw%3D%3D\"}]}\r\ncf-ray: a020ed7a6a33b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7169,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48444f9736020bc44506dcbd00fdc8a9","sha1":"f7b49a97e3264bbf1957fa8b8a0dc1a910d3c727","sha256":"bc2b2105cf14f733a82c7e930075c2e63ffbbcbd551fcf65f08d9c434c4e6ef1","sha512":"3b481f057e223f02b6d513ae7dc4d484fbec5345d5e1ad22a497116cbaa40e070dc6447cb25a84ecaadc5f7a8317d46f50a413bb2414bf86c20cca053e936e83","ssdeep":"192:y9zIs7qYEqlELa2t/LraQekibz5qPX0WzBFeKPEEG:y+YEqlEhLraQiHkPZZEEG","tlshash":"f7e1d8a882e49ae4f5445fbde625baa7334734ff7da4d254c1a2dd5238702ae4c8c48c","first_seen":"2026-04-28T15:37:44.134576Z","last_seen":"2026-05-27T00:33:43.215749Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"a112-19c57a58606\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8FL8hxOB3D4ZyYIhTise7G6%2B39yIVePakLVd%2Bc68ngLHXSp9i1LAT2KexRPmKLrOFSSMdefBNIuQKP94TuAQsrIoVWJnldmGylY1qmTEmUcqA1vJ8PsS1l49KHl%2Fv7v1qHXMOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9bcb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-08-07T18:40:27.147707Z","times_seen":266,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FCash_Pig_884e26d32a.jpg\u0026w=1920\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FCash_Pig_884e26d32a.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39754\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: QrFybeiBA8OKtJ9I2iC2Srbl9JFwmy5MU6QR3Zne+N0=\r\ncontent-disposition: inline; filename=\"Cash_Pig_884e26d32a.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3J3mC6wt0LDzEGhcBisBmabJR3bjl5syiWcYkvL3BvZESy%2BT4flLDoQhMZdcKZghlkV3033hwmNIgQGh2XYuHSDjyVfHU1H8%2FQYVcFtyvxVolLqMDeNaN2v8vrQ8l0sRaxdUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72d9dbb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"43328a32542a71532480435e3bd966d5","sha1":"a34e2e4f26117346a981f9770b02e46423ca81cc","sha256":"42b1726de88103c38ab49f48da20b64ab6e5f491709b2e4c53a411dd99def8dd","sha512":"afdb0ad55d3aaaf4233cd28103799ac5452b7ef9e25cde7d02f022d94bf846b1151354050a48221d26f9ebc4e55215c47d269f9324fe5b65afa940c595ad0039","ssdeep":"768:LUenidcP9E6gleInP5AamZTxA9K9I0VCsYdOM+L2itFaoHHqsAeT3bhZpxk3Sfx:4FdcW6gh54+V0ksWeJasqVeT3bRmI","tlshash":"6803f2193122b853d6b27237faca04578a3ccbe05ea98a730342b7f7705e250f623599","first_seen":"2026-04-21T04:06:50.961352Z","last_seen":"2026-07-30T14:06:06.785583Z","times_seen":51,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":285,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/merkur_bcb79e7e51.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:21.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/merkur_bcb79e7e51.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 13:07:21 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X01uPW0nWrXC5%2F%2BfqLuoSM%2B7gt%2Fx9jMQveo989o7UCRC%2BoxdB9VgxCaBQPD1OPgN2Z8%2F3HhTTkkSZ6dakqrDbGfwHwNBE4QezQ2FFNqOEPa506hUYmew6%2FtuHGdyGcnQ0N2M2Q%3D%3D\"}]}\r\ncf-ray: a020ed7a6a2fb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":12333,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4524691ac0bfa9b1f160adaf82d63404","sha1":"799f3cc903600317e330fd2cc81015edf64c07a2","sha256":"a9c28af809bef40bdbe223ae4c22725cfac94d29215dadb5fcd0c9a316fcde1e","sha512":"f4eba9b3035353cbdbe7ab6e3e41147788c7412cc5789db1b980c9d36986a0b59f9e4b398f42f26d75024b44cb8fc0e7b962fc97019a98434dc63252633d2fa5","ssdeep":"384:Nu6jxo/Zmdqok/wUlJeAiZlS+zsp6VvYD9KwSt1c:MTJXO+6s8c","tlshash":"f342cdd893e882f0b586abd85214793b7bb724bf3e25b25c47a5cc90b62154e489ccdc","first_seen":"2026-04-28T15:37:44.129789Z","last_seen":"2026-05-27T00:33:43.217429Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jokarooms-vip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"5358-19c57a58606\"\r\nage: 24962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c80%2BkujrP3dajGVyyJee3fqh9I%2BWp38%2FdIPGOwyAjzvGYNA2Bohf%2BKb0rkw45USW4a%2BT1R37jOLP0%2BTDTprNEpZPdkqhVCFcAAlTUPHgzMEJW7LNYKnGvtqQKbFf3i4xwoOiwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a020ed71d9bbb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-08-07T18:40:27.111166Z","times_seen":280,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/css/02660251b6f4cb66.css","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/css/02660251b6f4cb66.css HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"647-19c57a5860a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxkgU1hCAQYMO6PluXHVRnojVuqjfpXDVDwhDz%2FAdOjLq0m95rz07tZgsXkjwbtZFZsjP%2FbbWb2vbZdB4JAxZ%2BSCNRTlqXkn0CVaRGBx9fkur9TFOl6353PK2yc4MEY4ZLJJ9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c1b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1607), with no line terminators","md5":"052642617ed7f811791f601117385ba3","sha1":"d69d36b5f6b4ee6ed717ac8b147b1c0d4dac7e01","sha256":"7f8a26b02a5a62e50adc44a3555c0e632ca411c3393431241ca011aa3ae67430","sha512":"64c5c597ed4d4a9b711ce5d2a96ce6d17e99fb4e92aae02c233613e6dafebe3128e57f036638bafda053613db779f9982350aac232c9eac81fbffe26380fae6e","ssdeep":"","tlshash":"513103731678a4387cd5582b09f1a25f3d04ed33ea6f79c4eb31907c92efa5910625c5","first_seen":"2025-03-27T03:50:55.66801Z","last_seen":"2026-08-07T18:40:27.156134Z","times_seen":154,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/15.15fac68198436cf9.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/15.15fac68198436cf9.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"1352-19c57a5860a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvQGdMRRZ8%2BoZ6A%2BILQ2SaLMX2wK%2Fl4sz951toTgw0Py5P0wDIPgOitlZn9fx9mvnG6rPcDe%2Fa%2B7gS4iiJWMV7Avu%2BIHiribIYzm%2BAfUrsHJGv7ev53nsxn4rYLFhFsQDYuQlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c5b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4946,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4946), with no line terminators","md5":"a7b11e4d68dfd5dfca276735b05d6a61","sha1":"f6cb58ae2b5548287f2d2a12a1312ba8fa9c31b0","sha256":"2cd69c5258d421f4a93bc2890e11633bd9ed5dfe391bc4d4f94033f25f896c8e","sha512":"185f7f4f56114a0ac350b0755b517d4e022b2b132138a6e15fba9ef32a685bf5ce42dcdf10e9e84106d6b5946daddf7a19d0df9ea085116697a1737b44196c22","ssdeep":"96:p+8tQg5U6n2qKoJn2qK86n2qKYcBEOVSL9gHpDeRyJy1yNQ9Q0:p+8tbn2qKCn2qKZn2qKfpQ9Q0","tlshash":"aea16687a0c7f9989197fcdc801a8a5b703f8589b82954f6f960da3d0415ac0b257f5d","first_seen":"2025-03-27T03:50:55.684571Z","last_seen":"2026-08-07T18:40:27.114601Z","times_seen":154,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/gamingcorps_297075e265.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:20.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/gamingcorps_297075e265.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/tLd5rU2E52tyxTfV0Mdm3/_ssgManifest.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/tLd5rU2E52tyxTfV0Mdm3/_ssgManifest.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"4d-19c57a58606\"\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bxznnzeTqYLLTNAHvyQYABI6vU4oQifqcN4AuESznt6MfIJi6RubSf4zy9ijE87KcQ3ez0GsdJ0r1w6UY2DXVbDXEzZGI2ZKbqGa4o8f8f5YeNEATDBljXGMmB5D%2BIKTI8niRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71f9cfb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-13T15:32:39.140196Z","times_seen":252736,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"948-19c57a5860a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkzUVw1DPDLvZzgRlzxXDbQIxKD3eBWjoukBJ8im%2B2jn1dwSx2mxHxTMj3zhZlQJKJ3FgJc6TT9Wi9w1FK9ltlSp4YBUOrpf0EZ5UmYZZ4yOI18rDpWWXr%2BthNXxOpQjFtkWNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c4b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-08-07T18:40:27.13097Z","times_seen":278,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/webpack-0e12096754e13d32.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/webpack-0e12096754e13d32.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"1750-19c57a5860a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=quJghvCJ8yGXd1sulyjMvaZhIuW2t%2Fi41eTxuulADYkWKVLho%2BMUSnXItzKm1875eP%2FA1I%2FqbbsgHmcLqMG2lt0PL%2FT0ApKGNikd7oA3eFuvQacEwF62vz6d2qgYKDu7iEqfwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c6b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"448f9fa329e3c14d3644d7b05d535131","sha1":"ca4d5a3e0644eaa77bbeb89b3197f5a7c52a87ff","sha256":"ca99b1f2ee6bf13a2adca9e045606a380e448ef95c66a2737be97902098c199e","sha512":"6122af9ae3384753d1295ec3d08e8b48c0e7e2b4942e02a12cff87fc4beecfe91a574d2a01b0356a40476f058cabdebf9ddf261a1a759c4fe746c2614cd2f6c3","ssdeep":"96:6IAgDpEzqynRRKEKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY8q:64GzxnjKEMOFLBkQNF9Xe7jKl6nRVG/n","tlshash":"b9c1c79e72a4f8b61743a5a0493f9056f13e207b781ed0a0d70ac9f4bc349688533fe4","first_seen":"2026-04-28T15:37:44.126331Z","last_seen":"2026-05-27T00:33:43.220898Z","times_seen":6,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"2000-19c57a5860e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4v7E9DodUKJJ6Yr29P87sV2dGl2C4TDkBuEY6yk1V8K3%2BawyJwGZy62ORiFONCrpWPm9ZNhup7HwbK0taj9OX%2FYEyM2aWn2GqjNsdg%2F7jIyuYXxURiblgC1%2BSbB30%2FK5i0NfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71f9ccb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-08-07T18:40:27.121062Z","times_seen":279,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FGolden_Bull_47bf917bad.jpg\u0026w=1920\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FGolden_Bull_47bf917bad.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22504\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: wuhF8WZrVnomDWxU0wL61NCRAYzsY1g5KzLTyCzeV7w=\r\ncontent-disposition: inline; filename=\"Golden_Bull_47bf917bad.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VCX%2FdHjj2i%2FmnbHp2YHxvqif1KmZW59nSPP2EtWCTM4QUE4IjDUrDrCQKcP8bkqa%2Fqt71OBAyV1vce%2B%2F8QaEE%2BSuBylxOu%2BQXz0oXH3%2BbG6hleedUjDUlMu4G6SYGVS0FqwF4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72d9ddb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22504,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48b24e5ea0bda6b40d310899e61dfdb1","sha1":"c19b07285431c12480dd800863805bdec32bfece","sha256":"c2e845f1666b567a260d6c54d302fad4d091018cec6358392b32d3c82cde57bc","sha512":"a574890b18d84dd7e3671820ae0115b58ee13fea1c0601a39a7dada88d84a498549bc5aecea955517b227778af3e1d03cb96e333b16758b5c7c9aae6e3ab1432","ssdeep":"384:AUWPI7wRvfS2IAVRWQ2FvfArlmMlXpJLW+EAiUTetGW4mEOmP2xJlNWb:A19I2IMIHWEMlXsUT/bt2xy","tlshash":"3fa2e0afe8853c5ffe60a978f7b04856ab511142b717872c35c92872b6d28c6c0d7f1a","first_seen":"2026-04-28T15:37:44.164455Z","last_seen":"2026-07-28T18:40:59.488841Z","times_seen":19,"resource_available":false,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":881,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/jokaroom_favicon_ba98f23875.png","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:22.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/jokaroom_favicon_ba98f23875.png HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 4987\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 11:23:56 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUO6cYeQspqTpPCttGFfD4efoL6r9cNV6y4yjrS9%2FrE4L1R5oCpA4x4Payuxh17OIMCqZmqz2UvaNPxIanrTsk%2BnWhfFp6wnksIPLiOGCWhQIJypc%2B1e8MY%2B2GElagJujsXKTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a020ed82aa4eb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4987,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"e7429fcdaba893d48507d49aca3efeb4","sha1":"f79ebe1af0b5f9c1a75c275355fe7a99ef79f727","sha256":"7f5594c182d75dec50c7d0f571b606d3e1cfe165c7b4475cfa2a633bc9afe0e8","sha512":"bdb741735f00fd09539b62c3afdaedb86a7bf17fd4ff162b2230758fe8545484a28d11f4cb981122969a0a1bb90cbb605ea40235295370b77f635691523a7eeb","ssdeep":"96:6DyMeeHO7KRw0k4ZtjwlW0006tfkxexDPfyUcgRzZQIKgm9:lmzw0k4ZtB000lUPy2ZoJ9","tlshash":"5fa18e7be755b82cf1392183387f2db41b8588f416af956409ff96b2730140b5638238","first_seen":"2026-04-28T15:37:44.156751Z","last_seen":"2026-05-27T00:33:43.222439Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1188,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/betsoft_500499df06.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:21.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/betsoft_500499df06.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 13:07:21 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78BViCh5UnxVrqa58%2BK7c1gRvnZlFigj0nw%2B4hjZb2QqMhVsbpqLShtcQa92JkR8hfpdV9tGu68H4TksEIegXv0uucAg4%2BpR7e1MJSCismjTEzxlCTcfM62TI7Ouky0N%2BrWlyg%3D%3D\"}]}\r\ncf-ray: a020ed7a6a31b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":3825,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96bddd5c25bdb5e2bc1e4c95401641a2","sha1":"04fc80130028946d8026bbe6296d9778fa00762e","sha256":"0fa768f2b379f3da6d1a0fbc89d72b9fd0199e2d1041ae16b70e71f3036b0b76","sha512":"85da7dc8ece263c5e49bc13bea5b4f40f1e3913248ca81e565775aff7281919cdf357c3ccfe424b4994dc81bb2b72d6fdac8a2ff4d3596406ddf8ea415378eb6","ssdeep":"","tlshash":"7e818bba6b2455e42401af699b13b134358864ff7c369affc742f87476e014d4cdc590","first_seen":"2026-04-28T15:34:42.919719Z","last_seen":"2026-05-27T00:33:43.222909Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/api/report-error","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:21.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jokarooms-vip.com/\r\nContent-Type: application/json\r\nContent-Length: 89\r\nOrigin: https://jokarooms-vip.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":89,"data":"{\"text\":\"https://darkjuraustralia.top/8MKmmLm3?aff=art-kor\",\"domain\":\"jokarooms-vip.com\"}"}},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:21 GMT\r\nx-powered-by: Express\r\nlocation: /api/report-error/\r\nrefresh: 0;url=/api/report-error/\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwNdMQ3ABTKhudV4SPjU6C0%2BiXuLU%2FVQJhlmpj%2BOOdFiLc17FNP%2Fu6T2mWBJaV%2BLotRXsXu2ZSu9OpYAgOpXcI%2FvjUJ3eDXd4ePxa6Mrf3%2FkdRKgrwq5D8vd6LVCizotv%2BC%2Feg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed7a7a34b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6418,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"4991f4d80092e562733c26b0f91d8db6","sha1":"b7f4b840d2df228ee33b63dec07fccb135e306ac","sha256":"1c62ed60420a48c49856e31b697a3e4e154f3a4b7138e43cdf354c10e1c8e20b","sha512":"c8f0268951a11af09fa3b731b0868c1b269755970b6634d01571ad5cc1f65f77379071d1598b69882f597e74ebc7972464027779266353f0239b60811cc4d5cd","ssdeep":"96:1j9jwIjYjCDK/D9KUnoG4Fh8/G4Ft5Z424Fd+skKmtmnihny7RLlfaQxP:1j9jhjYjGK/Broeti7VMnhy71lSeP","tlshash":"1cd14471b1f512ba10a382923695fb1a79e4c213cbef4494b3dcc2731f9ee81e903195","first_seen":"2026-05-27T00:33:43.210469Z","last_seen":"2026-05-27T00:33:43.210469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"a0b-19c57a5860e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBprqFDk9V4%2BiEWeUCttRaV9qmVgSUBsy39c8N6S0IpReDIwPM%2BQcGJXV%2Be0ztGX3anEJBIF8JYFJRJyIaT6HWM7A1e5H3yKFRoXS%2Fb%2BX70KLtJ%2FDUitc3HCdzPve5NaCQzgKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c2b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-07-30T14:06:06.789371Z","times_seen":189,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/tLd5rU2E52tyxTfV0Mdm3/_buildManifest.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/tLd5rU2E52tyxTfV0Mdm3/_buildManifest.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"3f6-19c57a58606\"\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wKqPaOq9RAz8Yk0hqsyFjlFjAa53XLUBb331iKQokHyr4quPYLPZSU2Wqj9TInuwH%2Bs2aJtkt0L0mRkIm72fsLN2pEIlPRJqkx0e%2FUXKtCY0yG6n49u%2BAoi6de%2FSWi7Cmkk6Gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71f9ceb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"5eea599f4f8f61781ca7370bce3a0cfe","sha1":"d97c944597bfd8f524d4673de3b75479e4b074e0","sha256":"770117b838d261495810351c7ef9ba84e0646eeef34df0b8bc7a3ad207df1980","sha512":"02e81ed019ded2a3145b298b465121d1a9c88140d4f31b0c5611f29a988b6b0b73e5cf5cc28244567eeab6020e3aa107f3d8a5a3a5fea0157be3944234a63785","ssdeep":"","tlshash":"5d11bd82410ae61a2de8ed47373f13a3bf52807a663c0ab78bcc1d6c51900675f3a821","first_seen":"2026-04-28T15:37:44.150521Z","last_seen":"2026-05-27T00:33:43.223886Z","times_seen":6,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"89fc-19c57a58606\"\r\nage: 24961\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AnL3y0O%2BzGaTXarYXxPjKToPZhGg393nqsQNLtXVkzIh9TGIncY%2FqhmftPwKOqELxX3h09nNBiPRqHH5oV1H1vSQiH%2BpW8VYGU22BreD9J96v4QmVBF%2Bn%2FfBz%2Fk6OAbJsaoKzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72a9d3b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-13T15:07:56.780817Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FBuffalo_SPACE_Grand_Ways_bfb8af2452.jpg\u0026w=1920\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FBuffalo_SPACE_Grand_Ways_bfb8af2452.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9614\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: SSnpjzadIzZ6D-dA-FF-ZS9qMXfg8abp6eL7ozXEo6g=\r\ncontent-disposition: inline; filename=\"Buffalo_SPACE_Grand_Ways_bfb8af2452.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gexGN5V3Gmj40pvlDcAJ1AcCY9E6Jj5mjQXd1WAeifWZ%2BWn0QFGsuFCHre8ze1Lgf4N2Yjr4FllvlQ0NS34O2aInx5kq%2BssjcM%2FG4qsuyIFDziHgkwOhGDwh%2BTFeu6eUfh5Kow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72d9dab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5b913054cfd5a555f6f7c4247426f8fd","sha1":"b0a44d07d6b26db465140f205adbe94e19ace419","sha256":"4929e98f369d23367a0ff740fc517f652f6a3177e0f1a6e9e9e2fba335c4a3a8","sha512":"2922244fa7bf781299ba7cfc3e78b46e988dca2649d66d7f5f1b270637b182d03ed4f3c954a34326db7f67c0e2317d9041447a3ed3fa10cb17c909ebfef8688c","ssdeep":"192:FDBb/PdhpcLzptNmiUKvYRue4Nu2ufqUSnE4MVAQOZ01hE3jKL9ZM:xd/PdncLQvKvY1uu2TEDf601hE3OXM","tlshash":"8312afe4447cc1aad2f9b8426d6c44bb98d4b293e7e058012c12105f3ecd637f55db36","first_seen":"2026-04-21T04:06:50.959573Z","last_seen":"2026-07-30T14:06:06.765356Z","times_seen":46,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":593,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:21.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jokarooms-vip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:21 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"1759-19c57a5860a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24964\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uViavOggQgDn8%2F5FsRi08ngJquzSTthJMxaCVpH2qITHwB7wQdcIK9WkZMhSpIkTwZP%2FIuhSfmOEQv903Hk%2FQEMdiEchbgdY6XBTLGe58gkLgtzVSAeomXSLIo5O%2BbVxeEQtmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed7b2a36b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-08-07T18:40:27.109447Z","times_seen":274,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/css/3bda6d4ca9304bde.css","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/css/3bda6d4ca9304bde.css HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"dc9-19c57a5860e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xttt%2BipGzU7t1hO1KbhSAXhCtKtnei%2BJbWGZa%2BaYvPEVcSHU0swfmHhB2MrgFd2wUMT6PYW4Kb9auR0tihnRNwJ2sCsNX%2FIc%2Fv8w3BWfvo8cC0clCczez%2B78gve79dEU1MnUfg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9bfb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3529), with no line terminators","md5":"01ce09a5b03cf044607a0960b19ee68e","sha1":"77ee0c8a2beef0412c1bf25560a9903a8734e9fc","sha256":"460f6f84ac47584af249e7525a01b93aa6fa2589abd99b25861058a10c5ced23","sha512":"428ac46d7d2015690eeec14942ff4a4220d01f83188ba00d1338949b73d9b25f4c2dc8aedb1ff247a20b160dc4847a4e89768245fa3835d1b1a47e5283a60848","ssdeep":"","tlshash":"1471f21a2e9e7b186cffc81765b26748236cd409cd1712a99013d76e49cb3925bf1b4c","first_seen":"2025-03-27T03:50:55.673324Z","last_seen":"2026-07-30T14:06:06.775662Z","times_seen":220,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/4.873a62016c3f6388.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/4.873a62016c3f6388.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"1d4f-19c57a5860e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Jd5MD22z%2BlmxFFmEt8DFpPMGmcEt1J%2BQSUYn2JAqPgBWAoz9qGCd4JOOcfBO5ejF8U1%2FFySuhrqQ%2BVKCudL67FKE40HcLOCz2wgBRWlDqSSpVsrLexynin8%2FwPG5%2BPz0y5vsw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c3b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7503,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7503), with no line terminators","md5":"59eb1551dfaf1a5a7505549e65930694","sha1":"c31b90bf895a6f6a485b58d0314173cb7e0accb5","sha256":"f288e4cd556347c1faf2cb51f34e3e3beb0584230d55a4d1abcedca1462064c4","sha512":"cbdad9b5fc4b4ccc305b94fed80d67097032a8452581d4e9aa2da8bebd6750fbe42da14c8d141844793b3b71e84f83fdddc62d3298ccda77d1f4d83bca36117f","ssdeep":"96:oXZAGWabFphNVcQ0HC0FWYQckHS6c2p1O1u9dKT9V1Ol0sX4l:4KWhw1GbUu9wT9V1hsIl","tlshash":"69f17681e287bbf5aeaf58c2412f450e732e290dc7364cb4f670a8129590dd8b5d678d","first_seen":"2026-04-28T15:37:44.15833Z","last_seen":"2026-05-27T00:33:43.225396Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FAloha_King_Elvis_a4cb15b56f.jpg\u0026w=1920\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fjokarooms-vip.com%2Fuploads%2FAloha_King_Elvis_a4cb15b56f.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30310\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: kWXQw2Xq7In5aN0ReCjDupCQcaTzu3lRGubBbftaCkY=\r\ncontent-disposition: inline; filename=\"Aloha_King_Elvis_a4cb15b56f.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mWzsndCYTxsCEWiQvqcDBxIImwpGmgi9%2FRaT4r4xcUxCrjGx3zpZLpkUJ69tGGFidmjsAVRGVtVnzD%2FHNDMeiu5PXax9VddhAIqSjObrpkF3ZZTYO6qpWo7uJQUAfGuFh3SfLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72d9d8b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30310,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"72dbfeed4491ba8753cbc1ee5ab67192","sha1":"071e0b29bb4056314024c0f9ab06e17ab19c317c","sha256":"9165d0c365eaec89f968dd117828c3ba909071a4f3bb79511ae6c16dfb5a0a46","sha512":"f32ab54932d7db60a53197cba4360906967897e6d02a1854b56017e1870613ac243da680dd3fe47cb6443a66ff6f18c2d3084bcc53ef8fac2c4aae65c8d79adf","ssdeep":"768:0cA9S1uLyu3yS/dO6N3fXNJZYESLXezZpOFU+E1dZDasz:0cAEALymyudO+9J5YXkO21dZDzz","tlshash":"7ed2f1d698d257d86ce9ecc0ef2749d0ee451fe9ee27d7e0101e099509bd2e9a0bc4c2","first_seen":"2026-04-21T04:06:50.902485Z","last_seen":"2026-07-30T14:06:06.759505Z","times_seen":64,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/merkur_bcb79e7e51.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:20.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/merkur_bcb79e7e51.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"33c-19c57a5860a\"\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYgj3OuFkrXcCVtO2geOEcslJtR0JSR5duu2P9b3bJjvHGeekNpfaNVEFTt4Sdez6WXjb%2FGdyYDHzsip37kRKEgCOheeKxUmHRXABYoK1L3PC9mFGI0f0YrUXnWFVNOZms%2FoCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71f9cdb4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-08-07T18:40:27.145505Z","times_seen":261,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"89fc-19c57a58606\"\r\nage: 24961\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C1ra33RpSQLXCN3YO3rkAvsxnG5bDEQj5DEPOI9jk4MlLRI8jHLfuLj%2F8uGuFK6nVGmXzpDzQlEzmfnNqde6gqQHOg8qKoaH%2FBha95dqCU7gzCrhFO%2BMrXOv3Pozz65Tak8v4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72a9d2b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-13T15:07:56.780817Z","times_seen":2383,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/kalambagames_f6f4be8a96.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:21.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/kalambagames_f6f4be8a96.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:22 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 13 Feb 2026 13:07:21 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=runCPANizfkyK1kZr6c7xSlWuXsjtv%2FeBLaRIdLPTMP7A6s1V6Tvy5d1N0YrKodc1FNsbcxKDpD4w75KEFfPRPJ8repZLw0SHk%2FaiBzC%2Bym1jejRd7MjaNFes1bjC%2BcNmeaaYw%3D%3D\"}]}\r\ncf-ray: a020ed7a6a30b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9552,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f48b4fc425862a0ab7728cc69bf3ee5","sha1":"e42a2eeb8cafaafd7d6aef0e9c7b60fa7e6a12ad","sha256":"f467f07999f93e40cbd412f670022458f97eb8840b5c1c5bc159fc11a45ed943","sha512":"a03fd2bddbc5b98b885edbb73c02c56389ccd88580af24212fa821b0cfc7c87d859ee7797944c71e20686b15f36952f53da811c048c8ce84ef088fee2cae1ed1","ssdeep":"192:tyLJkDjA3Z+F+tdzI2kPz9ewHPSMITeWbg41U:ULiju+F+tdKb9TIT5g42","tlshash":"241264ecbfad82f0e90abb70c533e9dd2b1a75fa98b1a475c3613c816d0146c28d64d0","first_seen":"2026-04-28T15:37:44.154947Z","last_seen":"2026-05-27T00:33:43.22674Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"226d5-19c57a5860e\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hZfwK0X5xtLw6YIj1Y6YSRlUdLu8Bx9n0l%2Bl7ML85O4cHkqi3853toyYQR7p%2B9M5GOeK8QBbyJLX0Vs4TYkyxBY6LuDWwNuYheEE31N3QBBz%2B7%2BKKmVpg21Qg2nlVnZWGpEBWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c7b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-08-07T18:40:27.122406Z","times_seen":298,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"17ffa-19c57a58606\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 24962\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Oyfz73DxG8Kx0nJaCjRDp%2Bnhto%2BMYvhaPSZ9FHNbkg4c38nmS0YpJrievQzUA3LaPaC5jPq8KSBhKG82tjCfxOgPTJ751s6%2Fq7ZFpNxuDFv03ltlk9ks%2BRJVDBGr2wzGaDDwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020ed71e9c8b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-08-07T18:40:27.16061Z","times_seen":281,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2872\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: OCeyBa9dqIJvgkicFaVXDReSu6lIWhkViWkMV02bx38=\r\ncontent-disposition: inline; filename=\"total-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BGiHlSx2z%2BeXQXrzM16Nf2dlAS36Cyp9RAT26DgpF82ADqhu9gOyrcbRde46F%2FzsaWRWiNIPxwMhngc36r2gqQN%2Bp%2BKrWh7A0RG97%2Fu3KzYeqYBNaOsbrY1VsJipcp7P4zCBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72e9e0b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15d5c9005a37678205724a79e0c94ecf","sha1":"f84013d6e304be3f339edfce9188a5b40a10a8d3","sha256":"3827b205af5da8826f82489c15a5570d1792bba9485a191589690c574d9bc77f","sha512":"610f90da66f2799eccb5895b7a32fa1b4ab6cbaf7234c5740525f9fc953374052e20a11a32f879934fa28beb9772a47b6a8724484c20a71601ed87631dfa9b39","ssdeep":"","tlshash":"10513b1625223524dc707e718a2b13aca80ba84c0fffd767f1428d634c1496e67db8a9","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-07-30T14:06:06.788602Z","times_seen":133,"resource_available":false,"data":null}},"time_used":588,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":588,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1290\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: DkHvEuSDXRB-vLyYwatTedu5bUGez1prcoJbDhBcn1Y=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-2@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcLAVAiOkp%2F0CY9HYP7jUyQlqfuPaobX6QZC0iB1pcjrr5MzEcnGFw44Fk4l22UoTXZOFp5t5TKr%2B%2Fo2gfqxkWoukD69kzBj%2B4aESV4OsmOcIW7Jjoc3YB4Y4xxlomrOa6TnsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72e9e2b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c9c7c18a4380b493bf276ea04ad4787","sha1":"d72fb256081430ce5f22486d39b79f2f302a5da0","sha256":"0e41ef12e4835d107fbcbc98c1ab5379dbb96d419ecf5a6b72825b0e105c9f56","sha512":"7a917a50029837fde70991553896f2ba46375fb1ce9f2215cfb0c7e28d69014429f616f00b92fb9534aa89e7ee030bdfa2262d543b30efe02b1da082f31aa26d","ssdeep":"","tlshash":"0421c8085ced184ae5821c6ce5b950a7922cacca0a6f461be5e2c9fad148c2c03c417b","first_seen":"2024-08-19T18:17:08.891151Z","last_seen":"2026-05-27T00:33:43.228736Z","times_seen":117,"resource_available":false,"data":null}},"time_used":875,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":875,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jokarooms-vip.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 15:36:31 GMT\r\netag: W/\"3b04-19c57a58606\"\r\nage: 24962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zXZSCA6LAi%2BHNrEABT%2FGkdSpjLp7DhZ7YiCyrBN3FHOlBch7e%2FmW0siHbrRnrlxmFB8QWDZrqfBkmapmTEcaMMSAAjtd4VognZ0MgXHwze310pi5xbVe%2FV80TlWiCEsKcTreYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a020ed71d9bab4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-08-13T08:10:56.967179Z","times_seen":389,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/jokaroom_bg_cab90da61b.png","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/jokaroom_bg_cab90da61b.png HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 267844\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Fri, 13 Feb 2026 11:23:59 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxOWQ5YWXkayPA16iHMlSW1pE0u2JO20CVY54uIGA2jUkpXM8tYl8bAKd2ftSJBCI4654VY6OeUz9qUHk9bQh2jfEc%2BoHa9oKUMvncIbfBy%2FfEoR3Gq2DD%2Ffb4DJtwtmXAgimA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72a9d1b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":267844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1440 x 414, 8-bit colormap, non-interlaced","md5":"675a1cbc2b9e9eb0f9f419e6af616717","sha1":"3621b28f8e14a0d18e440a960a028fc2cbad73e9","sha256":"1f35c3c145c0f6f77629ce90bf63681977f2326226b69aba8abdb5131bc24908","sha512":"49ff677fe7a1e22a31f9a2bc4244dcff9211ea20cf378b83be2d4028bb872393485cd08fccd9c079222cc47ff03f6e0b7ff3c62ed7fc2c9302393c931073b589","ssdeep":"6144:KQgbdDoUaHdrSpyPPsx2U7txUHmSCtBlwuoMq7y:Kn1oUed+UPajtcp9y","tlshash":"aa4423d8808e1382c807036526420565564ecd2da3e6a0f26d12efee7f3e9be54d53df","first_seen":"2026-04-28T15:37:44.163002Z","last_seen":"2026-05-27T00:33:43.229754Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1173,"receive":1151,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"104.21.63.111","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:19.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:33:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1214\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: ek0UevHZ-FAi0Kfsh5KGMvAuZZH89YxPoXyU38sWils=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-3@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWTc6XMI5WfRBjKNdh10YxvIk9Tj7flDm6thed0J6VAf4C8TRaZsLr0O%2BHoDAOVR6mx%2FCvPv3WKsf84PeogWeLW82CTZ9XINKQiAafw2cxXmexxeZaTkYTapQ3qZ3ZOexhlVSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020ed72e9e3b4ff-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6460dceeec5235200dceacf11eb0b7ed","sha1":"dc487405685aba83b1df520c2aca70571b903f5d","sha256":"7a4d147af1d9fc5022d0a7ec87928632f02e6591fcf58c4fa17c94dfcb168a5b","sha512":"9bc78b3f48c093a1c113f20fc42273c525d9b47d42e29c3d94b363298e4fd865cb62866064fbb2319664bd40b19a196cb664650d405ca3f78496edc15d613046","ssdeep":"","tlshash":"6921e79fe0b1083d0d800023a027016f42a2419e769b0ae034524e520e1f20d4ebb7a7","first_seen":"2025-03-27T03:50:55.648055Z","last_seen":"2026-05-27T00:33:43.230227Z","times_seen":116,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":871,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jokarooms-vip.com/uploads/betsoft_500499df06.svg","fqdn":"jokarooms-vip.com","domain":"jokarooms-vip.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jokarooms-vip.com/","date":"2026-05-27T00:33:20.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jokarooms-vip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 14:20:22 GMT","end":"Sat, 04 Jul 2026 15:18:35 GMT"},"fingerprint":{"sha1":"20:B8:FC:E4:0E:E6:75:4A:A3:03:35:62:72:6A:39:0E:7D:88:CD:B1","sha256":"82:A4:A7:91:2D:D9:DD:13:D2:91:10:58:C8:DD:03:37:F3:5E:FD:62:72:26:4A:E8:43:B3:24:D4:18:D1:15:4E"}}},"request":{"raw":"GET /uploads/betsoft_500499df06.svg HTTP/1.1\r\nHost: jokarooms-vip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jokarooms-vip.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T15:51:54.234848Z","times_seen":17873320,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"jokarooms-vip.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}