{"report_id":"d0ae4c1f-c771-4162-ae77-e129f3bb6a42","version":6,"status":"done","tags":[],"date":"2025-09-27T09:23:15Z","url":{"schema":"http","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"title":"Watch 9p602o7Q5mU1CiYcrz9qZq9u0XmF9Nd0pYi0iDdglMSzY2njb36qskv3KhB.mkv - VOE | Content Delivery Network (CDN) \u0026 Video Cloud"},"submit":{"url":{"schema":"http","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-01T09:23:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":5,"received_data":144899,"sent_data":2757,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-21T22:12:58.000435Z","alert_count":0,"request_count":3,"received_data":176464,"sent_data":1388,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"18.165.122.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2025-09-22T03:32:20.223156Z","alert_count":0,"request_count":1,"received_data":551,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ptichoolsougn.net","ip":{"addr":"172.67.128.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-26","domain_rank":70674,"first_seen":"2024-12-10T03:58:19.473076Z","last_seen":"2025-09-22T16:52:45.326437Z","alert_count":0,"request_count":1,"received_data":168960,"sent_data":432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-09-21T23:59:49.858604Z","alert_count":0,"request_count":1,"received_data":849,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"campfirecroutondecorator.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":37605,"first_seen":"2025-03-16T06:26:47.544899Z","last_seen":"2025-09-23T14:20:35.522466Z","alert_count":0,"request_count":6,"received_data":196589,"sent_data":10303,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2025-09-21T23:43:01.494052Z","alert_count":0,"request_count":1,"received_data":467362,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":2,"received_data":30795,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zoojoujoaseeh.com","ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-02-10","domain_rank":382672,"first_seen":"2025-03-21T06:40:37.606647Z","last_seen":"2025-09-22T00:37:38.574173Z","alert_count":16,"request_count":4,"received_data":7527,"sent_data":4114,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2025-09-22T00:37:38.562658Z","alert_count":0,"request_count":2,"received_data":930,"sent_data":1215,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bobapsoabauns.com","ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2025-09-22T00:37:39.428583Z","alert_count":0,"request_count":2,"received_data":35248,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tzegilo.com","ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2025-09-22T00:37:39.284979Z","alert_count":0,"request_count":1,"received_data":18651,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rarsahalfjis.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-05-28","domain_rank":0,"first_seen":"2025-09-27T08:18:46.732038Z","last_seen":"2025-09-27T08:18:46.732038Z","alert_count":0,"request_count":1,"received_data":1572,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"jilliandescribecompany.com","ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-05-24","domain_rank":50911,"first_seen":"2025-05-28T10:36:51.527949Z","last_seen":"2025-09-09T16:18:09.963015Z","alert_count":0,"request_count":22,"received_data":2192288,"sent_data":28039,"comment":"","tags":null,"fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"104.20.30.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2025-09-22T01:04:27.372479Z","alert_count":0,"request_count":2,"received_data":113482,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"803f85828b8a86c0403d44c6dea1b3b5","sha1":"ce25ec8e91f62bcfa24d040625d18403f9526973","sha256":"6b15d13a9509cad54fc4a34a24f9779af48c712d92ef0d65c5c0fc29ee50b24e","sha512":"b5d91d3d6ddbc3a926734f5e7ac5a23f5bebb2c621cbd405668791020a4254293fce65b288cabd876cbdd0e3108d2ca05910fb48fdcc13ce3e58e67e75cb5e15","ssdeep":"","tlshash":"f1f05cd2df1447c851006011d939d8999815731489e19435f09daab257800aebdecbc0","size":454,"data":"","first_seen":"2025-05-28T10:36:56.314245Z","last_seen":"2025-10-19T23:43:44.689777Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ptichoolsougn.net/vignette.min.js","fqdn":"ptichoolsougn.net","domain":"ptichoolsougn.net","tld":"net"},"ip":{"addr":"172.67.128.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47afc3d0b4ca56a5b88479af6b5f9d6e","sha1":"b3e64ce65bf5747010692783f5a6473565235236","sha256":"6cfe347ce46c0f9a1f470231d152bed56dd5360b1a6d0ddf6bd204a68bf1e656","sha512":"3f158b52a265a0a5a4cbb7dd096aa07395df63c11bdbc8d17590d3b396dcdecdd4608b9d8fcfb3bcc88aeaadc8f36e95445e5fdf1de45e6ead776c1503dccf26","ssdeep":"3072:vw+08/+ugr0a9bQee57WSSybf0AEq7WYV9u5OVny6/PKSWxyScqe//kAoUBEMY:vwfjWCybdh7b9u5OVy6/PKSWx6m7tMY","tlshash":"e1f3fcc9768174562a63b030522fad5fb92b8e20585f8d04e166f0e93e3945ee353efc","size":168023,"data":"","first_seen":"2025-09-26T18:06:54.112071Z","last_seen":"2025-10-01T08:09:50.41967Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f646a3bf6021cf9b091ce25e3e02accd","sha1":"fd5856375a2de55c233b98cea458dd45ad731b7f","sha256":"1e03159bafb1e8ba958c5ee6d609084aea470aaa24fe3a05f4da41c152ab6006","sha512":"20427da1608f13ed273d760ae7ba1c6e2603935c9b641b199c69174801bb1ea9683838f9f3196eee6e2eed213fd313235937f9e9b3087f99e8b0934744818bdb","ssdeep":"","tlshash":"3f811eae25f2207397a3707e8aaf9104b23791d7000dae553c4d97807f58a3997b6bd8","size":3938,"data":"","first_seen":"2024-01-10T02:44:29Z","last_seen":"2026-04-08T15:58:32.561842Z","times_seen":809,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2115494b641b4e1a14f34d2d64552b29","sha1":"fae5e680c19b68b4e43ced6a9d5b2e16908f6b32","sha256":"8b73c45b8b1af92c506986362978acead1583913f419776f6db2196ec46a3b15","sha512":"0e957317b3213fbc19dfff0d255d5396b7185d40021df708f394950c33cf86dc272a3ab58adf7f4592a499e12d3b48903fe306a451f74bcba78557075c111d33","ssdeep":"","tlshash":"e9e0611dde3edbc502b620d2b282d38aa23e101e95049d12225e80857b71edf49dd604","size":369,"data":"","first_seen":"2025-04-23T04:06:55.142043Z","last_seen":"2026-04-08T15:58:32.572615Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"df2b5e52de60e369343479e91bb36b29","sha1":"f5d3d73c0ce0255d4899e6151e7a54aef1e26a7b","sha256":"5f82bdc3f3698939df748aa682bc49c5299d1cc25c6afbcc3e16ecf5fd0318f1","sha512":"e49f5ac5a73f8987a56f7adc538aeb1f8760b8e08261487c9f242b31a1fa00c520f658b5854fa265d7e95927641f6fb826d9805c8780a7569ce4205f3a643d4b","ssdeep":"","tlshash":"e811595f1682520844c879eb5e8310a5f134a991fa3da2e8a325a1107efbc1c97bb8cd","size":864,"data":"","first_seen":"2025-04-16T08:02:19.832585Z","last_seen":"2026-04-08T15:58:32.60046Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-11T12:14:31.217562Z","times_seen":22305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba04ce282da046cf55192a5e83149805","sha1":"c916ba55455060853a2531909c34c7a079efaa16","sha256":"6ff7bd06bf9aba3e4153d194ef4306ca57da5d933bc98c7c177b62678e97aa2a","sha512":"ad534e053d57453799833f095e6299891b3afe09ab31b9fe18c9149e227eee17c872ab4df2285e329a53acfc100d98d8d7557dcaea195b7438c6533c416f660e","ssdeep":"","tlshash":"3d70000a0802080208a0b80c2202220030003202803000800223a0203008283ac000c0","size":21,"data":"","first_seen":"2025-04-17T20:44:03.876522Z","last_seen":"2026-04-08T15:58:32.605143Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2060451?id=2060451\u0026jp=_cloxgncomdtfydhskaprku\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=43zlkTiaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=6026250039413248\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pi=UV9Rwg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b0405a8e4a2b8de846cc7f630867fd","sha1":"b8faa1fa53d54ab917a53cf9a14e84f68d42be87","sha256":"0d71e358a8ffde575cac45dea8542fa139f537a5544bcc95df6d7718130c8b89","sha512":"01128253d800f9ebf06d11a23ca3db586a96ae7e54b13d8ef9aa2d5db006af1e59517dd0da120401c32f5883e8003844e772d356e1dd89283ef6af47bbeb86d5","ssdeep":"192:LYE1dZTEvwkzwk5xc101iQyxP/o4u91MLfoCK:LYE1vGwk80IQyZ/o4u9UfoCK","tlshash":"31129ee56005df78da018bde27720e5b11995be500be8cde4b2dae5c02162b0c5e3a07","size":9035,"data":"","first_seen":"2025-09-27T09:23:21.741301Z","last_seen":"2025-09-27T09:23:21.741301Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-04-11T12:07:20.702336Z","times_seen":5347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6dfa16c1404eabda02d10aedda4ad1f","sha1":"a4825ed15a30ec25ef044bd25edcb049856be1bb","sha256":"8307c5064f797cd9935c4445c3fe449fb380b7bd909572c738af145fcbad9e54","sha512":"014de70adc472ede32e3f04307b6b886dbf67a613396099aa3edea1b7eb103fc8779e0b268528b30eaab6e570a31216aba90274a4cc3c961224a25d476ae8bed","ssdeep":"","tlshash":"c8a002e68de500557e1249823e326cac6555375c8c91b16da0a238e752cd37eaa37718","size":68,"data":"","first_seen":"2025-07-09T03:26:33.482011Z","last_seen":"2025-10-19T23:43:44.740593Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwpsrv.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","size":67344,"data":"","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-04-08T15:58:32.463Z","times_seen":299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarsahalfjis.com/en/jcamzead/ji?ukfp=862200\u0026dpv=1\u0026ndfaff=69045\u0026cs=3\u0026bzxw=709641\u0026upxmr=xkmy\u0026iiv=_cjeajvqyuylefdsjqvxsry\u0026id=2060451\u0026yegpjz=zjyq\u0026zq=jtq","fqdn":"rarsahalfjis.com","domain":"rarsahalfjis.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac370a8a0071b30e899d4de3e2248adc","sha1":"4564bedc72f42115e2b2c5ffbf09cda53c51873c","sha256":"c3a0ec5b871b116c7bf8b0ae79d9eca0cbdd8ac58461b52d3e2c9fc80258e66b","sha512":"89fb19cb5e3b1f7e1fa12b0497525ebb7fe4b5941b28403b3f9ddfd8e0ce7a7ba70b4015ea25bb6baec5a68bea29da0ff8678818e6c2963c73ceca5e3fab0c4b","ssdeep":"","tlshash":"62f0c0813596d4c19c211d2d79352f028ce715f6eda3371c2531f46ac54a5314f53f65","size":535,"data":"","first_seen":"2025-09-27T09:23:21.781606Z","last_seen":"2025-09-27T09:23:21.781606Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/polyfills.webvtt.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6dfd6bb68ee310e2f030cfe1f63ee4e","sha1":"69a2022e55d0866ddd65687463036d1a0b6fd4e0","sha256":"a7d6eabe884766f310f08ac76a12c72a5297672f13309863d9cded6613ed6a01","sha512":"e33f9847fd73c1c0022e79b5ab1a6fdb071f175862b7e2e752bc09812607243ab260934e980c4b25a71c84c8e9bef5f83730b69fc21a8d25cf5fdaf7fb8eaf40","ssdeep":"192:ABq24FoCUV2VB6yNfWntGhcKGoD7JF7lCL6MCUNmTCS7aiTd2iRn4QF7kxM+6Awl:ABq5FZUV2THN/CYnJrC1C7TCcHTdDR4O","tlshash":"5022d8a036f1649e8394d88f457a0190e2285571f98bc9cdf558cdf7dc30b8722aeb79","size":10446,"data":"","first_seen":"2025-04-16T11:00:53.641209Z","last_seen":"2025-11-11T18:38:31.852289Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/vttparser.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"aac63679e388c09f95e3e3cdbb52d771","sha1":"7262f57cc1346e607071201c4105c50b768ab87f","sha256":"c5ca49b071d946eb43acd7ddb2186e9b98bf95fc971bdebb0dcbfd4cabb3154b","sha512":"f9c0ee52e2c4eb6f2310725a1dcdf26f14109b605031695738f28ef14ff8bb0c86a35ec94940fe403939245f7193853bae0ec5feb1e4d09dfe21b1af9d69e199","ssdeep":"96:BMKCEZLCyGWaVDvTg7ksuFs0ad83YP8GBXZxqqDysNoqZl3brzVt8nPFJHP/65U6:BMjZyGtV/g7rK/a23GdZcqDyAb2nTpdm","tlshash":"9191e89024413c6daba6b69b00ef266043f8047d3d4d0e90b6a4dbab75396cf51b9bf1","size":4403,"data":"","first_seen":"2025-04-16T11:00:53.625974Z","last_seen":"2025-11-11T18:38:31.844695Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwplayer.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d3b7e0e4267402d0e259c9a21792258","sha1":"6220167731bbbb87609d184a95f5c4c2b2f8c72c","sha256":"190acb6da87bd161114f93feb270234b6ff00dafa7c98732c452ff447d4cef77","sha512":"4ae57475aa41d82ae52d0204e9978089995d10d72cf1c9beb686e1811a6bb7a7e24140f21ecc073b01e1209a20c5cf4b27f26ae82e981ef8d5374aeb9a1ba75b","ssdeep":"1536:oryPjl9oOHjCyj35oM8j03kwdtxwszufvL3v5qYtwR/iaCttHF3vLGCaUZfkJk80:FHJ1az3LpaUZfkO8bMdhdD5J","tlshash":"59e34ca631c2f4a603e224d6e47b4101f2790949384de9a4f66cecd7795a907b1b3fbc","size":155964,"data":"","first_seen":"2025-07-09T03:26:33.454125Z","last_seen":"2025-12-13T13:26:16.425699Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b7f650ed5e68a6093fb5079875dcb74","sha1":"ac248fb3710103047c295df6e4bff5a1e0e22e82","sha256":"f474421d0b21451cc69e9718fd24278d7137f131571ff402ed3ec6418ef15185","sha512":"602a8d3a689cff3801ed23b66ce644f962d1066329f14c2f8bdc7b67f4d51cd0752cb61fbbf903960bdd02f6f659e74135b252db04116ae7d95b4d3121e6f2c5","ssdeep":"","tlshash":"652121db134408740a8e25d6c757202831b220e9b90ea495986c8de01718a2fcb31acd","size":1158,"data":"","first_seen":"2025-05-28T10:36:56.319185Z","last_seen":"2025-10-19T23:43:44.758275Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","size":5124,"data":"","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-04-09T12:56:21.828467Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"1cf95757c58e27fb052532f0d99e2992","sha1":"24bc19599cc089d52d21ab774e6c4d4a72e814ad","sha256":"826de74e5d65a1158788aa20221d23d0b65b42937bb711427d0c21bbd9dedf09","sha512":"786bb80871f5b11ef3d8347c4e46ba560a3e4e661503f1e791e1c37643b4f71d087e2de5aadc9115134780366252473973d1a78e0c2e14eec75f2ff284582dfc","ssdeep":"","tlshash":"1e6000c00000000000000000003c0c00003003c000000033030300c3c003c3000c30c0","size":12,"data":"","first_seen":"2025-06-06T14:34:42.64777Z","last_seen":"2025-10-19T23:43:44.778331Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"49ff2300f43dca2ee8ad9e684f22aae9","sha1":"af3832931ea1cb6faf81664f356a2f7e7fd23ed9","sha256":"4668b1c4be37e700f7fa7f0514795b0e1dfd6c03eaf2d35e499cec8057bc1a01","sha512":"87ea65cc5a5458839efed99b98d2e6090c17dfffda9532d25163c7eac31800e66316b03a9920b954cdc5f7028aab674083198f700c166998233a1c38a852c3b1","ssdeep":"","tlshash":"b4b012fb65c040a83316b8922573dc8b5c0b46cfd9998410c87fe6e13c22219b5415c4","size":102,"data":"","first_seen":"2025-05-16T04:35:40.709687Z","last_seen":"2026-04-07T19:34:14.928289Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb730835811fc6164ad0c41a4748ebcb","sha1":"22c1d376d48813e67d49941f63eae358b293ee98","sha256":"459338ffa0b669fd235404d2e2f8b72ea1b402f1ca2fc557a6764e92b10cb43d","sha512":"3b0301bd6c088558a37e49bdee3a4f87d9faefda63412ba77f9ae1ff469cd81b3d14e38d84e56f2b89ae945e03f6fb7fc2f77e8d6c7ada4bbf58d21ac6e9dd61","ssdeep":"1536:iI7Xxg0FsqC7bWLL072UQQP1XICsYt9GjV/yuif2+MfJa71ZPUT2rb9p:t7h9FsqaWs7jZPxhVCvi+vAiT2X","tlshash":"7aa3c88939d6b84943b2e07501bf2ccbb5bb7d80700c9545c161e9b4fcf1aae91a3d6e","size":105552,"data":"","first_seen":"2025-05-28T10:36:56.321576Z","last_seen":"2025-10-19T23:43:44.767379Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"5dcd191ba6ba9ab9a8407921f37163d1","sha1":"78b504a48f7e3d66dee07c7af8e4263a67eafbbb","sha256":"7b370b05f0a21bb2285bd15e1cc991a39eff707d0fbb3c8d56dcbc197a7fd39c","sha512":"b73de02f82b8c997b81a175eb68bdfa1a3117bf8871e089fc8460d4fac6943926a6f273b4d54599ef3b5985bebf044fa4bb8a46cf5adb47659896f7f0d34d8d0","ssdeep":"","tlshash":"b5e0c27a78a902522ad131a77bcfb00882a9542e1d89dadff81d72200f6f819e51c68d","size":412,"data":"","first_seen":"2025-09-27T09:23:21.809511Z","last_seen":"2025-09-27T09:23:21.809511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwplayer.core.controls.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a349b8e256b710c33f59804e11824af","sha1":"4124b412899128cb8a2521e4f5c2ac88c2c143b1","sha256":"527933d04090c542ae6bff57a0dc240d927908d890e37b578effa55a310932ce","sha512":"8b8efd834ba24cfe9b0f96247bcbba7f2fc1c939a13ebf2cbb8c1e06bd890e5e07f29b82c3303f5498a2f998642ab7d798ab3eff4a975f9eee47175a5358136d","ssdeep":"3072:VM7nFu+slX/+8CtPIVcSJh0EcYSrJ4MOkVGvSwqzrpxMChYFwSC3G:VMxRU/+TAcSJh0lO0GvSVpGJFwSC3G","tlshash":"a07419322142523596e682da76514604b33a8085f506cfacff7ceddd4c6e98b31fabb4","size":343311,"data":"","first_seen":"2025-07-09T03:26:33.46094Z","last_seen":"2025-12-13T13:26:16.486694Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-11T12:07:20.624434Z","times_seen":6428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a62e460fbde44f2a530da62245211db4","sha1":"47114e7b018ddc2cda5b0ac878103af424d2da36","sha256":"8e5285581b6e3bd0dac80106deffb8850543fe58ab3f6f3e4610a7b489d97720","sha512":"925b0d7939f5060f59b27e6df6180aed396ebb7fe6051d639fc61845a2addbf7a4752ff37b4daf0c926762b4aefc8c0550c2b1f7592169ba47f9f2e74ad915b0","ssdeep":"","tlshash":"e901495b908a256deab7090b666b74e83f1b2811a0c1f42a714c14a0bb2275f62287db","size":849,"data":"","first_seen":"2025-05-28T10:36:56.324133Z","last_seen":"2025-10-19T23:43:44.775602Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"87c4d922e226e77f9897c4e0b19d824b","sha1":"26a4c1d7d8633ab9e69bff1d0db2d99d7554a3ca","sha256":"e4c6a0eca87129f832243887b254d7955082be5dcbccbdc52fb818b026d7b4f8","sha512":"1ca0504ebb3640fa8ea8a86cdbe8f67c668ab5fb74aa8bc742bca7d8de2548640fa1e1f8d2d14f0dfa11c9adb61fb2d5b54934fff02f587ff2d9a1bc2f5cbace","ssdeep":"192:o+xlXSixlLx7XKFTfCkARJW3YhTuYw2Kkk76lHL9TT:o+xlXSWlLx7aFmkAnW3iTbw226pd","tlshash":"e6f109ba3347aba703a50cd690bf5530e4794a093096c428f5bcac8738655c291b6e3a","size":7471,"data":"","first_seen":"2025-06-06T14:34:42.644531Z","last_seen":"2025-10-19T23:43:44.787402Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"33f2d43cfbfee7c46a032bd08b46d62b","sha1":"5c2b00937aafa52c5f84664f0d167b297ef91ead","sha256":"50c4267db594783b480f26d1f4e5c2d56a807cbfbc5dfbeba681a8a5da76fc60","sha512":"c23edb61dabf45e84b6032ad9ad9a7b4b29867055aebeffe9d55fe2ccbea6531800983b87c152d8963108063680636985eb6bcbaf510fca6c72b2d82daa279a0","ssdeep":"","tlshash":"fdd022a8e490c031584900c9303bdb99b93422082ae2b0c0c88e782c9d20fc31452ca4","size":200,"data":"","first_seen":"2025-09-27T09:23:21.813108Z","last_seen":"2025-09-27T09:23:21.813108Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/provider.hlsjs.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ad7c8f97ec3efd3fc7355f4b7ab863","sha1":"0cc23dd36c89c6c9d47da8957c638583e8a843da","sha256":"061bc2c8535bfb740a2c1a5dab6e4c91c5388b84609282356b6d67cb0d85be73","sha512":"221c0c31d6cb59acb129ca485960e2a56051d668b76926e2cbe1b1241c46c4f0e7b192d571adea369a0d04916f94a162a12806aff5089f954306a31c54263ccf","ssdeep":"6144:caK/sZg+NY3UbNe6rXTQoalFwc3JWPCaEqeeuFBWqWDJkw0dHhbBI7NEpg8kF4e9:zbNPDCFw2BWqWwHpt7Y","tlshash":"21c42ade3795a01683c2b1a5903f5617633a7d0a280cc16cfa2be9d72d79949b03bf74","size":574870,"data":"","first_seen":"2025-07-09T03:26:33.452721Z","last_seen":"2025-12-13T13:26:16.431753Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/build/assets/27-SABxh.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","size":1756,"data":"","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-04-08T15:58:32.49543Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/js/loader.bc4a6543429.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","size":83200,"data":"","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-04-08T15:58:32.517379Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7bce4b85ba18dce1f6c37ab9c2c16255","sha1":"fc1c599a6b81e0824bebe1a5ebc9417f7d2b88d0","sha256":"3456bffc735bf8d44ef7d5ad73c6dfb15801ddb1c1860e9c2e605acce821ace1","sha512":"2144987b5f80b183207066f1634913f612c6270679d3aab3fc44f652e2922e6225e5dd42dcd8d5cb4447d5ed07cead20267aa6d95cebfca91efbbf8e329ce4f8","ssdeep":"","tlshash":"eae0a90f3cea7968503330ba037782053e2a788b9045de08393c09e00f12336a20a20c","size":293,"data":"","first_seen":"2024-08-19T22:39:34.255809Z","last_seen":"2026-03-01T22:23:43.049844Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-11T13:00:55.451085Z","times_seen":138938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40a60a916037f3ca37c866df3081783c","sha1":"987e49cd01146c24973929f4cca601482a2b17c2","sha256":"5a2812b911f14efe1ef40d47e54afcbd954e8d154a6c92cb33fb408d5d805342","sha512":"7b7d444e9e3b741cbd2c69e1d9554de2836d767507ae2e4f24bc7b47aa8a1140b97d068439cd610cc57b37540624eed1071ef8a23de01560a8bbbd0558e719bb","ssdeep":"6144:Zn6+nrFiMAL09ap3bKgXmTkdys2mu9dGh5dTQHLmzPsH:hrs5dysbu+hsLmzPsH","tlshash":"5ea4f9cdb6a674669363f4f5403f010bb23bb8a6f408886cb649d9e16e749094277f7c","size":466648,"data":"","first_seen":"2025-09-27T09:23:21.753453Z","last_seen":"2025-09-27T09:23:21.753453Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f2f379634670cd2e6ef53028f19fa75","sha1":"14c0d48221c80dd6cc1749f390c1cb8f94a4324b","sha256":"b278e62ffd0866dc85f456f3013a5139c4e88372bc3016db963c5360d95d42f5","sha512":"3bed6bac577cceb1e53e6e71392d32f99ea5c8d5d64768dfff2efc1b50605d91387c7a98944f5495a510722f588e647835a999e9e96bc3d2e2019d49751cf314","ssdeep":"","tlshash":"94417e953cf234d803e741b33d3be34999863f9fac1487447b9da6090fa0e217ab59a4","size":2100,"data":"","first_seen":"2025-02-05T08:58:33.460793Z","last_seen":"2026-04-09T12:56:21.881144Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"72e89292dad5c7e8a82f6101fc52b71a","sha1":"11917db2f454df110fedaf803ebf640052f953b8","sha256":"1058329efc2e4de916dc58c5996ae6620836b878c33d13742b90f20ccddabe61","sha512":"995b449151db16173299bea7ea6a0df052295a5fa7f19a905863fe5e4278fd647569161df9ea2feb72d33eaafe4fe60cc3a8bc240af7aa2863e4da7b527386dd","ssdeep":"1536:Y2u4R3FNZRo3GiCNIUhxBsSU1UxYs5pfEzI:FRPLzybXotE8","tlshash":"21a31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","size":102873,"data":"","first_seen":"2024-04-21T22:28:32Z","last_seen":"2025-09-27T09:23:21.790129Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/in.js","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d6447e306adb18960f9dd148b172c81","sha1":"d33fed497f341dc0baa0e83b1455533c434ff086","sha256":"c7a70a01dda5a1fc6de6eae90531f7a5e44bfdd881ce0af3974a960dc61293b2","sha512":"4e0e22f580aa16e01b444334b77818a2ccfcf125ebe54210326cc10af931cbd37a5fa47594a2bb390176ab93c797848c194e282dc2969cc63173f1c9091a46a7","ssdeep":"1536:bYpaf/vhEHZ2ghxGvKXp1GJsmFvv7QkHed6xnvm23Q8yJdyciM6KmN3K976k7SbD:bYpaf/vdSX3uvzQkgNBZ7AbRVt1","tlshash":"cb04a64ea9433431c186b0d99b2fd50c6df598ebe0de482cc963c984f9f462ea139b74","size":180273,"data":"","first_seen":"2025-09-26T15:28:23.629463Z","last_seen":"2025-09-28T18:50:11.208905Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2060451?id=2060451\u0026jp=_cloxgncomdtfydhskaprku\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=kIwJNoIaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=6589199992835584\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"24a5d9dcef0f235d0a32ac09b16d1f42","sha1":"c25d5b06b6106b2fea0929709f11d05a53a27b59","sha256":"14ccdc9e878df3e17519c7a7f688b37c51df0bd3bce0c373eb8b2159a9e0e67b","sha512":"23cd5b3b1eff1a686f15034bc20dfdba4aeb1836e8178e1f02d0823c6eaf50590e5f46f11bd0ff67e2923ba35d4efd045799d56b5d6dc3a4b29a6e47c957c6b0","ssdeep":"","tlshash":"94f081a45c15f4d1a505cdaa63716fe388c0ba31df137901b500e6c5858463552a7ab2","size":548,"data":"","first_seen":"2025-09-27T09:23:21.769519Z","last_seen":"2025-09-27T09:23:21.769519Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0beac54daf16ad2d8235e5ae5b2a712a","sha1":"2c7dceda748b5be34b4b1cc057f8657ef986439f","sha256":"dae7da40b408a6e777d59a00838ae402f4abcf4be082be3b88a9068634a3fd8e","sha512":"ae7a9a036f48a4e1efcc0514710ba90854e26577569a600dbdb9063f92b52a82570523c89888d60b50e4c39b91beb974fc5d548db4c5a89392db1433c33f5373","ssdeep":"","tlshash":"48e0f102346d5660a4cb002f1a72223433a2359b3951885644cdc83b9ca0d44945d2e4","size":397,"data":"","first_seen":"2025-04-04T04:59:30.319262Z","last_seen":"2026-04-09T12:56:21.881912Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2060451?id=2060451\u0026jp=_cloxgncomdtfydhskaprku\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=43zlkTiaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=6026250039413248\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pi=UV9Rwg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /get/2060451?id=2060451\u0026jp=_cloxgncomdtfydhskaprku\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=43zlkTiaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=6026250039413248\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026pi=UV9Rwg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2509270422ba2d317c22bc437ca1738de7ba\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 31 Oct 2026 09:22:53 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 31 Oct 2026 09:22:53 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9035,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9035), with no line terminators","md5":"57b0405a8e4a2b8de846cc7f630867fd","sha1":"b8faa1fa53d54ab917a53cf9a14e84f68d42be87","sha256":"0d71e358a8ffde575cac45dea8542fa139f537a5544bcc95df6d7718130c8b89","sha512":"01128253d800f9ebf06d11a23ca3db586a96ae7e54b13d8ef9aa2d5db006af1e59517dd0da120401c32f5883e8003844e772d356e1dd89283ef6af47bbeb86d5","ssdeep":"192:LYE1dZTEvwkzwk5xc101iQyxP/o4u91MLfoCK:LYE1vGwk80IQyZ/o4u9UfoCK","tlshash":"31129ee56005df78da018bde27720e5b11995be500be8cde4b2dae5c02162b0c5e3a07","first_seen":"2025-09-27T09:23:21.741301Z","last_seen":"2025-09-27T09:23:21.741301Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=5db921df-44cd-4678-85c4-ae15ba789772","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:54.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=5db921df-44cd-4678-85c4-ae15ba789772 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 451\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 27 Sep 2025 09:22:54 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://jilliandescribecompany.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":78,"dns":0,"connect":27,"send":0,"wait":27,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/chicken.gif?z=2060451\u0026pb=6b5c78ecc1bc353285828c6dab6179b11758972173\u0026pbc=GH0HM8YP4sYNyddo\u0026pbi=cu-6REDs_w0Nyddo\u0026pbu=SmnkHKfl_wYNyddo\u0026psp=xkl_7Hy3jhVV8WC3USK9gwlfh5CUppNeSnwshH0FhoFp3RQ7L4aPg1kIN6MyfCzgZvZlpxDiIA4D3yqPveD-baKAzV2MWERtHbLv7zBCDxWCzMDqlEcHEjih2hyBTfbA9ffW7SJ-nt-u9gsuZw56x-3CKk1844JwYCSDh8dRVFRRUMVWJ__zESmy2YoWBjeuZ6MTfO_wcoMf9LWAWP4Yp0DcmA7aN8zmnNb9_2f18Jv9UwUDeTk2UWG4oCSrH8wXPksAfsZNaUc-UsXVhjtFOtUYRaOxOvM8NpOxJiC8Qb9mLB8IG4fahWwcu_bjzwjr2ePzJcEEJSiIVgGG9fte7JafoqLtdl-R_odCYmdV1nLeYocCz7hgVeJSJe1g3-CFzHdTVGyXOy5lfig1rfPEVl48KZC0b_LPBHcq3nAmZuXrCa8r0MclIvmO_32Hg07lYZyM9hW4n283TwlvsI70e1BalBOlUeD57-abTDgTT1jcLVWpJpjvcQf_aJSCFGZPe5fRNAHEW8BfWMk0ubQ_uH49WXojh9XIpx_wyFeyMPxTpJ8kvlR3CQ5w5Yh1RejWLH12oRzTYq3dFAKOrdPsdmwPrMmEssqJR84xlLzMxk_vYmve7ocfRzf4k4-mBV1DRF64gD2GLa2GwibqKXI3cNa02OULliJwEEVJeykdIYC23XDrL8H_VtlFDof2h9AZA-GP2b1YM8IA2adVXsqZU6IhnLup58wSdc5Dm-n8LtGM_PpIrWti_OLZU9wIZBkBV-HgDzftQhH4F82aphKDZZDF0xpK9Kyhilfw1jBU9CAMUdmqD8G40l78E2SXgTAcH-HLcyhFTcO4pny4iGabSZlfhkOUF9k19cVS-4RYMvVLrwXhQeogpLRmIF_YPtbrVWhyhAWHvkox4wEkbUqdFV1yVJHrMyz-LM66YDH9ILM_sOMYzT5lYhGh6I6aJxHc2OGCLmClbTn4HHj2sW8aT56qQkfujuCGCilMUqJnp6b3f-bF8haTASn4UhZLvCzyYIoXPXDH9KAMwPFcwMruVm7OFDJNDSGjRX20S9EOoNO3_RpvUSv3wBUQ_4GDUvgdTy6z4_ByLsD9U7_mrfmQycIq6ATW6ZufFeP_4kBGmUj30GjYou37R3_YjRQexCkLB5V3ZVWRmfnp2diFOO0EN8O1EYiG8i5TH3lIelICHCJc7XJB9HbQOQnHnt4kfHyqq4RJ_bTgzInWlcnbKMFRmOBRzElZZA7zipxDXgLHENZkb6q3zLINfQfBXeUtF65-gH8jFaRwh_aES39y3Oc7HTAcTh7p7AvF7PTXDrIJRAH4OLsizTrWJjR-sldu4Wy4O_fU1MuAr0JOxWeYfNErB096-mYz8j9UvXEVpmVXS20CpqdhTrBwd-sbCT9cqIO7ATI9M_iz5d9YihBI7I-jnkdDhBGJsmj-iHgnwrcz94FiaD1PYCkS6muatUiZXMwIr4fReXWkn5yuS2V07jfr7cABkO9PkzSICcYZyLuxzSQeUoTpI3f9jcpqqfXX-JiAlnI98XebcPdEqOThTRtnqjgNN6srY9fNFrGNdsvgZahPo9_ok5FEWCu2_oiKriqlHqyUCWENRGFmus2FUhp1AFO9infxAbmZOqCoXNRGMsik-4ET7nCJ-3JAMVBn-746TB-m1qyVLLamAsMW99GeF7dC433ie6FaEtNGmG4XAl0-sY8cGN3sAirxHIWEiONAE0NaG1gzO6bdLhGUiOig4pVPFlE4LCBcrbc69c6cN3fSmJ9Xe4ose0yisrFMHG9Ak10VXqUbM8JMZCUzDng5I92tXKIKVGK51rKPynp0jPhqlRdDUy6XPwKVIvQUQW1JMMqnTIo8NTQ9WQaP1ZYamqMRaMA96SncfhBdmJN5vc2e51r-HYlN4ZiosggORFnaCuVnlyXKO0xf-4ERxfHy5Afpvaigk1SKjV6meBEX_0z5JzAQyv5TeEHPO_c9ZzFmpcqbR2KidkXnXV2KNmIpAlCmN5oii3GeokSd3aZPD4Y8U0Qb3N0KQsdM2vKuVeu7ev9i3dTdmiF5G3cVb0hT0e1rQJgps46Jl5VtSQb-7s__K5GAtl_naVU-MeGD5BvZvmolIcJ4VBoVIsTK8dRXhsbjfxHUSuLmjUWBBZqg_WpAOC42gEA_kRBzz9sf2OKhY7cc7K0ofc3ZplWD8nO9Jtm52IJUG5CgLNUyMb-ARcaYX5a7LgFWCIIMr4qX-pisdmng_-NRkKYwhwC558TyCQcee6v5TVNVVvvW1rXUTwp5lx93IMJi--qiN6PoLQYq5I30iwbSNQ5nLK6JDkzkmipacjo6iQJcqR60svnxuwSLFA0MvaXSNZ79ASV6WRjCABXWJsLmcLZzB3Q4iFK1MYlD\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=x2MYu2XaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=5463300086140416\u0026caifrq=ABSSOAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=8\u0026pi=UV9Rwg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:55.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /chicken.gif?z=2060451\u0026pb=6b5c78ecc1bc353285828c6dab6179b11758972173\u0026pbc=GH0HM8YP4sYNyddo\u0026pbi=cu-6REDs_w0Nyddo\u0026pbu=SmnkHKfl_wYNyddo\u0026psp=xkl_7Hy3jhVV8WC3USK9gwlfh5CUppNeSnwshH0FhoFp3RQ7L4aPg1kIN6MyfCzgZvZlpxDiIA4D3yqPveD-baKAzV2MWERtHbLv7zBCDxWCzMDqlEcHEjih2hyBTfbA9ffW7SJ-nt-u9gsuZw56x-3CKk1844JwYCSDh8dRVFRRUMVWJ__zESmy2YoWBjeuZ6MTfO_wcoMf9LWAWP4Yp0DcmA7aN8zmnNb9_2f18Jv9UwUDeTk2UWG4oCSrH8wXPksAfsZNaUc-UsXVhjtFOtUYRaOxOvM8NpOxJiC8Qb9mLB8IG4fahWwcu_bjzwjr2ePzJcEEJSiIVgGG9fte7JafoqLtdl-R_odCYmdV1nLeYocCz7hgVeJSJe1g3-CFzHdTVGyXOy5lfig1rfPEVl48KZC0b_LPBHcq3nAmZuXrCa8r0MclIvmO_32Hg07lYZyM9hW4n283TwlvsI70e1BalBOlUeD57-abTDgTT1jcLVWpJpjvcQf_aJSCFGZPe5fRNAHEW8BfWMk0ubQ_uH49WXojh9XIpx_wyFeyMPxTpJ8kvlR3CQ5w5Yh1RejWLH12oRzTYq3dFAKOrdPsdmwPrMmEssqJR84xlLzMxk_vYmve7ocfRzf4k4-mBV1DRF64gD2GLa2GwibqKXI3cNa02OULliJwEEVJeykdIYC23XDrL8H_VtlFDof2h9AZA-GP2b1YM8IA2adVXsqZU6IhnLup58wSdc5Dm-n8LtGM_PpIrWti_OLZU9wIZBkBV-HgDzftQhH4F82aphKDZZDF0xpK9Kyhilfw1jBU9CAMUdmqD8G40l78E2SXgTAcH-HLcyhFTcO4pny4iGabSZlfhkOUF9k19cVS-4RYMvVLrwXhQeogpLRmIF_YPtbrVWhyhAWHvkox4wEkbUqdFV1yVJHrMyz-LM66YDH9ILM_sOMYzT5lYhGh6I6aJxHc2OGCLmClbTn4HHj2sW8aT56qQkfujuCGCilMUqJnp6b3f-bF8haTASn4UhZLvCzyYIoXPXDH9KAMwPFcwMruVm7OFDJNDSGjRX20S9EOoNO3_RpvUSv3wBUQ_4GDUvgdTy6z4_ByLsD9U7_mrfmQycIq6ATW6ZufFeP_4kBGmUj30GjYou37R3_YjRQexCkLB5V3ZVWRmfnp2diFOO0EN8O1EYiG8i5TH3lIelICHCJc7XJB9HbQOQnHnt4kfHyqq4RJ_bTgzInWlcnbKMFRmOBRzElZZA7zipxDXgLHENZkb6q3zLINfQfBXeUtF65-gH8jFaRwh_aES39y3Oc7HTAcTh7p7AvF7PTXDrIJRAH4OLsizTrWJjR-sldu4Wy4O_fU1MuAr0JOxWeYfNErB096-mYz8j9UvXEVpmVXS20CpqdhTrBwd-sbCT9cqIO7ATI9M_iz5d9YihBI7I-jnkdDhBGJsmj-iHgnwrcz94FiaD1PYCkS6muatUiZXMwIr4fReXWkn5yuS2V07jfr7cABkO9PkzSICcYZyLuxzSQeUoTpI3f9jcpqqfXX-JiAlnI98XebcPdEqOThTRtnqjgNN6srY9fNFrGNdsvgZahPo9_ok5FEWCu2_oiKriqlHqyUCWENRGFmus2FUhp1AFO9infxAbmZOqCoXNRGMsik-4ET7nCJ-3JAMVBn-746TB-m1qyVLLamAsMW99GeF7dC433ie6FaEtNGmG4XAl0-sY8cGN3sAirxHIWEiONAE0NaG1gzO6bdLhGUiOig4pVPFlE4LCBcrbc69c6cN3fSmJ9Xe4ose0yisrFMHG9Ak10VXqUbM8JMZCUzDng5I92tXKIKVGK51rKPynp0jPhqlRdDUy6XPwKVIvQUQW1JMMqnTIo8NTQ9WQaP1ZYamqMRaMA96SncfhBdmJN5vc2e51r-HYlN4ZiosggORFnaCuVnlyXKO0xf-4ERxfHy5Afpvaigk1SKjV6meBEX_0z5JzAQyv5TeEHPO_c9ZzFmpcqbR2KidkXnXV2KNmIpAlCmN5oii3GeokSd3aZPD4Y8U0Qb3N0KQsdM2vKuVeu7ev9i3dTdmiF5G3cVb0hT0e1rQJgps46Jl5VtSQb-7s__K5GAtl_naVU-MeGD5BvZvmolIcJ4VBoVIsTK8dRXhsbjfxHUSuLmjUWBBZqg_WpAOC42gEA_kRBzz9sf2OKhY7cc7K0ofc3ZplWD8nO9Jtm52IJUG5CgLNUyMb-ARcaYX5a7LgFWCIIMr4qX-pisdmng_-NRkKYwhwC558TyCQcee6v5TVNVVvvW1rXUTwp5lx93IMJi--qiN6PoLQYq5I30iwbSNQ5nLK6JDkzkmipacjo6iQJcqR60svnxuwSLFA0MvaXSNZ79ASV6WRjCABXWJsLmcLZzB3Q4iFK1MYlD\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=x2MYu2XaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=5463300086140416\u0026caifrq=ABSSOAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=2\u0026tp=0\u0026vp=8\u0026pi=UV9Rwg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2509270422ba2d317c22bc437ca1738de7ba\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:55 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ABSSOAAAAAAAAAAB; Path=/; Expires=Sun, 28 Sep 2025 09:22:55 GMT; Secure; SameSite=None\nBMI=AB8WewAAAAAAAAAB; Path=/; Expires=Sun, 28 Sep 2025 09:22:55 GMT; Secure; SameSite=None\nBCRI=HfA7fgAAAAAAAAAB; Path=/; Expires=Sun, 28 Sep 2025 09:22:55 GMT; Secure; SameSite=None\nOACICAP=ABSSOAAAAAAAAAAB; Path=/; Expires=Mon, 27 Oct 2025 09:22:55 GMT; Secure; SameSite=None\nOACIBLOCK=ABSSOAAAAABo129Q; Path=/; Expires=Mon, 27 Oct 2025 09:22:55 GMT; Secure; SameSite=None\nIMC_102=1; Path=/; Expires=Sun, 28 Sep 2025 09:22:55 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-11T13:00:12.897996Z","times_seen":20710,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/log/log_js_error","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:56.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"POST /log/log_js_error HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 446\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=oFr8vaMJMZsz8JkY; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Im9IRjZheks2MDNnU0QyR0NZRDB2M3c9PSIsInZhbHVlIjoibndKNHgrTm1iYnc0OXR5ZEl4VTR5bTArQjd4aVBQWjBnMWdBR3N0aVkwMVllY3daeEN1Zi80bjNYbmlHR1JTU2pmQ25hUGdSeE8wVGZuM3lyamp1QWlvMFdhNVBJUTlCUGdWWmNCajFzYVBRZVlFQ3V3bzRGd3NUTGhHY3JzVjAiLCJtYWMiOiJjMzRmZTU1ZWNiYzBmODg2ZDI2ZjkyMTU1OWFmZDFiZTllODk1YmI0OWQyYjQ5ZmI5NmVhMDU3Y2JiMzU2NmExIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImllcE5pby94NVIrQ25tOHNGb2NqaXc9PSIsInZhbHVlIjoiTzhMQ3pWa3Q4RVYzcndhWDZKVURQUVh5UmtIVmdiNHdwQVNYOGVQcDBQa1U1NUJBR25lNHlmQnpDaUs3QU8yNWlvWXVjY0w4eWdHaW9GTENBcFJmd0FJSzNFcWl2aytoTEhoS2FVT0hqSXo2ME95WC9oN1RTc3lOaEVTcWl4eG0iLCJtYWMiOiJlZDk4NzdkYzcyMGQ4NmFmZGQ1NmQ2ZDUxMGFkY2I5YTQ1ODdkZmY3MjQ3N2FmMWFjNzliODdkOTRlOWRmOWNiIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%22CAIFRQ%22%3A%22ABSSOAAAAAAAAAAB%22%2C%22CAIFRT%22%3A%22ABSSOAAAAABo2MDQ%22%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=F3ZNDa39B1HuDCZA; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:56 GMT\n__ddg10_=1758964976; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:56 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:56 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 27 Sep 2025 09:22:56 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11a4a7f4bdeb09fec0e96f5bfc77f8f8","sha1":"204b8ca987542dec72f121643984b47f1e53f0b1","sha256":"8f08745c17c60fa28f8dcdac4a36178dade1efcc73644373ad21fb98da3b25f0","sha512":"1ebed8602e4377789f06cb53363fd4388710e58a7a17947ed75de42f5c615c580f96e489e8e9a7d6b8a20d9347ed859cad085cc88ff5aea8845fee3688b68141","ssdeep":"","tlshash":"e3600003000cc0f0300300c0303c0300003c3000030000000c0c03300300c030000030","first_seen":"2025-06-07T12:23:50.48069Z","last_seen":"2025-10-23T17:26:41.07065Z","times_seen":82,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/SDtULpKyEeWwxnBWgb9+iQ.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"18.165.122.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /SDtULpKyEeWwxnBWgb9+iQ.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 08:52:07 GMT\r\ncache-control: max-age=1800, s-maxage=11940\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 314739a512b2afae40702e1a95e8f8de.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: HEL51-P2\r\nx-amz-cf-id: JJ1uuqcIBgBG27yPvYRZY-wi4ihz2B_Yoj263YBppg_8tfPHx7oSEQ==\r\nage: 1846\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c20f0b27ee245f6214ab8f902403fc2","sha1":"882fa6abcfe6e81134dd3b98c959cc6a934871b2","sha256":"6b96b9fc478c03f2288db09e54c9cc6c5cb4b8948e64877c4b7f073b4f5e852d","sha512":"e5aecce6a18bd15376413572f8b2c8c3de3e93827fb4452d9cb7a20520381c15d5edf7d444d0fe0ade8a45aef0b379a03338e76d46b41d5eba152749016dd53a","ssdeep":"","tlshash":"a0b01222fe8dd03c42f2311941037000c76041c24208403ce0005492a22573b1f50308","first_seen":"2025-06-06T12:03:22.571567Z","last_seen":"2025-09-27T09:23:21.750409Z","times_seen":89,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":55,"dns":11,"connect":14,"send":0,"wait":14,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/js/loader.bc4a6543429.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /js/loader.bc4a6543429.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=GlzvNG6FyCfgoWE9; __ddg10_=1758964972; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=D5RId4mwXG24bQmI; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 06 Sep 2025 18:22:21 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-14500\"\r\nexpires: Mon, 06 Oct 2025 18:22:21 GMT\r\nage: 1782032\r\ncontent-length: 26513\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":83200,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-04-08T15:58:32.517379Z","times_seen":229,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\nexpires: Sat, 27 Sep 2025 09:22:53 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 3900699134102606401\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 147314\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":466648,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2833)","md5":"40a60a916037f3ca37c866df3081783c","sha1":"987e49cd01146c24973929f4cca601482a2b17c2","sha256":"5a2812b911f14efe1ef40d47e54afcbd954e8d154a6c92cb33fb408d5d805342","sha512":"7b7d444e9e3b741cbd2c69e1d9554de2836d767507ae2e4f24bc7b47aa8a1140b97d068439cd610cc57b37540624eed1071ef8a23de01560a8bbbd0558e719bb","ssdeep":"6144:Zn6+nrFiMAL09ap3bKgXmTkdys2mu9dGh5dTQHLmzPsH:hrs5dysbu+hsLmzPsH","tlshash":"5ea4f9cdb6a674669363f4f5403f010bb23bb8a6f408886cb649d9e16e749094277f7c","first_seen":"2025-09-27T09:23:21.753453Z","last_seen":"2025-09-27T09:23:21.753453Z","times_seen":1,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":104,"dns":5,"connect":15,"send":0,"wait":51,"receive":45,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwpsrv.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwpsrv.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=DbkkWl8rqiCtLN0n; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=WKBTtnQuv9Z3yvaB; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 06 Sep 2025 18:22:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-10710\"\r\nexpires: Mon, 06 Oct 2025 18:22:18 GMT\r\nage: 1782035\r\ncontent-length: 19408\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-04-08T15:58:32.463Z","times_seen":299,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/favicon-16x16.png","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=sZfcVZ7YR7uC9AoT; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iXHKEI0EsXWgZF4H; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 10 Sep 2025 12:40:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 533\r\nlast-modified: Mon, 14 Aug 2023 01:22:26 GMT\r\netag: \"64d981d2-215\"\r\nexpires: Fri, 10 Oct 2025 12:40:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1456952\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4a1c219d978909f413ca1b9a39f7523d","sha1":"08859f796b01690ee81a13e4bcc0976f16c473ca","sha256":"dc91f3be29e28fa5aa027f4c3165a5df794424e66c1627b90a204482b470f0be","sha512":"898c1447a0dd59b40541b9720d28b191d01ce9e4e1d1c5e3ccae3e879a2249183fc74e752760f3ae0c16639c9dad6e8b5d00c627bbb4c5965c99aff1ec0aeada","ssdeep":"","tlshash":"fef020bc3323583cddcd9db641f51094a913d88c86c42d3cbec672ec44356a8c9e4036","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-04-09T12:56:21.851913Z","times_seen":926,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/images/logos/voe-logo.svg?v=2","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /s/images/logos/voe-logo.svg?v=2 HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=GlzvNG6FyCfgoWE9; __ddg10_=1758964972; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=MHfw48uj6LJuSX9X; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 24 Sep 2025 11:14:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Apr 2025 04:35:04 GMT\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000\r\ncontent-encoding: br\r\netag: \"680db3f8-74f\"\r\nexpires: Fri, 24 Oct 2025 11:14:20 GMT\r\nage: 252513\r\ncontent-length: 958\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1871,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bd6af39ad5f6b06bf2f48d4381f7e2d2","sha1":"446e69b85868537aea68fdca15b5a10694f894ed","sha256":"acf82d320d156d54ca827f03a45c073e0c00103dc78f1750cf011bc61e5216f6","sha512":"4d55b4c934ed6e3b4eae1e0f710f0866a2103a8dbfc13c6b957e85f763e51de0951091e41807bb6586a8865ace0e0a7bbc465bc48121c4c74c178780adfc5609","ssdeep":"","tlshash":"a2314445924ae339dda54338a39638d679e7dc4851b4e2e0b6cf2855f00c8f5d48cbba","first_seen":"2025-05-28T10:36:56.305059Z","last_seen":"2026-04-09T12:56:21.842095Z","times_seen":102,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:54.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:24:25 GMT","end":"Tue, 16 Dec 2025 05:21:54 GMT"},"fingerprint":{"sha1":"4D:D9:7B:8E:2E:B1:DF:4E:5A:71:CF:29:D6:3A:1D:7E:AA:3D:5A:A2","sha256":"88:8A:05:87:6E:69:15:70:D5:BC:48:78:60:76:1A:E9:45:82:CE:D7:2D:0B:89:EB:6B:09:58:DC:93:D4:79:E6"}}},"request":{"raw":"GET /www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 16893\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Mar 2025 02:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67d78504-41fd\"\r\nexpires: Sun, 28 Sep 2025 05:26:53 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 14161\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mpc6IijCaR2K7JboUKoNU%2BVsgS6pvxuxsjNODr7egNRr9%2F6MKc%2B3kJ24ExsK75b8PpquzUQRCOdsI4Pza2O8UPvsdaJzUvSK4gQ5W8GdIsP\"}]}\r\ncf-ray: 9859f07229ee8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"31f5bb5f43a7bd2800c6724e3a4125d2","sha1":"bc1bcd6aa31ac91dd34359c2fbbcaefb3e15c875","sha256":"e5dd86d52381d2bff5f1b74d3923443d3d95ced64048662307ed3ec2d52eb61b","sha512":"472e23766bb20f680ab31d5c358d9555ce56596444072978dd6340ca5e918aedcf1985a811c7f3f41b72bb15ce3df8ca98a2fddb5ec9a1eeb5f30d586fc7c23e","ssdeep":"384:wDIuIpXyvlnQ8HrcT30rRp8Rp6g9TzBtnL1Ti7DpHQ9:wsHyvBXHrQxF93By7DhQ9","tlshash":"0572c06f0a4a5703999d1c0d1eab7c9d667a425f007c2e6b23239c5cf94a36f6042df5","first_seen":"2025-03-17T02:19:44.486682Z","last_seen":"2025-11-29T07:50:01.235056Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":45,"dns":4,"connect":2,"send":0,"wait":6,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/images/logos/voe-logo-2.svg?v=2","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /s/images/logos/voe-logo-2.svg?v=2 HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=TZ58lu1GwwfUsp82; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Zoo89dYSorIARBkK; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 27 Sep 2025 06:47:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Apr 2025 04:35:03 GMT\r\netag: W/\"680db3f7-193\"\r\nexpires: Mon, 27 Oct 2025 06:47:51 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 9302\r\ncontent-length: 221\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a638d0dfa6feb7ce4b90e7c91c5b0df4","sha1":"7a0a86f47b51781f48bb9f232f05193936490027","sha256":"38b49bc67e053e96441e62f8423a9ed0e907ef768a0ffbba4370128760f814dc","sha512":"d0d5823062954b3398a974322a7f848f71ba602c2369c79ee16868904c2e66ff1a10152a221bf68d4d0f2abb167c730bacecd0855743c7c3b521523dac0edf54","ssdeep":"","tlshash":"abe06871d4aedc054640cb2ca3e7719124bd911233c03fece7b48e263e43a36512c2b8","first_seen":"2025-04-27T22:01:48.046871Z","last_seen":"2026-04-09T12:56:21.835602Z","times_seen":302,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/e32/57b/6f6/e3257b6f68b36174569379cb71c167a7ba5b54ef.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"104.20.30.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 07:49:13 GMT","end":"Wed, 12 Nov 2025 08:49:12 GMT"},"fingerprint":{"sha1":"53:C1:B1:A0:81:82:67:55:8A:65:59:03:C4:88:B8:86:25:56:63:88","sha256":"AB:A3:11:5C:99:77:7A:FE:E1:33:E4:5D:40:37:93:D6:BB:7D:D3:35:3B:ED:91:F9:87:66:23:2E:EA:7C:3D:B2"}}},"request":{"raw":"GET /pn/e32/57b/6f6/e3257b6f68b36174569379cb71c167a7ba5b54ef.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 56027\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=67078\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: c6c24990b7e35164c8d8346d4476a76b\r\nexpires: Mon, 29 Sep 2025 04:34:51 GMT\r\nlast-modified: Mon, 23 Dec 2019 09:12:09 GMT\r\nx-cdn-host-id: ds7288,ds7445,ds5951,ds7445,ds5833\r\nx-openstack-request-id: tx8d3cd2fd1e49448ab0565-0066cf3192\r\nx-proxy-cache: HIT\r\nx-timestamp: 1577092328.12642\r\nx-trans-id: tx8d3cd2fd1e49448ab0565-0066cf3192\r\ncf-cache-status: HIT\r\nage: 17282\r\ncf-ray: 9859f06efb82b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56027,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"50d4be94a7d5570e8581339691a7ae07","sha1":"3e98bb5bffda9e0f8558388a69624bc5d7554eee","sha256":"b902bf1edd68d7fcbb6deea218e9405664d94379a4481a41b17bf058db204553","sha512":"091cf5cb4eb5bad2667fee7da7b56927a8824ff43d0dd365ff7fa4db747377d72c21829c90f01145e032e4378c2436031fbf3eb9e68fc4e8e481c95a8f161c06","ssdeep":"1536:yNpUcPbHc/eSySxUuX4r1/73+ZuzojQAKm+rD/A:sUYTyXxXm1/L+ZXjxK3rzA","tlshash":"1443023ea095b5edd728cabcd969a7e970a657fed315b2e8dd00742727087d207e00c4","first_seen":"2025-07-02T00:19:46.767338Z","last_seen":"2025-12-01T08:51:26.278767Z","times_seen":121,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":45,"dns":2,"connect":1,"send":0,"wait":7,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"104.21.11.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:54.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 14:26:46 GMT","end":"Fri, 12 Dec 2025 07:20:07 GMT"},"fingerprint":{"sha1":"F3:16:05:8F:DD:38:43:0F:BB:E2:C4:D7:85:80:BC:FF:31:61:3D:76","sha256":"B5:31:C1:B7:C6:EF:62:4B:FF:EC:63:B7:C3:FC:AB:46:1C:7C:09:8C:E2:11:C2:6C:DC:B2:3A:57:84:15:F3:EC"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DL0ZbMjL6YkRuKGS3pd%2FalTqLeknzRvNTjS5VumLn4LKDsrC0nbWPmNWk%2BSQzma79m4NQ7RqioTlFUcV08ojx4m2nZC9cplnL7m%2F\"}]}\r\nage: 3350\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 9859f06fdac54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-04-11T12:07:20.624434Z","times_seen":6428,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":44,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/build/assets/27-SABxh.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /build/assets/27-SABxh.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=GlzvNG6FyCfgoWE9; __ddg10_=1758964972; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Gltcvf6MAYw3CwC2; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 06 Sep 2025 18:22:32 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-6dc\"\r\nexpires: Mon, 06 Oct 2025 18:22:32 GMT\r\nage: 1782021\r\ncontent-length: 743\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1755)","md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-04-08T15:58:32.49543Z","times_seen":229,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=5db921df-44cd-4678-85c4-ae15ba789772","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:54.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=5db921df-44cd-4678-85c4-ae15ba789772 HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1421\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Sat, 27 Sep 2025 09:22:54 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://jilliandescribecompany.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-04-11T13:01:57.375423Z","times_seen":56144,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":81,"dns":4,"connect":27,"send":0,"wait":27,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"172.67.166.60","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:57.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 04:24:25 GMT","end":"Tue, 16 Dec 2025 05:21:54 GMT"},"fingerprint":{"sha1":"4D:D9:7B:8E:2E:B1:DF:4E:5A:71:CF:29:D6:3A:1D:7E:AA:3D:5A:A2","sha256":"88:8A:05:87:6E:69:15:70:D5:BC:48:78:60:76:1A:E9:45:82:CE:D7:2D:0B:89:EB:6B:09:58:DC:93:D4:79:E6"}}},"request":{"raw":"GET /www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 27 Sep 2025 09:22:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 16893\r\nlast-modified: Mon, 17 Mar 2025 02:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67d78504-41fd\"\r\nexpires: Sun, 28 Sep 2025 05:26:53 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 14163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTsqFBtJwYD0d%2B1xkTrY86pKJAHZXDvC0A4fSsX2KULyhaSNAW4W0AeoD75YBsub4n1rNHZrxJljVSIJPMgHYW28sTLItW358L2I0uUryg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9859f0825f08b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"31f5bb5f43a7bd2800c6724e3a4125d2","sha1":"bc1bcd6aa31ac91dd34359c2fbbcaefb3e15c875","sha256":"e5dd86d52381d2bff5f1b74d3923443d3d95ced64048662307ed3ec2d52eb61b","sha512":"472e23766bb20f680ab31d5c358d9555ce56596444072978dd6340ca5e918aedcf1985a811c7f3f41b72bb15ce3df8ca98a2fddb5ec9a1eeb5f30d586fc7c23e","ssdeep":"384:wDIuIpXyvlnQ8HrcT30rRp8Rp6g9TzBtnL1Ti7DpHQ9:wsHyvBXHrQxF93By7DhQ9","tlshash":"0572c06f0a4a5703999d1c0d1eab7c9d667a425f007c2e6b23239c5cf94a36f6042df5","first_seen":"2025-03-17T02:19:44.486682Z","last_seen":"2025-11-29T07:50:01.235056Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ptichoolsougn.net/vignette.min.js","fqdn":"ptichoolsougn.net","domain":"ptichoolsougn.net","tld":"net"},"ip":{"addr":"172.67.128.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ptichoolsougn.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:00:13 GMT","end":"Mon, 17 Nov 2025 19:57:53 GMT"},"fingerprint":{"sha1":"DE:60:44:6F:82:77:62:E3:E6:30:36:EB:F3:5C:7C:2F:D8:A3:7E:3B","sha256":"3D:D8:BB:D2:77:BA:68:70:AE:4F:56:DF:F6:21:E2:C8:A9:A9:DD:FE:74:B9:D4:12:B9:6B:A2:AD:36:EE:1D:B1"}}},"request":{"raw":"GET /vignette.min.js HTTP/1.1\r\nHost: ptichoolsougn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 564\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 27 Sep 2025 09:13:29 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=leQ6J%2F6bQo8aKhzrDlSJt3AQz5%2F%2BGqxDJ3OkwWiWxKgmVObeN8gLW9PTveQil3yJmS2oYBjmt1%2FvvYFn3nO1r9ZkRirYDJw06INEhY2cv8yn\"}]}\r\ncf-ray: 9859f06c1e9ab1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168023,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"47afc3d0b4ca56a5b88479af6b5f9d6e","sha1":"b3e64ce65bf5747010692783f5a6473565235236","sha256":"6cfe347ce46c0f9a1f470231d152bed56dd5360b1a6d0ddf6bd204a68bf1e656","sha512":"3f158b52a265a0a5a4cbb7dd096aa07395df63c11bdbc8d17590d3b396dcdecdd4608b9d8fcfb3bcc88aeaadc8f36e95445e5fdf1de45e6ead776c1503dccf26","ssdeep":"3072:vw+08/+ugr0a9bQee57WSSybf0AEq7WYV9u5OVny6/PKSWxyScqe//kAoUBEMY:vwfjWCybdh7b9u5OVy6/PKSWx6m7tMY","tlshash":"e1f3fcc9768174562a63b030522fad5fb92b8e20585f8d04e166f0e93e3945ee353efc","first_seen":"2025-09-26T18:06:54.112071Z","last_seen":"2025-10-01T08:09:50.41967Z","times_seen":21,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":60,"dns":5,"connect":1,"send":0,"wait":7,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/chicken.gif?z=2060451\u0026pb=6b5c78ecc1bc353285828c6dab6179b11758972173\u0026pbc=GH0HM8YP4sYNyddo\u0026pbi=cu-6REDs_w0Nyddo\u0026pbu=SmnkHKfl_wYNyddo\u0026psp=eqIvkAkGZOpDCN86SHR5SSVnWQlqfy0r-ldKSRfx8Fwgw_5eeIGx8jDC9WI4W29zBM5WBrQO8xiBOLpCGks6rDzD2o4UJZjr3CvrRMAFEM1atbCG85K6R3SQFhItCRC-tR1Gs3qtKJi6K1hEBvYqC84J02tJ2-yqfCvpNtE5BdVxOPUBeUexd14EhpuUFIl4UPLEL--0Cp7DzXYz08MLRQp4Ves8V3y697TIKjBDv8oro6JR0CA_hl8hXI_5xluWe1kZR8sUDMIeftcGxQNsK933EWraOckj328au0wLMGynPKD_5J-ueMwoxCqx2bxa26UTHVYgrgQBq-j-5xRwKcJN75qjncYQVquZIzc3vq-SoAVAh5rZeMKdPnMRe1AQGUK1yQlyFviq_g3p2kMX-uhBh2iZqzST11kuzcaycAdqewKNbZTFB1YBGZkhGIBzycvI2DoxC2PJcqJwqEHlgPAevmsnlYJvDiFyrNCF7C2tKOOIPFiXtR4kLVTXqTU2wDb6SBc35bLe6cDEQ-dER2t_ZUaSUI8SdnloIYEnNcsTt13IjwJXltL6M6PCdcUPrldqaLNXtAmm7ut_7f10Jrj5VymNfw0KE8AqnHMDu4PeRm8GRRwXdrcV9yw4YxXXwzKqMHh8ECGpXcdGaUcM1ljemsAoDN98HdhAtNR-GNPwxY_X9bw7ehIMfksnmYTfx3GaEohkFPB85HAwh8XKxdKYlECejmx9FEe-C7ppfC4ZGzZzI7OZoHpoYkY5aOSyP_5c1mGtxSI9IJkRutSjH0NN2Y0heB8gFAWwj27MlCzi8ImsXRJ1hGO8NuFSgvpJU93UZb1Kf-4vGRIL3uwreweaPUGHrpmf6CrFtOxWb3QaesQsMlDQwZBZK7gYcO90SJeUomAc_MyZhopOlqtSQytTrn2imi9t5grGMFYULUw41nwf1fjfdCTVDFHua9CuUpXJg6vQIFnSJ8P_5SRcXUds98qiH-lShUBcNjAAQz-HjLxP9ciOD1g-Jd93b8_Lg552Tpx-RPNjN0BbPgz6XYdzRA2IeW9Ef-dg2cb_KqoLmrKMxvaQ1K-BghjTHXVwuDshNiMpkO53aAk9Mx5Ybk790stnr45O2bUBxJN_fsNuofKoOWKhiC217Kzo5txRnfUXkrfVbbMAm-9eIxk9No-BnAGjCEyWFku_qVJpovzSxeDoqG2UMzUB1woyYZYCD3kg2lmoJXAC4URy1d8f0aRWCyxQR8JgjTxYZMqkVcXFg-PsL1TX_sku_ooOn91hRShPKacjmPBO7wrMuyjJPQUgqZk7RN_DyNMHqxaUtTH6IpO3F9EpasOqCEqZggj8iuJSORp1QQcLznmDxpUvIS-Cn9VTk8YcYOnj33CKDpcJPHUWOLN4RzexkdfHIyHIzDdyaOwvnpDASz4HWX4sC01w9-l7yHdcCRfxbdySZm7Cr30R50D0VcndCUIH1IoT-9hUP1O-s3KURtk6IbA5wDjp8HNMch0T4rC8sxyEwrcp5-XPoxYlia2rVOW56LBlef6Tj3J_7hbi87MMHS4xR-Hxjmm7kVda7_x_jSSkK84MOoTb367zZZ28TSBVT0PbzVCman4R-VejIYM_QydJXgEbIhEVubAfkCKprfE6rUl1x9kMDhTLdnJB3Yk47FtMKNig13Fx67qSFQsNb7wpiTWrGArchdZxMavztagfeRz6kaHS8L27dFYcZd3dYcMqfDSbbTm3-17D2DT83R5uUcyannj_gaT8jYrgouZ3qu7uJieabHcRSv2D9_yMIQ3JOPi9oM0TEtFwCYMZuND5k0JOFQvSZR59AaiWP7SeqlJ_gciIZ-mmtjZusksrxhS4GjAkSS54AgYc4NcYZS5pN9wbsTIhFUrdPsXfKcfonaaiKW5NWzfOqDz0D1sG3QuJ2nYUyM2h4ymmEkh8YOh1ARoo0y4-FYOHaXRY4f3fmqkoO_aTnGFpyk2BtWyLjP3-YdC-o6fPlr1YYr_OOLMVG6d7AHEBJN7_QCV5ZKaeyRb2qyj9_pUt8HNk8A26exaGCs7v5p4sYrEszasLSbhq0nbnT_sWmrdhSgSPv--dq4dgLwamJVTW9b51lhC0eA6xK_nQi0VUf070Udr1Y_J-uURWrurgGzHGVvvfFjG2_eGpFj1OxY0cSBYNYRKG4HWe61Wa4MJrWa6Sx26vZ8w4Z8c3JLps70j7xQ57rLe5yU-BXyazmKJiRnTRG9JpWdJqbXI3W4j2qBBXsQdB2rAe78j5PpOTnyCUH-8PMiuwATL5c537itQlEb9R_S17ObmyBpneSblaQLMlZiubgYmkGtyPn0WuaL-mGmqx9P2p9wyQs2yyNHM5BqcDVsw2cKwP1i_I1talUW1fhb8wkJRTNOug\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=un989ybaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=7715099899910656\u0026caifrq=ABSSOAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pi=UV9Rwg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:56.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /chicken.gif?z=2060451\u0026pb=6b5c78ecc1bc353285828c6dab6179b11758972173\u0026pbc=GH0HM8YP4sYNyddo\u0026pbi=cu-6REDs_w0Nyddo\u0026pbu=SmnkHKfl_wYNyddo\u0026psp=eqIvkAkGZOpDCN86SHR5SSVnWQlqfy0r-ldKSRfx8Fwgw_5eeIGx8jDC9WI4W29zBM5WBrQO8xiBOLpCGks6rDzD2o4UJZjr3CvrRMAFEM1atbCG85K6R3SQFhItCRC-tR1Gs3qtKJi6K1hEBvYqC84J02tJ2-yqfCvpNtE5BdVxOPUBeUexd14EhpuUFIl4UPLEL--0Cp7DzXYz08MLRQp4Ves8V3y697TIKjBDv8oro6JR0CA_hl8hXI_5xluWe1kZR8sUDMIeftcGxQNsK933EWraOckj328au0wLMGynPKD_5J-ueMwoxCqx2bxa26UTHVYgrgQBq-j-5xRwKcJN75qjncYQVquZIzc3vq-SoAVAh5rZeMKdPnMRe1AQGUK1yQlyFviq_g3p2kMX-uhBh2iZqzST11kuzcaycAdqewKNbZTFB1YBGZkhGIBzycvI2DoxC2PJcqJwqEHlgPAevmsnlYJvDiFyrNCF7C2tKOOIPFiXtR4kLVTXqTU2wDb6SBc35bLe6cDEQ-dER2t_ZUaSUI8SdnloIYEnNcsTt13IjwJXltL6M6PCdcUPrldqaLNXtAmm7ut_7f10Jrj5VymNfw0KE8AqnHMDu4PeRm8GRRwXdrcV9yw4YxXXwzKqMHh8ECGpXcdGaUcM1ljemsAoDN98HdhAtNR-GNPwxY_X9bw7ehIMfksnmYTfx3GaEohkFPB85HAwh8XKxdKYlECejmx9FEe-C7ppfC4ZGzZzI7OZoHpoYkY5aOSyP_5c1mGtxSI9IJkRutSjH0NN2Y0heB8gFAWwj27MlCzi8ImsXRJ1hGO8NuFSgvpJU93UZb1Kf-4vGRIL3uwreweaPUGHrpmf6CrFtOxWb3QaesQsMlDQwZBZK7gYcO90SJeUomAc_MyZhopOlqtSQytTrn2imi9t5grGMFYULUw41nwf1fjfdCTVDFHua9CuUpXJg6vQIFnSJ8P_5SRcXUds98qiH-lShUBcNjAAQz-HjLxP9ciOD1g-Jd93b8_Lg552Tpx-RPNjN0BbPgz6XYdzRA2IeW9Ef-dg2cb_KqoLmrKMxvaQ1K-BghjTHXVwuDshNiMpkO53aAk9Mx5Ybk790stnr45O2bUBxJN_fsNuofKoOWKhiC217Kzo5txRnfUXkrfVbbMAm-9eIxk9No-BnAGjCEyWFku_qVJpovzSxeDoqG2UMzUB1woyYZYCD3kg2lmoJXAC4URy1d8f0aRWCyxQR8JgjTxYZMqkVcXFg-PsL1TX_sku_ooOn91hRShPKacjmPBO7wrMuyjJPQUgqZk7RN_DyNMHqxaUtTH6IpO3F9EpasOqCEqZggj8iuJSORp1QQcLznmDxpUvIS-Cn9VTk8YcYOnj33CKDpcJPHUWOLN4RzexkdfHIyHIzDdyaOwvnpDASz4HWX4sC01w9-l7yHdcCRfxbdySZm7Cr30R50D0VcndCUIH1IoT-9hUP1O-s3KURtk6IbA5wDjp8HNMch0T4rC8sxyEwrcp5-XPoxYlia2rVOW56LBlef6Tj3J_7hbi87MMHS4xR-Hxjmm7kVda7_x_jSSkK84MOoTb367zZZ28TSBVT0PbzVCman4R-VejIYM_QydJXgEbIhEVubAfkCKprfE6rUl1x9kMDhTLdnJB3Yk47FtMKNig13Fx67qSFQsNb7wpiTWrGArchdZxMavztagfeRz6kaHS8L27dFYcZd3dYcMqfDSbbTm3-17D2DT83R5uUcyannj_gaT8jYrgouZ3qu7uJieabHcRSv2D9_yMIQ3JOPi9oM0TEtFwCYMZuND5k0JOFQvSZR59AaiWP7SeqlJ_gciIZ-mmtjZusksrxhS4GjAkSS54AgYc4NcYZS5pN9wbsTIhFUrdPsXfKcfonaaiKW5NWzfOqDz0D1sG3QuJ2nYUyM2h4ymmEkh8YOh1ARoo0y4-FYOHaXRY4f3fmqkoO_aTnGFpyk2BtWyLjP3-YdC-o6fPlr1YYr_OOLMVG6d7AHEBJN7_QCV5ZKaeyRb2qyj9_pUt8HNk8A26exaGCs7v5p4sYrEszasLSbhq0nbnT_sWmrdhSgSPv--dq4dgLwamJVTW9b51lhC0eA6xK_nQi0VUf070Udr1Y_J-uURWrurgGzHGVvvfFjG2_eGpFj1OxY0cSBYNYRKG4HWe61Wa4MJrWa6Sx26vZ8w4Z8c3JLps70j7xQ57rLe5yU-BXyazmKJiRnTRG9JpWdJqbXI3W4j2qBBXsQdB2rAe78j5PpOTnyCUH-8PMiuwATL5c537itQlEb9R_S17ObmyBpneSblaQLMlZiubgYmkGtyPn0WuaL-mGmqx9P2p9wyQs2yyNHM5BqcDVsw2cKwP1i_I1talUW1fhb8wkJRTNOug\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=un989ybaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=7715099899910656\u0026caifrq=ABSSOAAAAAAAAAAB\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pi=UV9Rwg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2509270422ba2d317c22bc437ca1738de7ba; BCAI=ABSSOAAAAAAAAAAB; BMI=AB8WewAAAAAAAAAB; BCRI=HfA7fgAAAAAAAAAB; OACICAP=ABSSOAAAAAAAAAAB; OACIBLOCK=ABSSOAAAAABo129Q; IMC_102=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ABSSOAAAAAAAAAABABSSDQAAAAAAAAAB; Path=/; Expires=Sun, 28 Sep 2025 09:22:56 GMT; Secure; SameSite=None\nBMI=AB8WewAAAAAAAAABAB8WOwAAAAAAAAAB; Path=/; Expires=Sun, 28 Sep 2025 09:22:56 GMT; Secure; SameSite=None\nBCRI=HfA7fgAAAAAAAAABNKSzggAAAAAAAAAB; Path=/; Expires=Sun, 28 Sep 2025 09:22:56 GMT; Secure; SameSite=None\nIMC_102=2; Path=/; Expires=Sun, 28 Sep 2025 09:22:56 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-04-11T13:00:12.897996Z","times_seen":20710,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:57.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Sep 2025 09:22:57 GMT\r\ndate: Sat, 27 Sep 2025 09:22:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"0674bb1b4725131d0ccedb9f2119d9fa","sha1":"354de89c766f790720b9b55a28ce76bc2f2878e8","sha256":"37e93534f20120328ca625c0011682d90e4e4f4e702b0f90baf22d0c1f7fc8b4","sha512":"db19ac78c34f52d076a4b91cc180acb24697a1c8385c2d848ea0363ca684177c9f01de0a7115c165c8a01d4ea1441e86c98c8ae32292c15d0bd373500c52db23","ssdeep":"768:DFAFRFYFKFf4FQLFDFXFRKNyEfSQv3rgXU/9ffQiqGr8vkSfEQNVR1GJuofOQjLh:EcvMo1","tlshash":"32c2fba108174000978358e223cebf34fe4f92507141d0b5abfdab6bedcbc6652693ad","first_seen":"2025-09-09T04:12:34.447807Z","last_seen":"2025-11-18T23:33:55.824058Z","times_seen":1117,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 16:59:55 GMT\r\nexpires: Fri, 25 Sep 2026 16:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 145378\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-04-11T10:30:05.785263Z","times_seen":4516,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":48,"dns":1,"connect":15,"send":0,"wait":16,"receive":6,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/srt/09061/7lx4tml8qkwy_de.vtt","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /srt/09061/7lx4tml8qkwy_de.vtt HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=OgiXZhHomrA2CkYS; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=z1SSE5rTyKTyGwW0; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: text/vtt\r\ncontent-length: 614\r\nlast-modified: Wed, 19 Feb 2025 04:30:40 GMT\r\netag: \"67b55e70-266\"\r\nexpires: Mon, 27 Oct 2025 09:22:53 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614,"size_decoded":0,"mime_type":"text/vtt; charset=utf-8","magic":"WebVTT subtitles, Unicode text, UTF-8 text","md5":"0fc37e740ec72bd9a16a124001185472","sha1":"8c46a426593bcf7a26229505c0c48efad5b06075","sha256":"b6d74de3fd3d19980927b40b0e1130b1be97fcf028172e1a51c0f7b75108eafb","sha512":"8b4ecdc0b6ce19af7cac5352f0df6ca77d06406bd42b5c9f63875496cef8f99a14913c79f711627a606b2793354844b050d86bc37d8f23036b839a388f05ecf0","ssdeep":"","tlshash":"fff002421b3f0d0167b223c5f599034f4183801d47b0b0a14ad972ac76c273964c6d3e","first_seen":"2025-09-27T09:23:21.766554Z","last_seen":"2025-09-27T09:23:21.766554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 16:59:55 GMT\r\nexpires: Fri, 25 Sep 2026 16:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 145378\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-04-11T10:30:05.785263Z","times_seen":4516,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":85,"dns":1,"connect":15,"send":0,"wait":16,"receive":5,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Sep 2025 16:59:55 GMT\r\nexpires: Fri, 25 Sep 2026 16:59:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 145378\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-04-11T10:30:05.785263Z","times_seen":4516,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":41,"dns":0,"connect":14,"send":0,"wait":15,"receive":5,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/check.html","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 22 Sep 2025 06:11:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d0e8af-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2060451?id=2060451\u0026jp=_cloxgncomdtfydhskaprku\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=kIwJNoIaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=6589199992835584\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /get/2060451?id=2060451\u0026jp=_cloxgncomdtfydhskaprku\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.598-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IoqQ5POZHgoXUR39KqgZU88VCM-hNXWVsPCTpVIbFIUEQtsql-\u0026pcs=2\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=kIwJNoIaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS83bHg0dG1sOHFrd3k\u0026afid=6589199992835584\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=5\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 31 Oct 2026 09:22:53 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 31 Oct 2026 09:22:53 GMT; Secure; SameSite=None\nUID=2509270422ba2d317c22bc437ca1738de7ba; Path=/; Expires=Sat, 31 Oct 2026 09:22:53 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (548), with no line terminators","md5":"24a5d9dcef0f235d0a32ac09b16d1f42","sha1":"c25d5b06b6106b2fea0929709f11d05a53a27b59","sha256":"14ccdc9e878df3e17519c7a7f688b37c51df0bd3bce0c373eb8b2159a9e0e67b","sha512":"23cd5b3b1eff1a686f15034bc20dfdba4aeb1836e8178e1f02d0823c6eaf50590e5f46f11bd0ff67e2923ba35d4efd045799d56b5d6dc3a4b29a6e47c957c6b0","ssdeep":"","tlshash":"94f081a45c15f4d1a505cdaa63716fe388c0ba31df137901b500e6c5858463552a7ab2","first_seen":"2025-09-27T09:23:21.769519Z","last_seen":"2025-09-27T09:23:21.769519Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoojoujoaseeh.com/500/9013477?excludes=\u0026oaid=08025131386941b2ea6b811c6e5cdecd\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.736.0-s\u0026branchId=1093000\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2F7lx4tml8qkwy\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"zoojoujoaseeh.com","domain":"zoojoujoaseeh.com","tld":"com"},"ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:54.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoojoujoaseeh.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:25:26 GMT","end":"Sat, 18 Oct 2025 05:25:25 GMT"},"fingerprint":{"sha1":"30:29:A2:9B:3E:28:C3:21:31:20:F2:F2:68:4A:48:A2:7D:F3:1D:0B","sha256":"9C:EF:56:02:8A:83:02:95:40:13:37:EF:17:5F:90:80:65:60:60:0C:02:CC:95:D6:61:4B:30:10:A4:DE:CB:ED"}}},"request":{"raw":"OPTIONS /500/9013477?excludes=\u0026oaid=08025131386941b2ea6b811c6e5cdecd\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.736.0-s\u0026branchId=1093000\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2F7lx4tml8qkwy\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: zoojoujoaseeh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://jilliandescribecompany.com/\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:54 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-11T12:55:49.320816Z","times_seen":13621212,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":84,"dns":0,"connect":27,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoojoujoaseeh.com/500/9013477?excludes=\u0026oaid=08025131386941b2ea6b811c6e5cdecd\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.736.0-s\u0026branchId=1093000\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2F7lx4tml8qkwy\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"zoojoujoaseeh.com","domain":"zoojoujoaseeh.com","tld":"com"},"ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:54.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoojoujoaseeh.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:25:26 GMT","end":"Sat, 18 Oct 2025 05:25:25 GMT"},"fingerprint":{"sha1":"30:29:A2:9B:3E:28:C3:21:31:20:F2:F2:68:4A:48:A2:7D:F3:1D:0B","sha256":"9C:EF:56:02:8A:83:02:95:40:13:37:EF:17:5F:90:80:65:60:60:0C:02:CC:95:D6:61:4B:30:10:A4:DE:CB:ED"}}},"request":{"raw":"GET /500/9013477?excludes=\u0026oaid=08025131386941b2ea6b811c6e5cdecd\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.736.0-s\u0026branchId=1093000\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=0\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2F7lx4tml8qkwy\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: zoojoujoaseeh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: OAID=08025131386941b2ea6b811c6e5cdecd\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:54 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: b59277ec8336f9f0f4681c29c048ee6b\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08025131386941b2ea6b811c6e5cdecd; expires=Sun, 27 Sep 2026 09:22:54 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2066,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"205756c76efaf10948617effe0f78d81","sha1":"d6b4fe96bcdf355fc9ef86f82c1792e3753722fd","sha256":"4f97e9adec0dc79f2512693f4214b22db012ec48bd8e3d75454c61f451fe518b","sha512":"f357993d562239184d56668952686e4f0bcb2dd7cac09e09c90a1d0f5c960329eae3b88c4609eb966e0806376fa5c5c173d210e09637da02cd4131ce5da37082","ssdeep":"","tlshash":"27411ac2c2eb5233730d65d30075153ad18a2907258940ede2bde0a8da7bda17dcb4d0","first_seen":"2025-09-27T09:23:21.771715Z","last_seen":"2025-09-27T09:23:21.771715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Figtree:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Figtree:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 27 Sep 2025 09:22:53 GMT\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2508,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3aa2ab6d0fb8d300056983c0ffb25f19","sha1":"b991567dda2fc5ff930ee96daf48ff4344436144","sha256":"1243dafebfbffbba4c76b4c374ba4ca071e8b3e951b9944962e78822c13e2770","sha512":"2610f46796da1f3821906bbb194acab4f6f18b33487695c0d341405fba6cd953e2f344d6fc20764d2d485e7c286d5a1ce41a285ad4956364816ce700d2248cd3","ssdeep":"","tlshash":"4951ce81086ba504df930dc152cd7e33ef5ea390684599349efe189cacead675312b4d","first_seen":"2025-09-12T16:05:45.649556Z","last_seen":"2026-04-09T12:56:21.86232Z","times_seen":200,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":171,"dns":1,"connect":16,"send":0,"wait":35,"receive":0,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/provider.hlsjs.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /jwplayer/8.38.2/provider.hlsjs.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=DbkkWl8rqiCtLN0n; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=CZ2hRDTkGCLTqruv; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 06 Sep 2025 18:22:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-8c596\"\r\nexpires: Mon, 06 Oct 2025 18:22:18 GMT\r\nage: 1782035\r\ncontent-length: 161731\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":574870,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28ad7c8f97ec3efd3fc7355f4b7ab863","sha1":"0cc23dd36c89c6c9d47da8957c638583e8a843da","sha256":"061bc2c8535bfb740a2c1a5dab6e4c91c5388b84609282356b6d67cb0d85be73","sha512":"221c0c31d6cb59acb129ca485960e2a56051d668b76926e2cbe1b1241c46c4f0e7b192d571adea369a0d04916f94a162a12806aff5089f954306a31c54263ccf","ssdeep":"6144:caK/sZg+NY3UbNe6rXTQoalFwc3JWPCaEqeeuFBWqWDJkw0dHhbBI7NEpg8kF4e9:zbNPDCFw2BWqWwHpt7Y","tlshash":"21c42ade3795a01683c2b1a5903f5617633a7d0a280cc16cfa2be9d72d79949b03bf74","first_seen":"2025-07-09T03:26:33.452721Z","last_seen":"2025-12-13T13:26:16.431753Z","times_seen":141,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08025131386941b2ea6b811c6e5cdecd; expires=Sun, 27 Sep 2026 09:22:53 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9859f06cff8a56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f09ee771a32d17c6b88763dc9b98c3c3","sha1":"219354f332924d255f44c1f87a1193e201f4a5b3","sha256":"992aa8872e03abf4b35198b2a85f15a9da55c248c6616785bea23a5c416c1fe7","sha512":"0d1d101a8ddb3cbcfb80775e8cf939136ad7997693d525ae4ef579879c093c9528c6214c43e75b1f498b0c2444d4dae31452c4fa36a92c7c2e1c86a87625010e","ssdeep":"","tlshash":"caa002a08c590fa983805f1dfd5acb819019124165556b085ad9d801559654c55c9646","first_seen":"2025-09-27T09:23:21.775184Z","last_seen":"2025-09-27T09:23:21.775184Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":48,"dns":4,"connect":2,"send":0,"wait":34,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoojoujoaseeh.com/401/9013477?oo=1\u0026sw_version=v1.736.0-s\u0026oaid=08025131386941b2ea6b811c6e5cdecd\u0026st=true","fqdn":"zoojoujoaseeh.com","domain":"zoojoujoaseeh.com","tld":"com"},"ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoojoujoaseeh.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:25:26 GMT","end":"Sat, 18 Oct 2025 05:25:25 GMT"},"fingerprint":{"sha1":"30:29:A2:9B:3E:28:C3:21:31:20:F2:F2:68:4A:48:A2:7D:F3:1D:0B","sha256":"9C:EF:56:02:8A:83:02:95:40:13:37:EF:17:5F:90:80:65:60:60:0C:02:CC:95:D6:61:4B:30:10:A4:DE:CB:ED"}}},"request":{"raw":"POST /401/9013477?oo=1\u0026sw_version=v1.736.0-s\u0026oaid=08025131386941b2ea6b811c6e5cdecd\u0026st=true HTTP/1.1\r\nHost: zoojoujoaseeh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2627\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: application/json\r\nx-trace-id: 7d0b9b7ba9cdec301c4b06b427eca013\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08025131386941b2ea6b811c6e5cdecd; expires=Sun, 27 Sep 2026 09:22:53 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2162,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e3b35d969a9256b7acbae28d2da329cc","sha1":"ea1584340ed5b9c7a0eaf1b9ddee1dd2d4517838","sha256":"39eb1edc837f07de9645a0bf2b27975a9102004d86762d5f6c8188d3f0085191","sha512":"8f557ea653600d150561b9c8d0b15ed2face4d745cc6ddd00ed6be62d6173060480b7a2dcc953149bd602b1cf0db399c5bb7747a8a27b1ef39c010b2a4ec0b3c","ssdeep":"","tlshash":"d24123088d28417e82ee4ab5ec0b6d471bb9021f3a0c762ee7454d1770ebce503eb20b","first_seen":"2025-09-27T09:23:21.777092Z","last_seen":"2025-09-27T09:23:21.777092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":86,"dns":4,"connect":27,"send":0,"wait":34,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/7lx4tml8qkwy","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-27T09:22:52.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /7lx4tml8qkwy HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=GlzvNG6FyCfgoWE9; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:52 GMT\n__ddg10_=1758964972; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:52 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:52 GMT\n__ddg1_=WF1rupCdqZSkIpo2mafa; Domain=.jilliandescribecompany.com; HttpOnly; Path=/; Expires=Sun, 27-Sep-2026 09:22:52 GMT\nXSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; expires=Sat, 27 Sep 2025 10:52:52 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D; expires=Sat, 27 Sep 2025 10:52:52 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 09:22:52 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"ShareThis","description":"ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.","website":"https://sharethis.com","common_platform_enumeration":"","icon":"ShareThis.png","categories":["Widgets"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":167422,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (38936)","md5":"21a1105f24929ac2508f6e89acdac9de","sha1":"53b110eb26af626ed979a3913b4b4d88e38950b3","sha256":"4d150ee44ae382ae231fe7d58c5967b4fb4d3102f1220e9be90fad47ebc73324","sha512":"a4bf449f738273276c9694bf37cbc741ebc1f981252eb06b2eff1f97102da702675bd2b931ad2294c6d42eaee14df61bf50739d7f84b4ca4b3cac5c32aef5b42","ssdeep":"3072:3jKzP7hXQ/JL7h9FsqaWs7jZPxhVCvi+vAiT2P++PW06HbW:gW7laWs7lP2i+v8P++Pl","tlshash":"33f32b8534f2b45903b2d0b1017f28dbb5bb7d82a0099444f1addab0ffe5e9a9463d2d","first_seen":"2025-09-27T09:23:21.778923Z","last_seen":"2025-09-27T09:23:21.778923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":61,"dns":0,"connect":28,"send":0,"wait":125,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/images/logos/voe-logo-2.svg","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /s/images/logos/voe-logo-2.svg HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=DbkkWl8rqiCtLN0n; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=sZfcVZ7YR7uC9AoT; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 28 Aug 2025 18:57:56 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Apr 2025 04:35:04 GMT\r\netag: W/\"680db3f8-193\"\r\nexpires: Sat, 27 Sep 2025 18:57:56 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2557497\r\ncontent-length: 221\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a638d0dfa6feb7ce4b90e7c91c5b0df4","sha1":"7a0a86f47b51781f48bb9f232f05193936490027","sha256":"38b49bc67e053e96441e62f8423a9ed0e907ef768a0ffbba4370128760f814dc","sha512":"d0d5823062954b3398a974322a7f848f71ba602c2369c79ee16868904c2e66ff1a10152a221bf68d4d0f2abb167c730bacecd0855743c7c3b521523dac0edf54","ssdeep":"","tlshash":"abe06871d4aedc054640cb2ca3e7719124bd911233c03fece7b48e263e43a36512c2b8","first_seen":"2025-04-27T22:01:48.046871Z","last_seen":"2026-04-09T12:56:21.835602Z","times_seen":302,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/polyfills.webvtt.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /jwplayer/8.38.2/polyfills.webvtt.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=OgiXZhHomrA2CkYS; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=z5IiSg1R6enWEOca; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 07 Sep 2025 21:52:24 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-28d3\"\r\nexpires: Tue, 07 Oct 2025 21:52:24 GMT\r\nage: 1683029\r\ncontent-length: 4108\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":10451,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10441), with no line terminators","md5":"e6dfd6bb68ee310e2f030cfe1f63ee4e","sha1":"69a2022e55d0866ddd65687463036d1a0b6fd4e0","sha256":"a7d6eabe884766f310f08ac76a12c72a5297672f13309863d9cded6613ed6a01","sha512":"e33f9847fd73c1c0022e79b5ab1a6fdb071f175862b7e2e752bc09812607243ab260934e980c4b25a71c84c8e9bef5f83730b69fc21a8d25cf5fdaf7fb8eaf40","ssdeep":"192:ABq24FoCUV2VB6yNfWntGhcKGoD7JF7lCL6MCUNmTCS7aiTd2iRn4QF7kxM+6Awl:ABq5FZUV2THN/CYnJrC1C7TCcHTdDR4O","tlshash":"5022d8a036f1649e8394d88f457a0190e2285571f98bc9cdf558cdf7dc30b8722aeb79","first_seen":"2025-04-16T11:00:53.641209Z","last_seen":"2025-11-11T18:38:31.852289Z","times_seen":23,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarsahalfjis.com/en/jcamzead/ji?ukfp=862200\u0026dpv=1\u0026ndfaff=69045\u0026cs=3\u0026bzxw=709641\u0026upxmr=xkmy\u0026iiv=_cjeajvqyuylefdsjqvxsry\u0026id=2060451\u0026yegpjz=zjyq\u0026zq=jtq","fqdn":"rarsahalfjis.com","domain":"rarsahalfjis.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Wed, 28 May 2025 11:44:42 GMT","end":"Sun, 23 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"CC:81:1B:22:61:35:0F:32:D3:4B:76:35:5F:D2:04:AD:CA:57:32:2D","sha256":"21:6C:6F:3E:A1:18:45:19:5B:AA:06:98:6E:B9:2D:34:4B:4F:D7:6C:37:50:51:FE:1E:03:65:62:3E:8A:F4:C7"}}},"request":{"raw":"GET /en/jcamzead/ji?ukfp=862200\u0026dpv=1\u0026ndfaff=69045\u0026cs=3\u0026bzxw=709641\u0026upxmr=xkmy\u0026iiv=_cjeajvqyuylefdsjqvxsry\u0026id=2060451\u0026yegpjz=zjyq\u0026zq=jtq HTTP/1.1\r\nHost: rarsahalfjis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Sat, 31 Oct 2026 09:22:53 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Sat, 31 Oct 2026 09:22:53 GMT; Secure; SameSite=None\nUID=2509270422fef3df4173134886910d39d852; Path=/; Expires=Sat, 31 Oct 2026 09:22:53 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (535), with no line terminators","md5":"ac370a8a0071b30e899d4de3e2248adc","sha1":"4564bedc72f42115e2b2c5ffbf09cda53c51873c","sha256":"c3a0ec5b871b116c7bf8b0ae79d9eca0cbdd8ac58461b52d3e2c9fc80258e66b","sha512":"89fb19cb5e3b1f7e1fa12b0497525ebb7fe4b5941b28403b3f9ddfd8e0ce7a7ba70b4015ea25bb6baec5a68bea29da0ff8678818e6c2963c73ceca5e3fab0c4b","ssdeep":"","tlshash":"62f0c0813596d4c19c211d2d79352f028ce715f6eda3371c2531f46ac54a5314f53f65","first_seen":"2025-09-27T09:23:21.781606Z","last_seen":"2025-09-27T09:23:21.781606Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":77,"dns":0,"connect":20,"send":0,"wait":20,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:57.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 23:17:32 GMT\r\nexpires: Tue, 22 Sep 2026 23:17:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 381925\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-11T12:56:17.699134Z","times_seen":729584,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21170\r\ncf-ray: 9859f06a39610daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65d4c5f6-52b2\"\r\nlast-modified: Tue, 20 Feb 2024 15:32:06 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 95769\r\nexpires: Thu, 17 Sep 2026 09:22:53 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P1hQQ%2B4kJVu9S5uAshZWJMLCLycEGT7Bqnng%2FEgkbpZiBq01e4XSZ71iCJ1IYcZGucwDkKArI7cWeNWB%2BfRgmiwYMx7vPdFN29zr2S4IVdqtYjGUXyssl81%2B7bTnUaTmk2iTjzRd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-04-11T12:14:31.217562Z","times_seen":22305,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1810\r\ncf-ray: 9859f06bcfb58deb-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04017-1404\"\r\nlast-modified: Mon, 04 May 2020 16:17:27 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 189849\r\nexpires: Thu, 17 Sep 2026 09:22:53 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9fI0jNEzscNZwkBp8MG0tEXDBQy%2FBOZBiRlTd9O9XS54CPpNl7J3dsIP47i%2FJk%2Fo9oY5Pw8%2BvSL66PpP1%2BwLT9IDHl5hE6fAWs8WwrpfqAnei%2F9b5jYUA6cDNIfjpr14mlQ%2BdLXS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5124,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-04-09T12:56:21.828467Z","times_seen":390,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/engine/storyboard/7lx4tml8qkwy?t=0","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /engine/storyboard/7lx4tml8qkwy?t=0 HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=OgiXZhHomrA2CkYS; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=lOW9RjuAb7t7QzPo; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\nXSRF-TOKEN=eyJpdiI6ImhqMXRxTmwwTHh2NWczQWxKWllGQ0E9PSIsInZhbHVlIjoiWWxQSFdjSjJrWDYxYkxjRmFjMHgyK3ZleE1YREh2M1FKWElqOEM4N2VCbDRWN3A5NE9NK1lzeFpWOWxRMCtLVVJQUzBWcGViaFBRK25tSUZMTXlycmxvWkZrZWVaVlhJZjErMGVycFN3bU5IWjdNY1c3bFlsaDkzWkNGMW9wbzYiLCJtYWMiOiI1YzkyZDRjN2VmYmRmOTE1YWVmZTNlYTNkODYyZDQ5NGI2MzhmNjU1YzYyNmY1MDc4OTZiZDQxOWUxZWVkYjVlIiwidGFnIjoiIn0%3D; expires=Sat, 27 Sep 2025 10:52:53 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6InREV2Zxci9XWXRwaTA5KytUKzljRFE9PSIsInZhbHVlIjoidk9aRTNoc3dSczZ6cE9oZnZrWjJsWTZ5c0o2M0hjYjhOYmdWL25XUGJIaU5DOXhreEZYeGE1MjgyN3YvbmI4NXNmTVRPWEZRTHdNWDlpemhqTFZ5WG5QVFBlUVBrNDFYRWQvcDNsU08yMGRLQVdHZThMdHM3aDZBeE43bEh4aXgiLCJtYWMiOiIzYTdmYTc4N2ViNTNhNmY0MTkwOWRmNjgwNDE5NjQzYmI2YTQwZWE2NDAxYjBlMGI1ZjdlZjBlZDlkNmM5MGQwIiwidGFnIjoiIn0%3D; expires=Sat, 27 Sep 2025 10:52:53 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/vtt; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12570,"size_decoded":0,"mime_type":"text/vtt; charset=UTF-8","magic":"WebVTT subtitles, ASCII text","md5":"f3b5671e1f64883491e83bbad8da9e31","sha1":"3f7c52af071cb26ecea741e50ae7d41fccaa8556","sha256":"9fdd36b7a1d05f58b60648f0c9e29b9bcff204cfc004184da098415fa6c89c11","sha512":"001b087273df7129dd952bfa2c5c631152b11afc2fce4c04c16ed05067a4cca7f092cfc19723474784701a8bfa2fbb9209c6343fc766ada56eef67c42120f182","ssdeep":"96:L/YRYcY4YaYIYTY9YJ8YVYmYvYi/YHaYoYeYVYfYKYfYzIYxIYPYSY8FY1YdWvYs:bmn7fJvUhO/3Q","tlshash":"5e4229e147bd74954d844a209af07e9cc622c2ce8fd4a8e928c1b5e175d763e4f3bb01","first_seen":"2025-09-27T09:23:21.785394Z","last_seen":"2025-09-27T09:23:21.785394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:57.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 22 Sep 2025 23:17:32 GMT\r\nexpires: Tue, 22 Sep 2026 23:17:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 381925\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-11T12:56:17.699134Z","times_seen":729584,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 9859f069b8430daa-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 236023\r\nexpires: Thu, 17 Sep 2026 09:22:53 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=v7JkvgezoGNvVqbPgGgBeMMGOtsD0ggN%2FdX1c3Y%2Fdlob%2FoxWuAKZJtbDd9z7AWSHHK3jqAIweu6ODaZuCu6c6fVn6RBTicrRxpJkUXcR121wVPs8RitUgwC034yvRNEjFrg1%2B91U\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-11T13:00:55.451085Z","times_seen":138938,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":4,"dns":0,"connect":2,"send":0,"wait":11,"receive":1,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/in.js","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 25 Sep 2025 14:46:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68d555d1-2c031\"\r\nexpires: Sat, 04 Oct 2025 09:22:53 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":180273,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6d6447e306adb18960f9dd148b172c81","sha1":"d33fed497f341dc0baa0e83b1455533c434ff086","sha256":"c7a70a01dda5a1fc6de6eae90531f7a5e44bfdd881ce0af3974a960dc61293b2","sha512":"4e0e22f580aa16e01b444334b77818a2ccfcf125ebe54210326cc10af931cbd37a5fa47594a2bb390176ab93c797848c194e282dc2969cc63173f1c9091a46a7","ssdeep":"1536:bYpaf/vhEHZ2ghxGvKXp1GJsmFvv7QkHed6xnvm23Q8yJdyciM6KmN3K976k7SbD:bYpaf/vdSX3uvzQkgNBZ7AbRVt1","tlshash":"cb04a64ea9433431c186b0d99b2fd50c6df598ebe0de482cc963c984f9f462ea139b74","first_seen":"2025-09-26T15:28:23.629463Z","last_seen":"2025-09-28T18:50:11.208905Z","times_seen":21,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":47,"dns":4,"connect":20,"send":0,"wait":20,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=TZ58lu1GwwfUsp82; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=DbkkWl8rqiCtLN0n; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 19 Sep 2025 19:47:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 05 May 2025 16:07:50 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"6818e256-191d9\"\r\nexpires: Sun, 19 Oct 2025 19:47:49 GMT\r\nage: 653704\r\ncontent-length: 24315\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102873,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52179)","md5":"72e89292dad5c7e8a82f6101fc52b71a","sha1":"11917db2f454df110fedaf803ebf640052f953b8","sha256":"1058329efc2e4de916dc58c5996ae6620836b878c33d13742b90f20ccddabe61","sha512":"995b449151db16173299bea7ea6a0df052295a5fa7f19a905863fe5e4278fd647569161df9ea2feb72d33eaafe4fe60cc3a8bc240af7aa2863e4da7b527386dd","ssdeep":"1536:Y2u4R3FNZRo3GiCNIUhxBsSU1UxYs5pfEzI:FRPLzybXotE8","tlshash":"21a31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","first_seen":"2024-04-21T22:28:32Z","last_seen":"2025-09-27T09:23:21.790129Z","times_seen":623,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/cache/7lx4tml8qkwy_storyboard_L2.jpg","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /cache/7lx4tml8qkwy_storyboard_L2.jpg HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=OgiXZhHomrA2CkYS; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JAkOVrHXzReGtTl3; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\nXSRF-TOKEN=eyJpdiI6ImpLdlJHZHczdkxqb3Q1TEJwaUJUK1E9PSIsInZhbHVlIjoiTDVnZ0NnTDRxZktaNjJwVGVtUUllaEVYS05sYXU2Q2VTbjJhNVMyWGtVbjZ0RlJDeWNzS0R4THNjdG14SDdnb2tWdWNra3pqQ2o0UlN0blZ0dnEyYmdlNHlsZi8wWVVBVktFSDQwK1dlaXNGYnIzeWFXaWdzSjVMY05oSU01d0IiLCJtYWMiOiIxOGVjNGU0YWM3YTNkYzNjN2U1ODcxMDNhMzhmZTI1ZGMzYmZlYmY0YjQzOTM4MDYwMTIzMzU1MDU3MTY5YzNhIiwidGFnIjoiIn0%3D; expires=Sat, 27 Sep 2025 10:52:53 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6Ik12YW53Nm1hdk8yZHZoM3ppUTRqR0E9PSIsInZhbHVlIjoidjR5ZEpYckY2Zmo4K0F5b1BZTWQ2SEdPM1B1cC8wc3VMNzI2Ym40WSt5OFdsaWtxbEIzZjA3T0xrSzZyNmpva2t6MGpmalZvc2NmeEdoc205N3JVOCs4SEZlZG82N2trUUhaSktPSzFTRG9JRTZ4LzdWcllRNldYQlp4anlvWW4iLCJtYWMiOiIzOTlkMDdkNWIzYzAwYTdmMzA1OGQyMTk3YmMzNzQ2M2RhYTE4ZDBjNDMxYmQzZWU2NTM3NmExMDVkNTA2Y2FkIiwidGFnIjoiIn0%3D; expires=Sat, 27 Sep 2025 10:52:53 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: image/jpeg; charset=UTF-8\r\ncontent-length: 138368\r\ncache-control: max-age=2592000\r\nexpires: Mon, 27 Oct 2025 09:22:53 GMT\r\nlast-modified: Thu, 10 Aug 2023 18:07:45 GMT\r\netag: \"64d52771-21c80\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: MISS\r\nage: 0\r\nddg-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138368,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1279x537, components 3","md5":"c17fe953b087ed2d44187b98ff52a4e8","sha1":"772178361e4f6c5f3fd455b3ce59d82a23b430b5","sha256":"e0a058f1c43813c508402c2f61ed50d31270ecb1a7c9d0624046119f08c751a8","sha512":"d7377bfa064b7816021bc3d9d5456660b19ac876957e0cceb495883a030b6643568ce15bfa3abe3cfbb1bcbf6d427fbe7bd475074ad412c2cbcf62a802c47cd6","ssdeep":"3072:kYFAvB2l4I8h4hADa7A+RJcuIJjIUmLBiFbT88X:fmB2lNlA+Tm1mLBQbnX","tlshash":"18d312125702136c013ed5cebd79b405d3311e424283a9c16e62a7c6b6ff569fb2b8bb","first_seen":"2025-09-27T09:23:21.790811Z","last_seen":"2025-09-27T09:23:21.790811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=GlzvNG6FyCfgoWE9; __ddg10_=1758964972; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=u72WgjzMuWgJ0tGg; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 26 Sep 2025 12:08:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Aug 2024 05:41:47 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\netag: W/\"66cac41b-42120\"\r\nexpires: Sun, 26 Oct 2025 12:08:07 GMT\r\nage: 76487\r\nddg-cache-status: HIT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270624,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65271)","md5":"c71fa701386844028fe6595289427599","sha1":"8be981f11be9f5aab5fd100ee58b8a9332674382","sha256":"39710492ff4eb2fd207455f6edca3b9649b46fd2644021344afdf1d4c9a5ca11","sha512":"eb59d640b418acd5a06c791f80e3e98916cf53953477cdaab70b938c09a9d596ce18771910af42227e052d95251f5fce7c0ef1db0bcacc9b63c749d72ef29bf1","ssdeep":"3072:7nL9Df9J/RNOokVsdmrjY82oUXpPzfjzntD:7nL9Df9DN/vdmrjY82oUXpPzfjzntD","tlshash":"fb4492e6f9d0307d2c67c259a690fefd6a2ea545db120ea6f003672487c96d309739cc","first_seen":"2025-04-08T05:57:49.888306Z","last_seen":"2026-04-09T12:56:21.860921Z","times_seen":343,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/android-icon-192x192.png","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=sZfcVZ7YR7uC9AoT; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OgiXZhHomrA2CkYS; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 22 Sep 2025 01:35:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 7068\r\nlast-modified: Mon, 20 May 2024 13:32:00 GMT\r\netag: \"664b50d0-1b9c\"\r\nexpires: Wed, 22 Oct 2025 01:35:30 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 460043\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6e09fa5e43f9f169c8b65bdba9683b46","sha1":"e986e9353a404b28a522b85dc0b7afb480b6cb27","sha256":"7940cbb7ef222596bef1a1d1db04e8a1b745dfdeb769ff9a46f4e3717396af0b","sha512":"877c8c593b415b7ee70c698c429bde02a0448c94a1500f202ea9f6c0c54ac4fa36c3bfc0d449d0dcd1b00802e494464ca38d45b98ce21c9829fec1d90806af8f","ssdeep":"192:0l+appIc5YmxlmChBC6QOANGVZQcyefhMD0Jdg5FadQzf:0lFpjFAeGGVRyS5S0K","tlshash":"ffe1aed7100650cc4e7f96dfe5af84c0672702ae4d6a1ab3047c23359b291ea9e19628","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-04-09T12:56:21.850918Z","times_seen":898,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoojoujoaseeh.com/impression/SRv7ztLVxHmokm7K9NU9YbYbhP9Ws4P0rZ_t6hxC01cA1MlFNl9AXPrPUX_yoeGnOL4sLUrDl9Y6FjbFDzlZhZrB7Ua6HjiOOkbz7zOvX6vU3rFLyRwDF9-LTjmwntQoaUN9OiToboFVJYkWZL1KHa5DPe_R54vcGqMA4gkI7MEGGJaqCS5jArEG3IZqxHVOOiLpqFt8X47JNGyYiyPI8So8pRqkwc5yxBAcZVTg_eG0zyrguScejdKfcOtCJ4X7bU_jQ6yxu1v_qy3wmz_eIrl4Qz5gvNlRb3xcKkM7rvKb32g_2fqttUBrLwSGda3yQe95ljOZU5iVfBvD4S9OBfYO9R0i_ICqPZcuKDXjXBO9yhpb7rIWbEWUSdr8FQ6JR9k9L8--spJSVngLDH8PPSwEtXc2MzEXFmVSFHuy-RZJIA8cPdFNkqlotgddwKWqvkZgrtAqWFWbXeIJVsaCZcJuEcbwsNWyJfCdSonsrrkPlqUfl7yaPOUYUhBuq85rZ48aePDqu-kz_kdikyFdeA9GrWOQ7Kkskk9djMd2H6rQDjafnqL7mEEq-3a_pBUI4NsMnj_il87-jPJ6S2ylVQX4jIXlMu64lQ6QE5kh5E5nmozh9sSooGDuI06B0szEoCf2nUZcMwRWN6CKr1uxwgvy8J4RpIK9syLACeeFsnCNGqMcRY30cABa0OkMt61o1jarhv5c4V6vONQk4QT3DkOTP2qmRH43EDoYO8zt6weabz4tX7nuLbvWmgRQCI_dp_1o3A5CxQ4-474o_X6MDWq2W0uINRCBMUVNFGiQsfB_jZdO1QU8MKuRoQlM1KsrIlLBx-Mlkg7XZ97xwG5VdE_bTfFvRUDwpnZj6N9MVJh4Sgp3yxhGbZDFdYXIp4oMJCLPlQ==?_z=9013477\u0026sw_version=v1.736.0-s\u0026branchId=1093000\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=1\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2F7lx4tml8qkwy\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"zoojoujoaseeh.com","domain":"zoojoujoaseeh.com","tld":"com"},"ip":{"addr":"139.45.197.244","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:56.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoojoujoaseeh.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:25:26 GMT","end":"Sat, 18 Oct 2025 05:25:25 GMT"},"fingerprint":{"sha1":"30:29:A2:9B:3E:28:C3:21:31:20:F2:F2:68:4A:48:A2:7D:F3:1D:0B","sha256":"9C:EF:56:02:8A:83:02:95:40:13:37:EF:17:5F:90:80:65:60:60:0C:02:CC:95:D6:61:4B:30:10:A4:DE:CB:ED"}}},"request":{"raw":"GET /impression/SRv7ztLVxHmokm7K9NU9YbYbhP9Ws4P0rZ_t6hxC01cA1MlFNl9AXPrPUX_yoeGnOL4sLUrDl9Y6FjbFDzlZhZrB7Ua6HjiOOkbz7zOvX6vU3rFLyRwDF9-LTjmwntQoaUN9OiToboFVJYkWZL1KHa5DPe_R54vcGqMA4gkI7MEGGJaqCS5jArEG3IZqxHVOOiLpqFt8X47JNGyYiyPI8So8pRqkwc5yxBAcZVTg_eG0zyrguScejdKfcOtCJ4X7bU_jQ6yxu1v_qy3wmz_eIrl4Qz5gvNlRb3xcKkM7rvKb32g_2fqttUBrLwSGda3yQe95ljOZU5iVfBvD4S9OBfYO9R0i_ICqPZcuKDXjXBO9yhpb7rIWbEWUSdr8FQ6JR9k9L8--spJSVngLDH8PPSwEtXc2MzEXFmVSFHuy-RZJIA8cPdFNkqlotgddwKWqvkZgrtAqWFWbXeIJVsaCZcJuEcbwsNWyJfCdSonsrrkPlqUfl7yaPOUYUhBuq85rZ48aePDqu-kz_kdikyFdeA9GrWOQ7Kkskk9djMd2H6rQDjafnqL7mEEq-3a_pBUI4NsMnj_il87-jPJ6S2ylVQX4jIXlMu64lQ6QE5kh5E5nmozh9sSooGDuI06B0szEoCf2nUZcMwRWN6CKr1uxwgvy8J4RpIK9syLACeeFsnCNGqMcRY30cABa0OkMt61o1jarhv5c4V6vONQk4QT3DkOTP2qmRH43EDoYO8zt6weabz4tX7nuLbvWmgRQCI_dp_1o3A5CxQ4-474o_X6MDWq2W0uINRCBMUVNFGiQsfB_jZdO1QU8MKuRoQlM1KsrIlLBx-Mlkg7XZ97xwG5VdE_bTfFvRUDwpnZj6N9MVJh4Sgp3yxhGbZDFdYXIp4oMJCLPlQ==?_z=9013477\u0026sw_version=v1.736.0-s\u0026branchId=1093000\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=1\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2F7lx4tml8qkwy\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026navlng=en-US\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: zoojoujoaseeh.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: OAID=08025131386941b2ea6b811c6e5cdecd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 27 Sep 2025 09:22:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: 1ef7f196d9f5a8bddfb70068b329ef83\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-04-11T13:01:57.365612Z","times_seen":96932,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-26","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-27","alert":"Sinkholed","trigger":"zoojoujoaseeh.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/build/assets/DQJFgy2Q.css","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /build/assets/DQJFgy2Q.css HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=GlzvNG6FyCfgoWE9; __ddg10_=1758964972; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=TZ58lu1GwwfUsp82; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 17 Sep 2025 12:47:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-15e1\"\r\nexpires: Fri, 17 Oct 2025 12:47:45 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 851708\r\ncontent-length: 1496\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5600)","md5":"2848a360d8364b7e046a9a5c8e9571c2","sha1":"c8a8a30bbfc66dd82043a720be753726eea3b2cd","sha256":"974c1546dbd5dab88bef845d52eebec9ff7dd471e0f87aa776f03f3c04e17410","sha512":"6e92d7ac1b7052ff55c3d4b6b8999b84298433333cc1265fb12a0278484313da19b91e982f65513bee6b6293ed22bb63e48274079f151b4d30688472eca50474","ssdeep":"96:3+Egyn5WZTllol4lXuZx2AhlFlplXAB1CIDTI:uEgDlol4lXu72ADPrwHCIDTI","tlshash":"a6c12317e741501c7d63c16f62a1a7c9372bd4c2fb726f7efab1e062d69229920e3241","first_seen":"2025-07-09T03:26:33.460144Z","last_seen":"2026-04-08T15:58:32.501812Z","times_seen":229,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/cache/7lx4tml8qkwy_storyboard_L0.jpg","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /cache/7lx4tml8qkwy_storyboard_L0.jpg HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=JAkOVrHXzReGtTl3; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6ImpLdlJHZHczdkxqb3Q1TEJwaUJUK1E9PSIsInZhbHVlIjoiTDVnZ0NnTDRxZktaNjJwVGVtUUllaEVYS05sYXU2Q2VTbjJhNVMyWGtVbjZ0RlJDeWNzS0R4THNjdG14SDdnb2tWdWNra3pqQ2o0UlN0blZ0dnEyYmdlNHlsZi8wWVVBVktFSDQwK1dlaXNGYnIzeWFXaWdzSjVMY05oSU01d0IiLCJtYWMiOiIxOGVjNGU0YWM3YTNkYzNjN2U1ODcxMDNhMzhmZTI1ZGMzYmZlYmY0YjQzOTM4MDYwMTIzMzU1MDU3MTY5YzNhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6Ik12YW53Nm1hdk8yZHZoM3ppUTRqR0E9PSIsInZhbHVlIjoidjR5ZEpYckY2Zmo4K0F5b1BZTWQ2SEdPM1B1cC8wc3VMNzI2Ym40WSt5OFdsaWtxbEIzZjA3T0xrSzZyNmpva2t6MGpmalZvc2NmeEdoc205N3JVOCs4SEZlZG82N2trUUhaSktPSzFTRG9JRTZ4LzdWcllRNldYQlp4anlvWW4iLCJtYWMiOiIzOTlkMDdkNWIzYzAwYTdmMzA1OGQyMTk3YmMzNzQ2M2RhYTE4ZDBjNDMxYmQzZWU2NTM3NmExMDVkNTA2Y2FkIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=oFr8vaMJMZsz8JkY; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\nXSRF-TOKEN=eyJpdiI6Im9IRjZheks2MDNnU0QyR0NZRDB2M3c9PSIsInZhbHVlIjoibndKNHgrTm1iYnc0OXR5ZEl4VTR5bTArQjd4aVBQWjBnMWdBR3N0aVkwMVllY3daeEN1Zi80bjNYbmlHR1JTU2pmQ25hUGdSeE8wVGZuM3lyamp1QWlvMFdhNVBJUTlCUGdWWmNCajFzYVBRZVlFQ3V3bzRGd3NUTGhHY3JzVjAiLCJtYWMiOiJjMzRmZTU1ZWNiYzBmODg2ZDI2ZjkyMTU1OWFmZDFiZTllODk1YmI0OWQyYjQ5ZmI5NmVhMDU3Y2JiMzU2NmExIiwidGFnIjoiIn0%3D; expires=Sat, 27 Sep 2025 10:52:53 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6ImllcE5pby94NVIrQ25tOHNGb2NqaXc9PSIsInZhbHVlIjoiTzhMQ3pWa3Q4RVYzcndhWDZKVURQUVh5UmtIVmdiNHdwQVNYOGVQcDBQa1U1NUJBR25lNHlmQnpDaUs3QU8yNWlvWXVjY0w4eWdHaW9GTENBcFJmd0FJSzNFcWl2aytoTEhoS2FVT0hqSXo2ME95WC9oN1RTc3lOaEVTcWl4eG0iLCJtYWMiOiJlZDk4NzdkYzcyMGQ4NmFmZGQ1NmQ2ZDUxMGFkY2I5YTQ1ODdkZmY3MjQ3N2FmMWFjNzliODdkOTRlOWRmOWNiIiwidGFnIjoiIn0%3D; expires=Sat, 27 Sep 2025 10:52:53 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: image/jpeg; charset=UTF-8\r\ncontent-length: 221051\r\ncache-control: max-age=2592000\r\nexpires: Mon, 27 Oct 2025 09:22:53 GMT\r\nlast-modified: Thu, 10 Aug 2023 18:07:45 GMT\r\netag: \"64d52771-35f7b\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: MISS\r\nage: 2\r\nddg-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221051,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1250x700, components 3","md5":"0c1d9e9f8512f1599e72bb010a3b6497","sha1":"540ac32798dc83da0944412d55ad3d2dc71276e8","sha256":"ef6d40a623ce0b26bf5283819e760974da9eb597e426d1921e4b669894c534b6","sha512":"d61e1edce29b136b70eab1ed712b08db891ff77ff590107552fc820bbf3e8e0ca8ba77c38c3355a4a75f9d060c7eb3afe6980945203704d482f69bafa271c54d","ssdeep":"3072:ETgeFoHuH7tiJ3hA5A1yML6QftJrYAfgiAzyT7SEOnBJ3aRq6mVaUSWXr/g4FCDx:ETGuRAOu13LNAyKKo7k3Wbo4kDwEZ","tlshash":"e124126a46376ad51dbf0f2d10947f2fab6cee819cad9150349b28301b11f2e934e7d2","first_seen":"2025-09-27T09:23:21.795709Z","last_seen":"2025-09-27T09:23:21.795709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":223,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwplayer.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwplayer.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=GlzvNG6FyCfgoWE9; __ddg10_=1758964972; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=A9koGbtpKLapHknd; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 06 Sep 2025 18:22:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-2613c\"\r\nexpires: Mon, 06 Oct 2025 18:22:17 GMT\r\nage: 1782036\r\ncontent-length: 53207\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":155964,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d3b7e0e4267402d0e259c9a21792258","sha1":"6220167731bbbb87609d184a95f5c4c2b2f8c72c","sha256":"190acb6da87bd161114f93feb270234b6ff00dafa7c98732c452ff447d4cef77","sha512":"4ae57475aa41d82ae52d0204e9978089995d10d72cf1c9beb686e1811a6bb7a7e24140f21ecc073b01e1209a20c5cf4b27f26ae82e981ef8d5374aeb9a1ba75b","ssdeep":"1536:oryPjl9oOHjCyj35oM8j03kwdtxwszufvL3v5qYtwR/iaCttHF3vLGCaUZfkJk80:FHJ1az3LpaUZfkO8bMdhdD5J","tlshash":"59e34ca631c2f4a603e224d6e47b4101f2790949384de9a4f66cecd7795a907b1b3fbc","first_seen":"2025-07-09T03:26:33.454125Z","last_seen":"2025-12-13T13:26:16.425699Z","times_seen":141,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/082/d6d/41f/082d6d41f9bd3220a660f2a4108986b2b367f0e4.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"104.20.30.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 07:49:13 GMT","end":"Wed, 12 Nov 2025 08:49:12 GMT"},"fingerprint":{"sha1":"53:C1:B1:A0:81:82:67:55:8A:65:59:03:C4:88:B8:86:25:56:63:88","sha256":"AB:A3:11:5C:99:77:7A:FE:E1:33:E4:5D:40:37:93:D6:BB:7D:D3:35:3B:ED:91:F9:87:66:23:2E:EA:7C:3D:B2"}}},"request":{"raw":"GET /pn/082/d6d/41f/082d6d41f9bd3220a660f2a4108986b2b367f0e4.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 27 Sep 2025 09:22:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 55322\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=66221\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 20c64ca88091db62ea69001a7382f005\r\nexpires: Mon, 29 Sep 2025 01:11:29 GMT\r\nlast-modified: Mon, 23 Dec 2019 08:43:03 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: tx28758e8f7663411990400-0066ec1df3\r\nx-proxy-cache: HIT\r\nx-timestamp: 1577090582.49776\r\nx-trans-id: tx28758e8f7663411990400-0066ec1df3\r\ncf-cache-status: HIT\r\nage: 29484\r\ncf-ray: 9859f06efb7eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"067d88595c2f421f4f3d5ba457be3fb4","sha1":"755b7cadd97ba8b8ef6dac92923629c1b51862b1","sha256":"0f1d6309b6c39fa7be1c27d7fa028211bf4f617929e6bd76710f013085695b1d","sha512":"10a5b0e2b0023a1c6558dd0669fba43d2b8eb7afe8f7f38ef581454651e676e3124aee5f81d60fe9f4ea27803ecc6b28dfb5e3cc58b32696756016d29b6ff75b","ssdeep":"1536:Ze9yJR/OyM8nr+mghZ7DeB5iu1FDeUmcnIFPmSzpmo:ZeUPo8rl0DenikFi/cIRpl","tlshash":"a94301979e415d29ac75ef2fb65af73c14fa44d297b95ab02c67c841c092cce23e43a0","first_seen":"2025-07-01T18:24:57.387963Z","last_seen":"2025-11-25T23:20:14.809926Z","times_seen":133,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":46,"dns":4,"connect":2,"send":0,"wait":6,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/vttparser.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /jwplayer/8.38.2/vttparser.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=JAkOVrHXzReGtTl3; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6ImpLdlJHZHczdkxqb3Q1TEJwaUJUK1E9PSIsInZhbHVlIjoiTDVnZ0NnTDRxZktaNjJwVGVtUUllaEVYS05sYXU2Q2VTbjJhNVMyWGtVbjZ0RlJDeWNzS0R4THNjdG14SDdnb2tWdWNra3pqQ2o0UlN0blZ0dnEyYmdlNHlsZi8wWVVBVktFSDQwK1dlaXNGYnIzeWFXaWdzSjVMY05oSU01d0IiLCJtYWMiOiIxOGVjNGU0YWM3YTNkYzNjN2U1ODcxMDNhMzhmZTI1ZGMzYmZlYmY0YjQzOTM4MDYwMTIzMzU1MDU3MTY5YzNhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6Ik12YW53Nm1hdk8yZHZoM3ppUTRqR0E9PSIsInZhbHVlIjoidjR5ZEpYckY2Zmo4K0F5b1BZTWQ2SEdPM1B1cC8wc3VMNzI2Ym40WSt5OFdsaWtxbEIzZjA3T0xrSzZyNmpva2t6MGpmalZvc2NmeEdoc205N3JVOCs4SEZlZG82N2trUUhaSktPSzFTRG9JRTZ4LzdWcllRNldYQlp4anlvWW4iLCJtYWMiOiIzOTlkMDdkNWIzYzAwYTdmMzA1OGQyMTk3YmMzNzQ2M2RhYTE4ZDBjNDMxYmQzZWU2NTM3NmExMDVkNTA2Y2FkIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mSB2Klpq21CGC553; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 09 Sep 2025 23:06:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-1133\"\r\nexpires: Thu, 09 Oct 2025 23:06:40 GMT\r\nage: 1505773\r\ncontent-length: 1898\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":4403,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4403), with no line terminators","md5":"aac63679e388c09f95e3e3cdbb52d771","sha1":"7262f57cc1346e607071201c4105c50b768ab87f","sha256":"c5ca49b071d946eb43acd7ddb2186e9b98bf95fc971bdebb0dcbfd4cabb3154b","sha512":"f9c0ee52e2c4eb6f2310725a1dcdf26f14109b605031695738f28ef14ff8bb0c86a35ec94940fe403939245f7193853bae0ec5feb1e4d09dfe21b1af9d69e199","ssdeep":"96:BMKCEZLCyGWaVDvTg7ksuFs0ad83YP8GBXZxqqDysNoqZl3brzVt8nPFJHP/65U6:BMjZyGtV/g7rK/a23GdZcqDyAb2nTpdm","tlshash":"9191e89024413c6daba6b69b00ef266043f8047d3d4d0e90b6a4dbab75396cf51b9bf1","first_seen":"2025-04-16T11:00:53.625974Z","last_seen":"2025-11-11T18:38:31.844695Z","times_seen":23,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwplayer.core.controls.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/7lx4tml8qkwy","date":"2025-09-27T09:22:53.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Sep 2025 08:22:26 GMT","end":"Wed, 24 Dec 2025 08:22:25 GMT"},"fingerprint":{"sha1":"A5:FF:73:0A:64:F6:01:CA:EB:03:2B:E3:43:F6:07:15:66:DF:90:63","sha256":"ED:0B:D0:33:60:A6:F5:89:27:94:14:E1:5D:51:40:AD:AA:F4:5B:34:C7:D8:B6:6D:78:4B:62:58:9B:2D:64:FD"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwplayer.core.controls.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/7lx4tml8qkwy\r\nCookie: __ddg8_=DbkkWl8rqiCtLN0n; __ddg10_=1758964973; __ddg9_=81.95.81.194; __ddg1_=WF1rupCdqZSkIpo2mafa; XSRF-TOKEN=eyJpdiI6Imt2SUQwWlJyQXI5NTJSbWphUHkwS1E9PSIsInZhbHVlIjoiVExTMGxuRVM2VVplZU9jUlFsVDBHMSswTnZtamkwOWVKaUJPWGxONHhKUzhzbzVOd1JwbldIbUJtaHhJWENtd0ZjZXYzU3BpcFFXeENENnlrRXRxNytmQjdXY0tabEFvKzlqUFdwaEYwaHVqeFUyUXoxMDcrS0MvRHkxQlk0cnQiLCJtYWMiOiJkZTIzYTMwODE1ZGZlNjBiNzc2NjI5NmQyYTE4MzRkN2I5NThkYWIwZmIzZjRjNDQyOWJkOGZhZWZlMjBlNDZhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImZTUkFRb2NybStRTWlEeC9Nc3lnWXc9PSIsInZhbHVlIjoiSlBsTWhHYXVpZllZUStjVExDRDJOdUdoZ0NoR3lTNTdLT3ZvV25sOGtzR2RjQnlJRmZjMjhPWHg3bDZ3UlREU0NVenQxZmNJcFFuYnB4RU5KQlVWckJGR2o5VmFsTG04MitIaXNRZnA5dlNjaEJjWjJGNTBHMDhxOG9ZVkxtN0ciLCJtYWMiOiIyNmQ3YjUzMDdhMzFhMjIyMzVkOGY4ZTk4NWRhYTc2ZjZhNzM3YjhlNGU5ZjUyMDhhOTQ5NmVjMjIzYjFjNDhkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iW1C44VWLNnRLoDd; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg10_=1758964973; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\n__ddg9_=81.95.81.194; Domain=.jilliandescribecompany.com; Path=/; Expires=Sat, 27-Sep-2025 09:42:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 01 Sep 2025 21:09:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\netag: W/\"686d61cc-53d0f\"\r\nexpires: Wed, 01 Oct 2025 21:09:03 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2204030\r\ncontent-length: 87082\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343311,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a349b8e256b710c33f59804e11824af","sha1":"4124b412899128cb8a2521e4f5c2ac88c2c143b1","sha256":"527933d04090c542ae6bff57a0dc240d927908d890e37b578effa55a310932ce","sha512":"8b8efd834ba24cfe9b0f96247bcbba7f2fc1c939a13ebf2cbb8c1e06bd890e5e07f29b82c3303f5498a2f998642ab7d798ab3eff4a975f9eee47175a5358136d","ssdeep":"3072:VM7nFu+slX/+8CtPIVcSJh0EcYSrJ4MOkVGvSwqzrpxMChYFwSC3G:VMxRU/+TAcSJh0lO0GvSVpGJFwSC3G","tlshash":"a07419322142523596e682da76514604b33a8085f506cfacff7ceddd4c6e98b31fabb4","first_seen":"2025-07-09T03:26:33.46094Z","last_seen":"2025-12-13T13:26:16.486694Z","times_seen":141,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}