{"report_id":"d39c45aa-ced3-4c8c-b841-48afea959f43","version":6,"status":"done","tags":[],"date":"2025-11-23T18:34:45Z","url":{"schema":"http","addr":"hnjgwck.com/ldpage/index.html","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"104.21.88.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hnjgwck.com/ldpage/index.html","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"title":"精品一区社区-欧美精选日韩热剧国产专区高清播放免费观看大全","dom":{"size":78536,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (63255)","md5":"80fdd03dc779a5bdff8477a80bf77563","sha1":"9abab33c69f29470fb3774f99f57cb56df593165","sha256":"c48745bc910bde384d87645939b29bf4aa33189101c9cda7740f7a1935a9bc43","sha512":"aa29686fecccaf74e45ec4c2b9cc39beac8d9371706f371d0b2335e4d740561858d04d9ef75008d83fb07cef8a930c27d0132bc0e1ffa19327564334389b366d","ssdeep":"1536:frU4TI/kUC2m/TH55tN9U5nArl1lCokltt8Sc9A9a5knmRWHXAPtc5D0rjT/r:flD","tlshash":"217352789314092ca01b86a0e6e1f73d51fec2caea0f495cf17c416657cbc96aeb72d4","dom_hash":"domhashe0cc33c019b9a2ac94ec1d9819e2c073","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hnjgwck.com/ldpage/index.html","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"104.21.88.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T18:34:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hnjgwck.com","ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-10-20","domain_rank":0,"first_seen":"2025-11-23T18:34:46.309429Z","last_seen":"2025-11-23T18:34:46.309429Z","alert_count":49,"request_count":49,"received_data":1614726,"sent_data":21653,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hnjgwck.com/ldpage/index.html","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cbaf5ece1061f9ccbc0537140e7d9bf","sha1":"97f0ad66c670d3f6ced496fb2735b7555724e471","sha256":"e428a445db66ee43fda06cb718d088108edf07ac98d92804ee2a15376bea14e2","sha512":"873ca2f0e5483d9d146afd01e674b4916695ad84556513e3d5a44538f89bf6cf8cd604bb286c3ea8d1e023276f3e43c7177fffc93c737eaec081efadaa73af31","ssdeep":"","tlshash":"ced0a71f2c595db82faa11ba517ee68cf066211cb196c91284cdd4469e30eee48296cc","size":241,"data":"","first_seen":"2025-11-23T18:34:54.045384Z","last_seen":"2025-11-23T18:34:54.045384Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/assets/index-qO_-RIWh.js","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2815f1c72fb5389d001fd966f44e9f63","sha1":"4d5e3df2b99c2bd8eaa21d6a51e5099c3beeee00","sha256":"51f4ea2a7c9873860e7e6ac6a6d2a780966427a13ceb993dd9848ec503805b8c","sha512":"c97349fe406befd0137967c135c50c3929e3f31588b7e5ccb01210e9418d3212f1dfd8800ab4a55151483eb5312dbd267899c435e3a6ba9388dcecf4ee5e4982","ssdeep":"12288:w/+Miqnx4IiGCoGvYtz9ElNODb6eaq7jEFhKXphFoaL:w/oqnx4VGRtpEloCeaq7jEFhKXphFog","tlshash":"99f45bd832ea946697e145d6507b4202733c6d0a740cc4acf93eeddb2e65442b0bbfb8","size":745149,"data":"","first_seen":"2025-11-23T18:34:54.015126Z","last_seen":"2025-11-23T18:34:54.015126Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"hnjgwck.com/26.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /26.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"850928374dcff80ade30e0ef30719de5-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT76WQSYG8HS1MD7DH6G\r\ncontent-length: 23590\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPI52%2B698BtDaqO52oB70jRldvrJ5rAoFpzz%2B2jtJ9HHFhel4O96YzY0oCI1MmGGt17zVrZa8WAh1ZiRclQMqZSZLLo67dMPMeBF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad28761ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":23590,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"8923d65b376d4636047697bcf33ce2ff","sha1":"3784af588fc8a8ca004c7f46ca4ff4b1dc5d6b25","sha256":"b562b17cb1a60109ba32a734f9d57c5c64c326121c72bbbb828823ac8192c303","sha512":"aea1aa009c6e431f77e57c539d8fa3f138c735134e81a7d495ff6338c8a7ef0d0d8f1ab3b8f38fc729282452cfd31286bf553442b8a7ee2fc742bf05bf4ed5d3","ssdeep":"384:zyw06VZ8S7477JeJ21TKAh19XpEh4as+GymdOq2bHOorjcL+hdKeqar0PJSjLxCH:z90qDy7Jy21uAhbXlam5kqe/coFqJP3H","tlshash":"01b2e0752fe8b1eac2358531aa52b2328074ce01b69fd6253c74ec51b4f3e1a24b4937","first_seen":"2025-10-26T02:11:47.791176Z","last_seen":"2026-04-03T13:50:18.734045Z","times_seen":33,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/39.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /39.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"40b063c8eaf0d054a5779355e3644a87-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT292C88PWJ0R7ABDYY3\r\ncontent-length: 17794\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q44rznHkdyvy2KTQCRNYKVV700R7KjsAC3WUI9GT1IFwihV3x0LKY3Wv0m8NCWvxWfkuGlrGEffmSoQ9%2BihT0OIvHjTsgjwGC5l7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad287d1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17794,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"a9f7e6235e4598d514398b1e5bdaddc0","sha1":"cee08c13ea3b235c567747690b8b9e8fc9758591","sha256":"a9e2a9cde30c0563596acfd76f6b1e2fc2f684534717b6c540e19c50a54028b8","sha512":"4d66aadb98f787cbe11216f986f7695890afe047de544d745dc08cb6d754e8364d21df15be4272729c1818247f9bea97f2836c11f73b6436a3ff595b4bfaa478","ssdeep":"384:CXPeQXsDIruH3b9Ld0hBzl5LqrrBKZPIXeI7o6atV89ZHWDGId:aPeBDAuH3td0jJ5LvPIOgSV2TId","tlshash":"6682c01b676a4cd1f035dc3274c75b5a33500d4d7ea8e204201a3e97ebe7a21ad8ed5a","first_seen":"2025-10-21T09:00:55.164898Z","last_seen":"2026-04-03T13:50:18.753976Z","times_seen":18,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/4.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /4.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"78728b501b5aba442a7f2ab9a9694ea7-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT2XGC3XDAAXP2VAY2H5\r\ncontent-length: 35012\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kmgEvf0igFPrMgOIG%2BhIZ%2FUC3%2BpH1LAKgXkOlLhnQrMubs5Tl9ubMP%2BUVooQCy2S53%2Byrbl4Fh%2FihAVCVhmLlBkKtIuR1bUGxQiG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad08651ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35012,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"3d104b8512114e0cb36bb81532d4d3d9","sha1":"6f08ebaf873e9084d1d77d0d52efce8ce99d1dc0","sha256":"766f7531e0a898ea2018b1e78f15c9243e0e4d9e05bf84aed4ad89eb130f73bb","sha512":"763e256974764444a5d40382e089b777abab5fc1a91815f3557df893b663f178e451adf179006c9430ca26407ca32cff76fa8c37e3039f69dad0d408d5114d20","ssdeep":"768:9RZ81wE9nyvPLDaUsjdacthazHsZzQGs+uGfKdENET3sEb2+:9R+2E1ynLDdydvhLZzQGs19dWrEP","tlshash":"6af2e16c87fb8ff3f84b6c64d1f4d0f9920479ab648e6378358484532787ac54a21987","first_seen":"2025-10-21T09:00:55.141097Z","last_seen":"2026-04-03T13:50:18.717486Z","times_seen":72,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/assets/index-qO_-RIWh.js","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:23.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /assets/index-qO_-RIWh.js HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 23 Nov 2025 18:34:23 GMT\r\netag: \"183926c6203dd1d793716b1c4ac09e4d-ssl-df\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KARZXS5AV673G4JM58GZSSPM\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zmi25NexYSPE7U8YlTZIauEW0PcfYtBgNR%2BA24dGsu%2BBLPoMOfsaV1ZC%2F3BBHjpa6D0gL7ni7yv%2BlW9zqtintOBaDMEoJ756b0ZU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c2a658221ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":745149,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"2815f1c72fb5389d001fd966f44e9f63","sha1":"4d5e3df2b99c2bd8eaa21d6a51e5099c3beeee00","sha256":"51f4ea2a7c9873860e7e6ac6a6d2a780966427a13ceb993dd9848ec503805b8c","sha512":"c97349fe406befd0137967c135c50c3929e3f31588b7e5ccb01210e9418d3212f1dfd8800ab4a55151483eb5312dbd267899c435e3a6ba9388dcecf4ee5e4982","ssdeep":"12288:w/+Miqnx4IiGCoGvYtz9ElNODb6eaq7jEFhKXphFoaL:w/oqnx4VGRtpEloCeaq7jEFhKXphFog","tlshash":"99f45bd832ea946697e145d6507b4202733c6d0a740cc4acf93eeddb2e65442b0bbfb8","first_seen":"2025-11-23T18:34:54.015126Z","last_seen":"2025-11-23T18:34:54.015126Z","times_seen":1,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":400,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/7.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /7.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/18.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /18.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/28.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /28.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"511f6205816018bd670076ae9fff7f78-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT2WYBTB8H78XHE71KET\r\ncontent-length: 40714\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4g%2BjwZb%2FCsN0XHun3bbYZiBXbijD97GQZGIcExQl6Pggfa6jgtQhL5oAyoqtv7MdxSy6TZyaXh%2BeLpdBFx0g%2F0Ua4RR2hwvi47D6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad18701ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40714,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x742, components 3","md5":"485bfa72961bc7db5b54d5c02f0847eb","sha1":"a7990ce4c5590aeb6dbc005ecbb61cdc29b98902","sha256":"4e44c66839c2a177270e93ffbc72db14966d104de64ddff55b8abb218cbe39d2","sha512":"2cf5a8804e65b23d438c4413322a90dbff6902ee5760d29a15f30087e25c2b8922169d88fe370648291197c28fa8712ed311398d760641c90db94437a2e93f65","ssdeep":"768:x178A8hY+aPqIxyslZ9J9FXzIea/2FCH0y8S8PMLknkkGHg:586+aPjksl7tXzIeK2kD82kkkGHg","tlshash":"3903f1a6c6af53cfe2c5fbef16b586e421816d414a17c5906721c649e03d89a38edb30","first_seen":"2025-10-26T02:11:47.771075Z","last_seen":"2026-03-24T04:55:36.088816Z","times_seen":31,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/28.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /28.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/13.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /13.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"8ae4b12057097bda40b4cfadb87103ea-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3K056HT5KVZP2XR6W5\r\ncontent-length: 28577\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rqlneLllrO5wEoSSy4Ftltlon%2BwhsgZbM9dfUwE5Jn8GYjrUU8zCquTnAsrdSVsE%2FPhiQ2YPUp88rLl%2F2xpLvuZyO3QhlmroDyJC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad08681ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28577,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"4a4d1abd4e7dd24899fd301172bd5931","sha1":"967be622ec47329cb70a3ccd90604189d51c83b7","sha256":"6c8fbca333c2cadac86dd47fe5c4fbef6373abc52d0a12bf48439944aef21325","sha512":"cc72f018f9ce5fa71160f654718c62b65ebf891eece8269a69020e4c7ec91bee6f9a8d70ea8232e178578b164f84b37a3eb686524ee816e0c6f87e12cbfa47e6","ssdeep":"768:TNrR3F/pSqKXlYi/YFFmh6jjY5yhsZ9XRG9D:9rRSqKVYi/YFFmh6jjYk89Xu","tlshash":"1ad2e1d3bb5e6786b2578d28d16d23833738e4661d4fab3a910935206c4707b1f20fba","first_seen":"2025-11-02T13:19:49.347145Z","last_seen":"2026-04-03T10:23:16.350586Z","times_seen":57,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":274,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/25.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /25.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"a568466f46ef3654dc3199d91b095257-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT78ATSD9XSV6MPJMDZ8\r\ncontent-length: 18432\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3oQxqjN5EFgRkVh60FmWBA6omxWNpiF%2B04kkQi7qffi0ZOpkVdrR%2FHjQya7aiM8YbY4k5geYnPCLkV48JnVLeOLJbI5U2CeGujI2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad28751ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":18432,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"f237169cc7d0be9fb3fb6962640bb460","sha1":"5bf1674fde858c727063da240e8c889a62caf04d","sha256":"cbff13ab0581cec0cedca7b231e539e17a349b3e081665fab1d1c1f86df577d9","sha512":"e0f22b0557d4ca4626e7dd980b62db7fc8be2fbb5f92b3fa7bb8b67b6e805857e04349437fca5859f55e696036fc9526ddb8cb874c3e28bb4d99c9e72de81fba","ssdeep":"384:O0CJNb1wOuQ6kloHovE1UnTxAwi4AnPYTURGmj6ZG80/FBX8:JCvb6DklXvEyTuP4AnPYTUIM809K","tlshash":"4a82d0890bb66d38d200487df2bd2f09b1604f256cd01bee3bda85bd9d566b80b814de","first_seen":"2025-11-02T13:19:49.337686Z","last_seen":"2026-04-03T10:23:16.354857Z","times_seen":30,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/1.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /1.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/20.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /20.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"1bc17100335aff7529d20fda6a2dd4ce-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3M7EWRJ9X50D7Q55H3\r\ncontent-length: 30943\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsIUw0ZAQM7mVrv6c7yXBTfkU%2BnVZgNHQcOyLDIhLy9%2BDtLYU3NCMacjWPdLjChKNwhtYBDEEo9nkTIB%2BOyRpQWoGsJl0B3KVJRI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad287a1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30943,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"04ff2b4e831c7cedfaee94476ad8875b","sha1":"32f0cdec2e322e708a59e8f5fda083599e58093d","sha256":"7100a38f21817a075fa655b3bc657a53d369547d6d03ffdd945c5ebeee14bed3","sha512":"a5f38c2bfca66f77d99f8f077f482f073baf1b0b07934fff448a406a73e4969cbb942cbd14ead26b2f66e6950d8ab8bcdd9031c52212e62f3885172cc725ba00","ssdeep":"768:Mvl1nFj91llOm5bZkFhEFZdkncL+qYnPsUgJdTq:ylxVTllj5bZM+FZqncL+qgE3q","tlshash":"5fd2f24946c6e761f65c0b39d97f60f6a7058f83462af1473288778c0fab6588fe1481","first_seen":"2025-11-02T13:19:49.367455Z","last_seen":"2026-04-03T13:50:18.739504Z","times_seen":45,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/27.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /27.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/7.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /7.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"61ba27b9b2099bcad4bc6d909686814a-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT06GSJBWKQDWF9YGEMW\r\ncontent-length: 35738\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PcxxIOyOaSmrEsSzBrd3UkhZmBKWGyt10F9ZTqMRbNtneqMZPrtuqCv5Vlsq7F6Lg64EdEjAs3CVoRUj%2BCpT2yesGH5K9QsbTdES\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad186a1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":35738,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"c285d385c0560b4d3e98543f19d3fb26","sha1":"bb526dcd2a83c18c81384ab7a5ca4735b196af16","sha256":"6c6a14472f906ce8384ec75b3470978ab63fd54addfccac089e49e8b0c64d0bc","sha512":"b3922437a597e201308f009b19074aa6c7c1614c10f7d035f55767bbe5245b6e8a6892e43f3fa1cd45edce06ffe4b99be1faf9e569bb22f20715b7672f52cfd4","ssdeep":"768:7SgAmck/T9ZIemdRspgwCDKqFKVqQj7hQtzl33dUeRCAns6AcmmJJdNG:vT//xKemdRshpqMj7h4N3GWs7cmmJnNG","tlshash":"d9f2e12ea3f1c26cb12313acb6c0c37b39755397478351fa76b902157413d9679c9a8b","first_seen":"2025-10-21T09:00:55.130871Z","last_seen":"2026-04-03T10:23:16.438384Z","times_seen":74,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/8.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /8.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"f121e454c7ee9dcbeb3ece9f2557cd79-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT03ZXBSNFBNWJF03SX8\r\ncontent-length: 26305\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUq5CzJSOIpItrhn3cd6wbmGV%2FlBEei2ZlzlnvhrohYssIO2xap3hA7psVdHf8Xx3ZMD1QKIvG%2ByPvwCNCnWKL5hVEJQoy82eYY3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad186c1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"9c3fb377e87a07f40622c36fe4e7f987","sha1":"c3e88b3918ffb7c0a217e5678d3a8c1575e874f5","sha256":"259027187620c96ebcf1e2868ac6bb672acfe7d946c3279da753af4c491b0c3c","sha512":"9c04d4130f53ef04314ed750af48379f1ec0a9d920472d00423fa46f577c259b27310442ba592b54cb849bd4eb91420b7857d628c5e8e5ceb52923ae511dd3c7","ssdeep":"384:dDGWy8Phw0jlkW3TDJ48V6l3fy6wpdsV2ZnKSJ4p+QFhMvyQio8k5c4q3NMk:5GEPhw+3TDS8VLIUZKSUnMKQioh5cr2k","tlshash":"84c2e118ea5dd9efd7a4f735cde92b19d3428f2242cbca1d509284389d537f834852c9","first_seen":"2025-10-21T09:00:55.146944Z","last_seen":"2026-04-03T10:23:16.33472Z","times_seen":70,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/2.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /2.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/14.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /14.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"f450402fd24e0f465d8972bb61682514-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3113WQPA1NGNQYB2BD\r\ncontent-length: 32512\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HNqksly%2BCOBTvxudJxTUWEtRq9FGn7bgGJK8DPT6iOQpicoqDnytXy1gkRN%2FEJX3tAyH4A9PcZO1XgvYFBcPLSLtexEzFUw%2B9C2n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad18691ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32512,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x731, components 3","md5":"81f03d12aa9b60d6ab51bcf9fc3296d6","sha1":"1cb263cedb44b8f9d83577254bf0175f32f15956","sha256":"a46883d95bc03cf7e661d0099a4c7c91ea30149070624c001b4bb535c62915a3","sha512":"c84b88749913d84f4af70314ca557fb99deab451b13e5bf34cbb3c01af3d36ed8f4cd75815b8daa131e42baf3606d43ccc519017eac139c79258158408f80dd3","ssdeep":"768:D7yzjEHNRi6RmejS30oZpagrE4VxIEahZWyIgmIC:vgEhRO30oZ1rnxXahZW3","tlshash":"3de2010a60721c5003de293ad9dd80a8e70982011d96776eac5b0c5bc7749bfffe954f","first_seen":"2025-10-21T09:00:55.153426Z","last_seen":"2026-04-03T10:23:16.353017Z","times_seen":56,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/18.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /18.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"eff8784543f65ee821c4180f92a53e98-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3Y89XYZ453ESJZZET4\r\ncontent-length: 35122\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYvHQM%2BSZOaFkx0QkZswKf84YRUxz8zNcpfTP5VVzbKfeBjkY9bqke2jmBloSlmPQuXPaQ7R55rHEpgC0sWH9MDtAwyWie4Zy%2F%2BR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad186e1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35122,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"2ab5990a44198068ee4a84949321244e","sha1":"e2577d1cc24fe2baec3ee4c5c16b08660c8314af","sha256":"9ec444ced011de319502bb82efb60169002269f59c67dfc2d8156f70c9516c96","sha512":"0f6c354e282ff519f8171d0ba8ac85768356da9cadecb650f84fc229df9a25d8c8ef44c9542d19ccdc3d7c113965d1352b5f22c2225b1e8b508c8d85c7cf205d","ssdeep":"768:rdPztAtjDXLZqbE9ecMt7JMX9Y//jPJ1EUFbNY5WPrjTvV:rqsbE9fMt7JUYrJyoJYAPbV","tlshash":"1df2f15c3b9199e293f500f464835025538dc0f3948e6b2eb5d106f9e8feaf68854f8b","first_seen":"2025-11-02T13:19:49.358604Z","last_seen":"2026-04-03T13:50:18.749077Z","times_seen":53,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/8.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /8.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/15.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /15.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/12.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.195Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /12.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"609d543cebbab30f4bc69b4e1b719fc7-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3JJ3E4JAWTA8RD196J\r\ncontent-length: 31551\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IEVx40DftQUaVeyqcgQXqDtpXKfpnEdT4jYabyALTHWW4MB2OG9y3XRMbbzO7irvIg4%2BBNymj251w%2BPMrP66rQ1Y%2FSbwv2s2Xqbm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad08671ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"09d3a3522e1cbf8a506544bf5456a16c","sha1":"a5399f71718f6f28c09f0757aa18d9a05834e42a","sha256":"56e0f549a12bd5e212465aa356ba746663b504234cfa03d72373e68179a146eb","sha512":"e83a226ad498d6bd106832fd172d5ae3d2f22df021ab51d91a9786480c5bacc83bcfde6741b6fdc43245f989f3e4688f88cd2da06cf4424a52bbfdc66541c744","ssdeep":"768:+etVM8vftjHRIXmJEVANxpgcGum4BizUjlsajoctrhb:+eH9tjHN9TGum4BiIlrZ","tlshash":"f6e2f2bee0415910d11395656195f3cc8cf72b3ebb41d189fb625b60c314afaabc684f","first_seen":"2025-10-26T02:11:47.784589Z","last_seen":"2026-04-03T10:23:16.426092Z","times_seen":59,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/16.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /16.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"ca0b54f703bd5d0f8c6605e0e5eeb60a-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT769YKG308YZEDFEP5H\r\ncontent-length: 34226\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kDOkDsTCC%2FErirZsiSjucVF6jYuN0Zdc2xPlDTaGbreiYqPyq%2BQwll3Qc1cJmmQPVnuPY1kX2%2B7vsAW2G4ypEL%2FSah6qyF%2FnC%2Fc8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad18741ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":34226,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"51fb75a25da3d210c98b974c1a982ccd","sha1":"9c8251f381e401eb14af4be1540fde91f51d04ec","sha256":"b49092c61bb2e56b7e886340f21e39f17fb13eea11e77bb06c41a8f88d43a784","sha512":"24a3f1d6e097ad506046642406fd5a06a7803bb17f2ead8b54b0c2ffa8c6b4b09802e15996b7f18440d4eb396c920c0ca8018556ed9e442fe5acf83653a679d9","ssdeep":"768:F66ullW+9R3vCtbZaYOlXuBTw5Q/gZKhVmnGdmdXn5xYgQ7PaJz:F67DvCbZaYm+65KCKhEnGEBAA","tlshash":"b5e2f1789f77c04af3ac96fbb7fc1309a8f6659e481d20cc5aac4912c877642ca06dd4","first_seen":"2025-10-26T02:11:47.787317Z","last_seen":"2026-04-03T10:23:16.371999Z","times_seen":55,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/40.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /40.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"4ff99eea7d89f32328eff659bbcf7d3a-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3SFCEB48FR63B8E7TT\r\ncontent-length: 15720\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfQkd9ULrmGB3cxl9OV3m9kxaXzk%2BNY6H2kGIUtUuFB6s6nLsfxQ%2B89LHtfO5HVKHfUMBjWGL%2Bl2oKRVPWiU0DJ%2BtD2V61FWiq7Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad287e1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":15720,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"40407b3bc9922d4822e7c01136a23919","sha1":"2f734459d5a6d3dd90657d35f605c9f3523ddee3","sha256":"659732e0eda0c89c695999634462aa74454bb0befa02b93d06ddc83a4538174a","sha512":"a26fb2734493ea15f4a839e9d35a063f98d09b78c35a35afa753044a6145ac74e2d27243b81674ffc3b3729351db948d2888a1e932f30db99d5ab0395062e560","ssdeep":"384:XxMkT1K/hl6XiRiMeAOfFNAhKsGfp3utCuQOeY:XxjZSfA7FNAhufp+tco","tlshash":"1c62d06aaec99d17c691873b9231562ea1becf64f76543b701d240b20132f28ef89c55","first_seen":"2025-11-14T07:28:36.608292Z","last_seen":"2026-04-03T13:50:18.751125Z","times_seen":20,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/vite.svg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\npriority: u=6,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11I8gctM3GeKYTlYMbDLP6FDKHR1G7Qx91EIzkcMsD%2BjO%2B9tfjXSj1OpuKWk3qXoXN5A3OG4JOCLPdNq%2BvUXhy51luPSE%2Frcx6tl\"}]}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KARZXTN2BJF419XMFZDN7J9D\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\ncf-ray: 9a32c2aff8921ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1739,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (521)","md5":"dbaf6303839f003843a233a81475f158","sha1":"03f3299a2a52e07c71317beda18270e72442365d","sha256":"e7efab7bf30b5181662e483568a822944a44b3263a20be4f413909d79aea847d","sha512":"e267eb4963c3dd45319467fb58254bfd8d9cba865df7d1a6f6fc2d3eafbe176dc3f4adb661de1922ce7eac309b59808c70920b364e2d369c6a7896b7c2213f3d","ssdeep":"","tlshash":"4331f0479e84995e031841760df0f7b8a933f788830dd59270b5487b8b44fe74d52787","first_seen":"2025-11-23T18:34:54.030229Z","last_seen":"2025-11-23T18:34:54.030229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/2.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /2.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"0bb22f89d977c544434578522e06d445-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXSZE7BT03FBQR2MNCS2B\r\ncontent-length: 19659\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VUbaSuVXnYwlKBUNXTJMDnhMJjdmWy6zoIfBnJnM8OE4E7vcji2SyYApTjvG8soFTkAizrIYDgLYGkmfJad%2Fve0bVku3v%2FEWrlX4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad08631ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19659,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"b047e965088a1da09808c616dd2e501e","sha1":"206a50cb2431fbb4ef2155275c5fccd6c1a9940a","sha256":"aa04cd02434fea105036f220ffe4518a642aa3aedef11239cdc5ffa16301dd9f","sha512":"9bd5f716b6f29e58e4f7e493e461211400101cd7bb7cee3979dd4eea3beae678cdfad87b57bb300f68bb967181c94cd426923314624a3dc00f343750656f3d07","ssdeep":"384:9b3dcP8toh33nc8ejS9oXIsvtkRCk36+7zEBwp8EJjV4bVdJ4x1xycmI:ZyP8oHcHW9etkUk3H7zEBET4jJ4xfyc5","tlshash":"ca92d0410965cd65fda512be5abcca6d87294e5c04cab952673c304b4c20bf90c6d4bf","first_seen":"2025-10-21T09:00:55.127398Z","last_seen":"2026-04-03T13:50:18.747557Z","times_seen":73,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/27.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /27.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"7192ac0080c085f6e1f86cdd85dc3ac5-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT0QG2G94HYHMCAZZCHR\r\ncontent-length: 28164\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=do83kG28gfwtkWsrSdrRJNdb92CRXh5bhp7URUpqjOrVqZYPDA2LotQwtsUfBxfquaUzsKrWg%2BEgoOeLlzHocdbLG5Ejzz91b3KY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad186f1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x744, components 3","md5":"efac1c096921664cf624b0dedf234c17","sha1":"893f420dcb02950eb64ac656a3248ff5f03de5c8","sha256":"4f823e18a213497351c4f733f0273408610e625c5da72096261df1ed44f7e185","sha512":"587ddd87b5236bfe2ce53dd4274be81c346edbe838c0d56a65804aa85d98665b32903e89805a6f80d10b6460259302fe755c89b8e4d64d2e3d73126800c31527","ssdeep":"768:Z+l4ktMlbsRS4STjmySGfKlP4vQIsPsN3qYW2D:Xvlb0yNjKWYQN3qYWe","tlshash":"edc2e0c2b32d8214e39f3618f4960a7c11dc3a0a4e9b59f0c9977416bc982eec5de5ce","first_seen":"2025-11-02T13:19:49.3534Z","last_seen":"2026-03-23T15:35:45.070757Z","times_seen":32,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/6.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /6.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"a5c2192cbc285ca4f5bcb5e0ceef7e48-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT13ED78A9W1N0JKS65Q\r\ncontent-length: 35034\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOsW%2B94or07wE0AWtCJFONTFPtDzeoTB4lHLHosx71zS7FOJ%2FyXa3S797mlp2HiWnUfo2eFwiXwKQuQxiozsnwstnhZQLsQfMjxS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad18721ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35034,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"96053ef0124383416b928d037dbd12ec","sha1":"700d679026ce38443a1de6e8984f08a4162489af","sha256":"21fbf4f8b483bf8ff1efbe13e6b9021bdf7d55f25869eb88b13889dde71ec693","sha512":"8cb925bdc82c6bd166146f191c48e91062bbe8df1701ac4f7309328568a1193dbf14b909db4a20ef28a2e559c9dd5d507ed1e5f573142a1fae409b1c5a1803bc","ssdeep":"768:ggNGF1hsX67Vg1kgsF8GseanrFFi12ZwqamEnZIkQz9FDDjZAM:ggwb3ZEkbS3ean5Fi13mEnK7hFXjp","tlshash":"b4f2f136dd8ce8b9f3b636f4c5c6b170aae41107ed46a51ea612c6d1319513e47b07c0","first_seen":"2025-10-21T09:00:55.144058Z","last_seen":"2026-04-03T13:50:18.718644Z","times_seen":70,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/29.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /29.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"1294d9e75ba5c706b8e49a0ba9fee8f4-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3PKC3DB9GJ1BYQGY0J\r\ncontent-length: 23634\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZWZYW7pbvqb5owfiZgnQxAaTqmRbF3Z3l1RLEHMHXWCZiMBAOfcgMM7ltGJ%2FFJb12kbWH98Y1gijqi4GqwD0HWFTy%2FBhb9yB%2BBq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad287b1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23634,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x767, components 3","md5":"f68b01aa6d5266224eb77271b99fe7e0","sha1":"023e68d6e91536566004b739e0b47e37ba75dae6","sha256":"ac9362e31d768b606f8ddcb0a7596917c8312d1ae36c551b275797a58b463216","sha512":"85e3005ed03456b19f62c74d757ee31542b3feee4ac10eb4eecf353145b0533c3acdf4412943d07bb7ec82b5f04369188814ab0e619810d71000d159bd20716a","ssdeep":"384:fVLBXcIPOosJMwkJB1WLtLagGsbhjflEIuCKEYxR7F4X+1nnBWKvGW/c:dNcKsRkJB1ITJVZEIKZF4X2Y","tlshash":"54b2e14991cf2f3ad9a08370864bec01d61ded42d9acd6dafdd8066722dd6132b792c0","first_seen":"2025-11-02T13:19:49.333446Z","last_seen":"2026-04-03T10:23:16.348064Z","times_seen":32,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/12.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /12.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/3.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /3.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"d6155e55117f4a90204547ab046734fd-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT2WB0361X881RYX1Q4J\r\ncontent-length: 24376\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78njVYlebcw8prFl154Z1kNZruBWnoy4QsGWQWNpPDVHEVX6wVUvlm%2BtXFJWGKp6NLkleyhE%2FaO00gIBbo3fQ9k9Wk7lwMswSjTg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad08641ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24376,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"4c1fd4cc1a7fd1321bd497c3fb2eddb8","sha1":"b43a8d88837a99a9479ae8b5b2240d2152fb5e20","sha256":"b04b9bde2fd532c72b260ad92fd0b78e520def3f0694a2ba402f87655323956f","sha512":"88fc9f91404bbe6844c44872b61873de49f2a189df6e9c9e62726f259fb0ef9072bb887c3bce492c8b6f3e036124d0f0eb4ac64b8d9ef32f59d6bc4cc03ec11e","ssdeep":"384:m1zLDYG2xI00NsJk8IO9oFt9V+fOQMtMTu6gtKznNeUt2Y8Thxm2oLBW9ULt:S8xQNsJkdO9oZVH2u6tYUt2Jy49K","tlshash":"91b2e113584ddc54d8b969ff2fc4798b30816e32436ae2216fccd9898b71c580ed99f9","first_seen":"2025-10-21T09:00:55.134494Z","last_seen":"2026-04-03T13:50:18.716155Z","times_seen":76,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/assets/index-CrXTh3Un.css","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:23.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /assets/index-CrXTh3Un.css HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 23 Nov 2025 18:34:23 GMT\r\netag: \"d5430cf019efb0b1d3ba1eebec710af2-ssl-df\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KARZXS5BEV89ZFNFZMP1YR2W\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8I5zD7k7Zi584iZrNEWM64G1yb%2FRzb9xmPRrCApYcMTYwhKMUkJfcM8j4cpJvmsEMkRMFR2Bxp0qkhMj42GImQocVJCemqqm0mYp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a32c2a658231ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23993,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (23992)","md5":"8f4cec4337d2bef8c991d2eb5e00de47","sha1":"93580fe85a079cf5d6214122e76854c4393f7479","sha256":"fc16c1bc599180a2fa996efa4365c8981ac5c4857139fe08ec99b637af0e34ff","sha512":"a018e4cb9b97be617ac3d0861bdafc8f81b29622d0f2a57f47871323aa35b56c9c9a40a2a1e6977d2a1ac3e3bedbae957efd3b97c137adc0e1a33805159add06","ssdeep":"192:O9JyW9JyyxwOiuJ/sfzsfOL/Wr7y/NFncgY/w7lOtXX/hr2sfFsftklFbsf+sfpx:kw4AWrybccgX/hr5E","tlshash":"b8b2632d6a60103b7c67a1e5c6d9b56df52af0c1cf3e59eaad820111abe33f70c97604","first_seen":"2025-11-23T18:34:54.036354Z","last_seen":"2025-11-23T18:34:54.036354Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/17.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /17.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/19.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /19.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"4a4b8d7ac1e1a0d1f3f01f7876785fb1-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3M17PH9JTZ7A1V8RVF\r\ncontent-length: 41312\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hD2VDrmTiNyF9ISpAG%2BEbY%2FtQw45YRH%2FmgkB0jdEkEynZ4gavQjt3eY5JlmZp9lxDGBQCKuKvPSJ7YhcJ9vcYvad236T7vOvnWoA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad28791ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":41312,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"c2f5121a4658e3937d5f36622c565691","sha1":"c48e76d3b5a20f7783ef8c3bb9a754192efd7070","sha256":"c44a367e881afe2498db78a60b443c72a2e2d00517eacf458796563fde9a9304","sha512":"e86866930995cd1f4d88c34ea44419735b763aec276034f3ca79b1995e4ccc5ecbd5d4ff72d1322a218a98036adabd42629be5239236e93abdebcf652190e984","ssdeep":"768:DnZ4DK9g7YCS7gXuYpMk0ZbdeQeH0eDWPeo4gypi1bzc7xq7YtY5g:DqDvnSkXYIQeH0eiW/41bzcxqo/","tlshash":"7e03f1f27ee242d5fa10f6265b29107dae821f8dc43d62fc74ad944cbf62094b6845ec","first_seen":"2025-11-02T13:19:49.321227Z","last_seen":"2026-03-24T04:55:36.083727Z","times_seen":48,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/30.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /30.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"91ba57ce2c39023ad80694dbfd0fbaa0-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3ZCV1TQBD0X0212T7E\r\ncontent-length: 31329\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BMP5yUpRy3oy2XKQr9AR3adCex8bKwq8DqKPVemor4gH3WZRpZvfEx3hzZPA823k%2B%2FUhwKQda17N9WI%2FaJHRoF2Md7c%2FpSmU4Suf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad287c1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31329,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x751, components 3","md5":"576bb309cf34749591b8086f8c64ffe2","sha1":"b05813360c7c821db5f64c3cc273e84c51307b32","sha256":"aec244eb2b2cbf5b8806826fc38b307b4f6e33e2f3dac1284b921e59ff850771","sha512":"0c3f9c9f9cf79f748910c1a8e62894ee86261e614db72227ecdb591912e764ffdd2eb2ca2de4bbbd61de449e51dddd74e33baf709d778bc9d88694b23125f72a","ssdeep":"768:wQvg/OgxYLn/v1A/qCa5TdE9bknSKhEMOg8PUOIUEgaKqA1t5:ZsM/7Ud4SUO9Egfqa5","tlshash":"6ee2e16aa3671a8ebb05c23495551200acdff908de2a4f8f780e1cd777624e6e5f908d","first_seen":"2025-11-02T13:19:49.335706Z","last_seen":"2026-04-03T10:23:16.378031Z","times_seen":34,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/4.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /4.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/1.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /1.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"7b3c89afc771ef54a29c92749de9523e-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT2ZAVNPPKTQGE9V91FQ\r\ncontent-length: 27665\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXckTcHhrFehJZqb5s%2B4Fq%2FIRH4TDFVvvDSZwGFn41cKRJIRDnffvSa9WY57N3zpdUmAhOoMbKdJpsFRB0Zbo5EAwhVFWbCdkKFk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad08621ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":27665,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"10ee0552448ef8549d22fc25537faf5d","sha1":"9fa895f89eba947de32708f2744f421d7f7fe89b","sha256":"79ebccdf4d5bea311f02f72d45bb0b0a25b9d1539e3ab48a0f6eedc0f031868c","sha512":"6ba53774e557ceae97196c30abcab6c5a8b0a71280ca10326b27404f2bd0aa0c097e628b4fba7fc35e6be5f73c1409b310dc5ca2e67f33d70f9daf37f02fbc9f","ssdeep":"768:xcn66C3KE2SmvGpoyI4qVwdC7QeMBMBs8Bh:uI6cxhI4qF3YMBs6","tlshash":"eec2e1feffa94f8ff07af660125c2306ab844a5b68814150e2d80654e9f649cba5f904","first_seen":"2025-10-21T09:00:55.150023Z","last_seen":"2026-04-03T13:50:18.746718Z","times_seen":78,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/3.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /3.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/14.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /14.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/17.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /17.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"26b8753b2d56b528df50b6e84c3b6b65-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT0HTE42SCREXNZ3FZSM\r\ncontent-length: 23218\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8E0P5rilImUOl1IKpP2h2i0NZQkQZXjZ5iSqV9YXuQcuMVrB9keXY1H963O3iE31enxpkDhKMig2wvLz4c6C7%2F3daQFajcygadi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad186d1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23218,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"3ede6763fc0931c0111969eccff1bc70","sha1":"f44227f486a23640fc629c6093b52667b2a92d1b","sha256":"a512b9fd7ba82692398281fe5d92dd58cdf8575436b00fa2e427b36c7308a2ad","sha512":"97eb6316bfbf6ab5ee2cb6602222120bbbb63490cb027d21f49838fa03ea00b31cb2abc474de05a3df1d4e61de0562d4d20abe616f6fa5f9555fe1d6520f61ee","ssdeep":"384:DDNfrMGudjVuz288JxdMlOOM40j/kxeqcZ7qASkwOr:DDx9udjVuedMlzKQxez7JSknr","tlshash":"2fa2d09013771d17e33681742286ca236d12995274caefffed522d228c3ef162bdd688","first_seen":"2025-11-02T13:19:49.31524Z","last_seen":"2026-04-03T13:50:18.748523Z","times_seen":49,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/10.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /10.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"f70f96c7413d6776556af4888aa8a64b-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT78ZNQP2Y391BC58EGW\r\ncontent-length: 35922\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grAvyTKz7gZXCcnUXzdf2K5HE8qkYoN6LOyD5gDpKxu35CaGVynqNq%2F%2BJFfQ8YjL7plMQFvARO5NSkjXkROUXiVzH%2BWfq%2FALkX6f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad28781ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35922,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"2a3148e611d35f8f015a33c942a58907","sha1":"fcb0aa1726b5a6650c74b98ab7d3ad8e4c514de3","sha256":"a9015c4e67b7b55ab36d506fa96d6bc14931855c3556ba192245af90c7fa0bc3","sha512":"3c356a1f197295f8eefb214330e6abdbd8cdb914139ace0a1a59900db3ad2a3810a10b601cc6678184fd92600154b65333e00a93a999e2787bf8b510f9014ee1","ssdeep":"768:Gc9RoEiuGGMGLwEnkt2gPuVkA+Tezo0DYXcf/MQNUL3/fjmq6:GcpiuuGpnkt2DnEezoq0XLzmq6","tlshash":"09f2f1a02acf7702d64158f555160f8cb76f59b8bcc4109f40a42cb7cfe6e78e9b2642","first_seen":"2025-10-26T02:11:47.783131Z","last_seen":"2026-04-03T10:23:16.44015Z","times_seen":66,"resource_available":false,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/ldpage/index.html","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T18:34:22.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /ldpage/index.html HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 18:34:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8KrUIJ%2FipH3Bs%2FEke%2FHiYCIxvN3u3hZa6DIx8HRscFJPoNk%2FqjcRsGYQpjraQ4N1HkBWzD93Yoo56oY8NUnuQoFUsAP4OmGC%2Bw%3D%3D\"}]}\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KARZXRMT31GFQ4QP65EVC7Z5\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a32c2a3bec256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":1739,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (521)","md5":"dbaf6303839f003843a233a81475f158","sha1":"03f3299a2a52e07c71317beda18270e72442365d","sha256":"e7efab7bf30b5181662e483568a822944a44b3263a20be4f413909d79aea847d","sha512":"e267eb4963c3dd45319467fb58254bfd8d9cba865df7d1a6f6fc2d3eafbe176dc3f4adb661de1922ce7eac309b59808c70920b364e2d369c6a7896b7c2213f3d","ssdeep":"","tlshash":"4331f0479e84995e031841760df0f7b8a933f788830dd59270b5487b8b44fe74d52787","first_seen":"2025-11-23T18:34:54.030229Z","last_seen":"2025-11-23T18:34:54.030229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":43,"dns":26,"connect":1,"send":0,"wait":199,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/11.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /11.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/5.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /5.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/11.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /11.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"3faedac2011492e162f7d34bdfb46e04-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXSZTF2W9STHSN7Z61Q4Y\r\ncontent-length: 24414\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqAHWsUUGc%2BKLWvweMBkHyM%2FcljHXj1zBqUbsoJc2wI%2BJtP5EL2NZzKy3%2FYgRvDdzSeAinnSV8QxTjNZpmvpdnyC1VXhnuV1DemV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad08661ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24414,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x734, components 3","md5":"8724a89ba0a2a6ed560144d9f3c90c25","sha1":"d69217397efbe5d1eb9bbd0777c15b84d90d508e","sha256":"d268e795f3c87816013159515d17deab4ca3bea267a538933c9bb16ecad0916c","sha512":"41f8bfd47d96683df343274aa883744ff07fd45e4e2557c50ef44763df3f4365669aeb0dc641d3c5cbfccfd3d2084ebca555e0d9640152e889d96c74c92662b6","ssdeep":"384:7n0OmuJophhvhsPdQPcxDHwunZ3PU8P6Fm2+5pRsWinK2/9GtoL1dHm/+fbG1V7/:7QGophhvhsK2HwaB1y0oPmObSV7Bl","tlshash":"57b2d024d2f74850ef306b66421f07da361d2a5ed26252fa8716987c26ff9c45583c8e","first_seen":"2025-10-21T09:00:55.161718Z","last_seen":"2026-04-03T10:23:16.359596Z","times_seen":62,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/5.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /5.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"528e333e8d2c2dbaccad004a0c2beaa8-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT12TV62QS394JBMXYT5\r\ncontent-length: 24936\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rY142FVxaflBSrSVcCM6BqfR5YuTUylcD7P6cCA1Ou%2Bra%2B0C8qCsnEA1hOE59skQKAF5iWmUhYjPKVCB8cnjpSvpFIhgcf1cWUrR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad18711ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x751, components 3","md5":"00e1a0b301529fd948a60b92e0b709f5","sha1":"89e4d69d291d3b7608ac0bb7b72a43419bfe273f","sha256":"c19be3076f4fcbd97c66147350090e01f9e6da68980c71acd5fa10cec98f46b3","sha512":"d1290fe4ea6c2b78a3cd4f989073a86f069c5bc1bb476b813bdd59e21617fe1072c3f59b45bb7ef2ab225ef25aadf2eeeb5859a8c39c350942d24dd53cdf2628","ssdeep":"384:kj+qykArWNNrJnmL6dDoTfOJSv9GfVfyWvkjcTpBR51DEdf8CJDlT+PL/5PraSDR:mJyjCn+yD6GioR51AN86T4NPrlDnwzLO","tlshash":"fbb2e137c387c060fbf089b568ad2231a8979e297647537936ebc8a78ed25817246c46","first_seen":"2025-10-21T09:00:55.159103Z","last_seen":"2026-04-03T13:50:18.75498Z","times_seen":72,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/9.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /9.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"da2f10deee4ec5db7f383fa3a791a763-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT3J6GAMS9PSFGBEZ1JY\r\ncontent-length: 24661\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ms5a2yzkMAe8KjJ6JN9E2x%2FDQFsTVHaHGXet6TWqIS5t17x87af7W7pjy7hvDaFX%2FTGhIvWFJ7s6YnZ0P8nmykVwRBUP7Vi%2FiKjz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad28771ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24661,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"b4d049f4eabda031c38aa7793e823db0","sha1":"07dd01affa0bb1807697851b94aac5d88c7a007b","sha256":"f0cdd086f039475a16b9671f9328dfc05b5a45b32f4e67203ea1158bfd84f902","sha512":"f017c2d817600559addcbd11e40fca273e4e96cd84bb5157b7c696c922dc8d606e7b972b2b128ce2afa84f61ccd75a8384043311de7c876872de25b5bb3a763d","ssdeep":"384:Pkd0ej7U91TOpVNLhCFGRkB1+XpHd+rSkYk5mc658CxdYMIjFT95wng:PkKeVLiYP6hiVyTvkg","tlshash":"10b2d02aa3ab4425cd5dc03169fe3ec14571ec2d82f148f7858087b6974ea8d1a6d3f2","first_seen":"2025-10-26T02:11:47.775103Z","last_seen":"2026-04-03T10:23:16.330282Z","times_seen":64,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/6.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /6.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/13.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /13.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T20:30:56.573385Z","times_seen":13302581,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hnjgwck.com/15.jpg","fqdn":"hnjgwck.com","domain":"hnjgwck.com","tld":"com"},"ip":{"addr":"172.67.153.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hnjgwck.com/ldpage/index.html","date":"2025-11-23T18:34:24.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hnjgwck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 18 Nov 2025 08:20:06 GMT","end":"Mon, 16 Feb 2026 09:18:40 GMT"},"fingerprint":{"sha1":"D1:FF:AC:C3:FA:AF:BA:43:5D:61:BC:38:A3:34:3C:1E:96:FD:71:DA","sha256":"21:22:49:F3:12:EE:4A:D6:C6:5C:0F:3A:69:9A:04:3C:41:D5:31:0E:CD:72:62:52:B4:12:A9:89:0E:0B:04:AB"}}},"request":{"raw":"GET /15.jpg HTTP/1.1\r\nHost: hnjgwck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hnjgwck.com/ldpage/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Nov 2025 18:34:24 GMT\r\netag: \"883bdcd75d69f6b992d1d2aa7149fa38-ssl\"\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01KARZXT6HBW01741A314DTXW7\r\ncontent-length: 45155\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKAtEzmrNf5UdSUPXm%2BIJoaLQ5j8m49s%2FS1IfrnjUYHcYiogRngZPFmzPoue4vyB3h75k3AP27qgOZBfvhDvofB5UthSaz53Xl4x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9a32c2ad18731ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":45155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 750x750, components 3","md5":"2af49b06a7faf90fc84bc3552de9920c","sha1":"11bc4a2833b747ebc7967786694c88d9b19c60d7","sha256":"906c3b548a6404e89f6f2d2f9185ce2c023ef40f46ae5e8b4f5aca069c0d458c","sha512":"4f764b7a5a315a7aa23259ade576547b9323fcd279b6b7cd13be107c79dd7fce441ede353d86985cc8da80b214a190159e1958303159ec3cec58910e9457de67","ssdeep":"768:QKD943irgzN8ueYsLeNn7kweQO4e9A6e9/9e24RQ6GDMGSuRpf/BgzMTOY2:5D9VrgzOJxeGwZO4YmFeRRQ6GEuvCVD","tlshash":"d113025157ec25ade22cb2f1bd816738e7b4b55cc50232dda1a4649293c4ec3b1f164f","first_seen":"2025-10-26T02:11:47.768603Z","last_seen":"2026-04-03T10:23:16.339059Z","times_seen":59,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"hnjgwck.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}