{"report_id":"d4d0d5df-12f0-45d1-89ba-b7f00ee4da6d","version":6,"status":"done","tags":[],"date":"2026-03-13T03:38:09Z","url":{"schema":"https","addr":"j2b8s3.icu","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"j2b8s3.icu/","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"title":"Home","dom":{"size":44316,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27897)","md5":"a960b2b8542b889d87088e981dd32cdc","sha1":"3b833c43982166b890ef66dfde340abb76242b4c","sha256":"4b24c8b2c64ec5fc7d531e1099dfdd04f9a44d1512d59458406a760218d51852","sha512":"c23aaf9849a36e69a8bb66755db0d7e75f58892aab4c9862a5146875c5ac7bff1f22d1486b4f9e13ffbd8da08f0c1b1e624bb1aa90277cc714ee03e54967d7b9","ssdeep":"768:Xj28FTbfsTO+LDGmPKHs9TvfqaSQXOSqGMWYWj:Xj28FTbfsTO+LDrPKHshqa/XOj6rj","tlshash":"db13a6176780462c9c53d2a4f399a54ea32df684ef6369eef7c62410c2d93ff088b456","dom_hash":"domhash0248d6791c38d7315ace5ae148c3de2a","first_seen":"2026-03-13T03:38:27.516166Z","last_seen":"2026-03-13T03:38:27.516166Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"j2b8s3.icu","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":0,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T03:38:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-13T03:37:41Z","timestamp":1773373061,"ip_dst":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"ip_src":{"addr":"Client IP","port":35772,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-13T03:37:41.957840+0000\",\"flow_id\":910509553862745,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.38\",\"src_port\":35772,\"dest_ip\":\"151.244.111.111\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"j2b8s3.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3479,\"start\":\"2026-03-13T03:37:41.903257+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"white-bit.global","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"white-bit.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"socket.j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"j2b8s3.icu","ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":58,"request_count":58,"received_data":26496329,"sent_data":67980,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"widget-v3.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":532262,"first_seen":"2022-10-03T13:48:45Z","last_seen":"2026-03-12T04:48:04.503682Z","alert_count":0,"request_count":6,"received_data":414329,"sent_data":2844,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"translations.smartsuppcdn.com","ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2018-11-20","domain_rank":560346,"first_seen":"2022-11-04T22:28:35Z","last_seen":"2026-03-12T04:48:05.317469Z","alert_count":0,"request_count":1,"received_data":7667,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"www.smartsuppchat.com","ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"domain_registered":"2014-02-02","domain_rank":491650,"first_seen":"2017-01-30T05:24:57Z","last_seen":"2026-03-12T01:20:23.896878Z","alert_count":0,"request_count":1,"received_data":18556,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"white-bit.global","ip":{"addr":"104.26.5.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-13T03:38:18.928688Z","last_seen":"2026-03-13T03:38:18.928688Z","alert_count":2,"request_count":1,"received_data":2078,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bootstrap.smartsuppchat.com","ip":{"addr":"18.193.231.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2014-02-02","domain_rank":425291,"first_seen":"2018-01-29T06:10:36Z","last_seen":"2026-03-11T23:11:56.240937Z","alert_count":0,"request_count":1,"received_data":1590,"sent_data":513,"comment":"","tags":null,"fingerprints":null},{"fqdn":"websocket-visitors.smartsupp.com","ip":{"addr":"63.182.9.255","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2012-08-25","domain_rank":411464,"first_seen":"2021-07-12T07:42:32Z","last_seen":"2026-03-12T04:48:04.278649Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":599,"comment":"","tags":null,"fingerprints":null},{"fqdn":"socket.j2b8s3.icu","ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"domain_registered":"2026-03-06","domain_rank":0,"first_seen":"2026-03-13T03:38:18.922758Z","last_seen":"2026-03-13T03:38:18.922758Z","alert_count":1,"request_count":1,"received_data":205,"sent_data":622,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"files.smartsuppcdn.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-11-20","domain_rank":1688565,"first_seen":"2019-05-16T16:49:35Z","last_seen":"2026-03-07T14:09:21.486064Z","alert_count":0,"request_count":2,"received_data":3944,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"j2b8s3.icu/","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"5db3a42512c3da4fb4253b1b4ac0c107","sha1":"e40adeb406e4b5b9b2658a618168b0461f4d7631","sha256":"4f066de690a7431cccef54b6303c3eae64b84079e33bf383a36dfe712a78a8df","sha512":"d5e54749818dc432a5a81efa6eea46d05f6c7b186d492d3ce720d634e164101827b0e5e59c533177f7a5742f91de80a72d28ff277cebf204cd64142fcbccb46e","ssdeep":"384:BTsqaNngJnanBf8vuEnP3/3oXK/E1C1Mo88qA6dKW5074eHJYGNHxr:1sqaNY3/3H/ao88qA6dKW5074eH2G/r","tlshash":"2ad2600af2040eb307c142b53a9f9e77aa5640cbdaa2505d3f9dc09d63bdd7d9a73881","size":29424,"data":"","first_seen":"2026-01-20T18:54:54.342682Z","last_seen":"2026-03-13T03:38:27.554911Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/frontend/js/app.js?v=1772421563","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4240fc1b6728ade00c8b17bb875c0900","sha1":"f46aadcbd2436f66e31ecd1067813b6f1643d9af","sha256":"fdf563d10fbd506ce1a8247958f5fc09b0eab44ff65d45599ae78c7fa531ab3f","sha512":"b63cc3ea61e1fb8d3a969bfcd314b22e54079f28d9e02b8627bd6e0ee29ae3860e747bc5c284b31588c4dd9c99bbfc9ef4b3b77b7e94823b634be3e4ee2c1102","ssdeep":"49152:3w5z6wBYbXBnH0O26da33dCqA92MGF+5R4/ZnxBvpYhIkX+BS1ghb2Ea8ow+GbE8:Otl2Ara8ow+GbEDT2CS","tlshash":"7dc61a55a9f42c524297b0759a5f88e0b2b48117491c7c4c7d9cf6e88fac43c92fabbc","size":12290354,"data":"","first_seen":"2026-03-13T03:38:27.557441Z","last_seen":"2026-03-13T03:38:27.557441Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetPopup-DxcAd7K2.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"14fcc6aab06f4cbe42baa6dde1a2fdae","sha1":"b06c8cf307d005d898954136f82404e6d17695ec","sha256":"937ebe361587f593181ac7bf5f550629647521b2428494f78e51f733d43bf46f","sha512":"0032b2533c7218631226328f150f393ba27e3fb9dd185569ed38bb4de1c16a0b8a439fd68e92ab08abb8d1b687ffe725ab4b8b184b5eff20d41eddfa19269f27","ssdeep":"96:ocA49juh2Px9yl14HzgJHN3MO4rJCQs1Ucs+MvHfF8H8BTQCk3y3OYf+4scVIubZ:HP9jPx9ylGHzgJt3MIQYUc/EHfacB87C","tlshash":"61c1b55d21aa31377a7ee894b52cd253b71ce2c9a18be53d912bce4062d8dc054e33f2","size":5994,"data":"","first_seen":"2026-03-12T05:39:03.577825Z","last_seen":"2026-03-21T23:16:41.459556Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/js/type.js?v=1772421563","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"07fc3ec7fdccee243fb4bc630e0d0219","sha1":"7ed7ba7f519e839ce1ba4a089445a36f9ab3d845","sha256":"6cbca9bccca1d776858ad34668a5c665cb2954b461e9cd32500d6bf5c69c4ec1","sha512":"58b7d4269fe6d2eaa89e85e30859efc56eb73696427c0de693a4d565b7cf3658ba3382842f75bee869ddb90a86abc9c3d70858a346c7892d2fcd95c6a912ba39","ssdeep":"","tlshash":"8c41be86f7515d37164a415a20bf830bb535b6a90a40c21cfa7864f90a69cc2b4ebf3b","size":2344,"data":"","first_seen":"2025-10-05T16:38:30.060584Z","last_seen":"2026-07-24T14:12:59.232578Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","size":18052,"data":"","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-62zC1Xae.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3a5b6a1e0261d41ac2474859bd8d6d9","sha1":"fec28e6bbf745a6b81da6807cbca0a887ae8a410","sha256":"8c2a803bd6c569f479f69271b40ccc41cd4a1d57515926d03de070bae824cc83","sha512":"427fa0b708518234db3714ec6984fb63068ce4d0f974124861035d91c5100bee6d3c524b799e11f7c85b97b6a3608e89606ed575be38a4b75ba2fdc67400aaa4","ssdeep":"6144:ksJU8SN+jtxSR/ZgQub//rLXPhrWVcq9kNf:kwU8SNOb//rLZyV3uf","tlshash":"2e5459d47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","size":283561,"data":"","first_seen":"2026-03-10T08:00:57.275535Z","last_seen":"2026-03-23T09:18:02.476194Z","times_seen":1034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetMessengerInput-C19RirRH.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"f6de9584c7d5324300c2c3f5c8ab49ec","sha1":"7cd14f05f0989dc6c08b38fcc5908edf1cf6d83c","sha256":"5da1f629fe6a11fc5b5732da5ce1ad82bc419a33c0bc0e02d15c180b994aeb15","sha512":"49ae778480f3444e805f2c109857c807f770838ca3fced3f0d7c4493313d9320f2cbceb979651818b8645158da762c1c67805608c42e8ab0c7ada857990fcc12","ssdeep":"1536:Ue+WgrBjP2iT2wPsJoeOArXJBM1lsF3xABaajxMmwVbQ3dg3l1Ch/wtDsaEkeV51:+FrWAPKf6/YWxyZje","tlshash":"c4634c4433193039907b45f9a17e120ab23796c4714ec168b52fcde93ae8de461bbe7b","size":73031,"data":"","first_seen":"2026-03-12T05:39:03.589308Z","last_seen":"2026-03-21T23:16:41.447993Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/eth.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/eth.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/bnb.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/bnb.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/main-62zC1Xae.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/main-62zC1Xae.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://j2b8s3.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69afcbd9-453a9\"\r\nexpires: Wed, 10 Mar 2027 07:48:53 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: EwwBuUwJCgH3mbkDAAwBuUwKDAH3CwAAAAwBT3/Y+AG3AAAAAA\r\nx-77-nzt-ray: e2f754202ccac7328986b369aeed321a\r\nx-77-cache: HIT\r\nx-77-age: 244121\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":283561,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (28071)","md5":"d3a5b6a1e0261d41ac2474859bd8d6d9","sha1":"fec28e6bbf745a6b81da6807cbca0a887ae8a410","sha256":"8c2a803bd6c569f479f69271b40ccc41cd4a1d57515926d03de070bae824cc83","sha512":"427fa0b708518234db3714ec6984fb63068ce4d0f974124861035d91c5100bee6d3c524b799e11f7c85b97b6a3608e89606ed575be38a4b75ba2fdc67400aaa4","ssdeep":"6144:ksJU8SN+jtxSR/ZgQub//rLXPhrWVcq9kNf:kwU8SNOb//rLZyV3uf","tlshash":"2e5459d47295b43443a700e5507f2006b23e5c29a809c068f6adddf67db99c9a2b7fbc","first_seen":"2026-03-10T08:00:57.275535Z","last_seen":"2026-03-23T09:18:02.476194Z","times_seen":1034,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/ltc.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/ltc.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/3d-elements/14.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/3d-elements/14.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 946954\r\nLast-Modified: Tue, 03 Feb 2026 08:26:47 GMT\r\nConnection: keep-alive\r\nETag: \"6981b147-e730a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":946954,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"814e74622b4a158f72baa7f82bea3df7","sha1":"a995ded848571656ad6e671f80e152f7f735a4c6","sha256":"f816105827ed7e3660e156837d793b6717ce4a7f7e1897592f8fbb6e185110cd","sha512":"fc18cd2d997351a19e27efcfc5bf2ff97aae8db5dcba2251e3fedfc1ab31c71cc9957898336538f49561ce4b038c1e7c493e319cce0aabcb1b319d8a2164da69","ssdeep":"24576:J6VfTJsDncQZfk7NqhuuJDzwH7/DqpOwfODrMGM9b+s:JG9MncQZMo44kb6OLDkn","tlshash":"a415231aa5b28abfe1e395379ca81fd29c17d4b1cd3249403499d36df608ec8b41e774","first_seen":"2026-03-03T12:18:30.122194Z","last_seen":"2026-03-13T03:38:27.52313Z","times_seen":3,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":246,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/doge.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/doge.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":286,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/3d-elements/9.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/3d-elements/9.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 621590\r\nLast-Modified: Sun, 01 Feb 2026 10:28:57 GMT\r\nConnection: keep-alive\r\nETag: \"697f2ae9-97c16\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":621590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"09a0187fac35de1e78e304aef14efeb4","sha1":"eecefc24aa1e1552197f856a6c4b40dc0b88d874","sha256":"bc9e6d726f74792a032be1c6ac19bc9cae1a9067950c1bac8429d8f7480a141e","sha512":"d29970dde20357cf996dc0715b5d8090cceacc44939f3505754681238675133af3c0f27a93e10dad7aa66dc239cd6f5397cc51e1b2baa5ac69140498740c6710","ssdeep":"12288:/fMVf0SWJQBlOMKunQWF3KvlCyD5tNST530WkKRJJPep77JuVQ/IZ:cRi+nVyAKQTNkKRJJPKUeIZ","tlshash":"38d42333dc7c549be71884baecf18bd20b8ba5d5f244a864db93cc9d18cbb65740e640","first_seen":"2026-03-03T12:18:30.12724Z","last_seen":"2026-03-13T03:38:27.523988Z","times_seen":3,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":282,"dns":0,"connect":0,"send":0,"wait":32,"receive":192,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/fonts/Inter-SemiBold.ttf","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /fonts/Inter-SemiBold.ttf HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/frontend/css/site.css?v=1772421563\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 343828\r\nLast-Modified: Thu, 08 Jan 2026 14:22:35 GMT\r\nConnection: keep-alive\r\nETag: \"695fbdab-53f14\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":343828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 60 names, Microsoft, language 0x409","md5":"e5532d993e2de30fa92422df0a8849dd","sha1":"f3e44abd6661d5b861e66db22f4f79a6c466cd00","sha256":"a8b276e25bb13dfa39cface35cc92aff9a7d5f1b96143f0df8c66351ccfed2a4","sha512":"f7b9fae77d71b3ed2b3846506fbb58371035f7847b2e256e3d34c8d77b22495c88184945b9e879b35b4ce755540c8786865598537e615cc00b509a544e5424d8","ssdeep":"6144:8JxUpjwDR3q4xSzLna5E6o9OANzT7p6jnqA9beQUKFQU:8JxUp8DiLaAOIX7cvakQU","tlshash":"b2746b27fb13930dd6066d38dba0c7a473757c64be5ad20fb4aa2a90c89f0b01dd56e4","first_seen":"2025-03-05T11:24:59.573845Z","last_seen":"2026-08-10T22:53:36.180823Z","times_seen":695,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":32,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/eth.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/eth.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/manifest.json","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /manifest.json HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://j2b8s3.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"69afcbd9-7b0\"\r\nexpires: Tue, 10 Mar 2026 07:53:53 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: EwwBuUwJCgH3CgAAAAwBuUwKCQH3AAAAAAwBw7WvAgG3AAAAAA\r\nx-77-nzt-ray: e2f754202ccac7328986b3693ef89c15\r\nx-77-cache: HIT\r\nx-77-age: 10\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":1968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a5a1ec9c4f3d7e0573000ef24d98ed70","sha1":"80a5efdc069c7d45bf8279f3433e4fb5c38d7b1c","sha256":"67b9236383ea5705fa18cd0313dba3a8b899b6ad0959bc412e188c0d002f18c6","sha512":"1d5dfc2f54d08108ae088ec1c7e58889fb303f3c988637e6ab71c8318729b476a709b0870bb70c12faf43b20dda7b1457a1c5b2cb8b963879b9afd4bcca46cd3","ssdeep":"","tlshash":"6341f393c0f80d531b9c522bb8954a414d54c3c7e8c93d1d366e8a6f6f4ceb910e6b6d","first_seen":"2026-03-10T08:00:57.293838Z","last_seen":"2026-03-23T09:18:02.474818Z","times_seen":1033,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":57,"dns":23,"connect":8,"send":0,"wait":7,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translations.smartsuppcdn.com/api/v1/widget/translations/lang/en/defaults","fqdn":"translations.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1087630013.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:02 GMT","end":"Tue, 14 Apr 2026 06:53:01 GMT"},"fingerprint":{"sha1":"7E:EF:00:8F:D6:2A:E3:14:6D:3F:6B:EC:B9:8F:1A:76:B8:61:A9:77","sha256":"B6:34:A4:A4:5B:9F:9C:14:2D:21:86:24:65:1A:DD:99:08:D7:4A:A5:CE:0D:88:31:29:C9:6F:A5:41:A5:2A:65"}}},"request":{"raw":"GET /api/v1/widget/translations/lang/en/defaults HTTP/1.1\r\nHost: translations.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://j2b8s3.icu/\r\nOrigin: https://j2b8s3.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: max-age=600\r\nx-response-time: 0ms\r\nx-version: c71f1ce9b1d8f235b087d509a18d375fa98ff99e\r\nx-77-nzt: EwwBuUwJCgH3IgAAAAwBuUwKEwH3AQAAAAwBw7WvFwG3AQAAAA\r\nx-77-nzt-ray: e2f75420718f0a368986b369bf450126\r\nx-77-cache: HIT\r\nx-77-age: 34\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":7171,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e15688e9d2d002a9ed39b75b69eaf60","sha1":"8334c28b880997b2a4391aafde10a4b7463dfabc","sha256":"b094c3b5945028f864269d3d5af31e88f984e7ee5119a61ac716801e948caab7","sha512":"87c5e8e52504edf16fd6f7669e17287c6d8eace783fcbd020158b273c01dd38e75088c20f4b204c12906d7944507b6a120403cf63ab2307361cf844b821f8c92","ssdeep":"192:Ccdft/hc4l6WKHSY8pZcqq+jT0UHAfoW/YmzW:CgF/hcbWbYKZcF+jhqoWQmK","tlshash":"fce1b64f9a144ea987c6438276cfb84675bc807352509d7afd8cc8b842697cda3e3b94","first_seen":"2026-03-04T14:01:17.972897Z","last_seen":"2026-04-01T05:39:45.260246Z","times_seen":1627,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":65,"dns":34,"connect":8,"send":0,"wait":9,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/ton.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/ton.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/api/v1/markets/ticker","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /api/v1/markets/ticker HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nX-XSRF-TOKEN: eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0=\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nX-RateLimit-Limit: 200\r\nX-RateLimit-Remaining: 198\r\nVary: Origin\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6InA2Rll4QVpWRlBTTis2dURtbHU0R0E9PSIsInZhbHVlIjoiN3N6eGJBYlhjaFg4WVNSUWd1UEwxMlJJdFU2UWFvU0hINGowaFJrNkh1V1FjVWpPeHJWUThCaDVHaExiODNHQnpQVkJBNW16ZkRKcWs4dm1DZk9USkR6Q2ZFR2N1SHdoL1RGTHJxUVFqajNXWG0rUEVYREJLQVBXbWlMcEVqQUQiLCJtYWMiOiJiNGNjMjdkMzNhYWExZDUxZGZhY2NiMjdjMTIyNjUxYmMyY2M1NTIxYTRkMWJjZDdjODdlMzYxMjQ2OGU0MmRjIiwidGFnIjoiIn0%3D; expires=Fri, 13 Mar 2026 05:37:44 GMT; Max-Age=7200; path=/; secure; samesite=lax\nsite_cookie_session=eyJpdiI6IlYrczQxQ081aU9QV3huL2h2QS9yK2c9PSIsInZhbHVlIjoid2FBaEpaUnV0bWJCdElYVUdxaklObm80bDZya0xHK3lkU1Y5UW9PVnkwVFZxUXpBbjFkRHA0Q2VtY1pseDZlWCtYUXhaMzZrTm04ZHNRRVowaVprSktiODl3ekVWV3orYkhyczl1ZFh6MHNuYlBUTHVUZ2h1aVIzUzFjN3ZhZisiLCJtYWMiOiIwYjcxOWY0YTg0ODE0YjMwYjYzMWVhMTYwNGU3ZmNkODQzMDkyMDMwY2Q0NDdiNDY1ZGViZjBlNGYxM2QxMjlhIiwidGFnIjoiIn0%3D; expires=Fri, 13 Mar 2026 05:37:44 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33238,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f4fce7d403daf61ca95d8ddb0caff75","sha1":"89848fa727867d33271abce09d75e492f656f037","sha256":"44022c3c1d552849e20bd2d6097499cefb94db039ee3aa287e89ac4716c495e9","sha512":"e9756f1c24dca500346815739bd214d4897b2e7b13ea4977ab0bafc19c261580b69a89304309b21bd372abefc31a9d39de6ab56d74efadb76827ec114eb591d4","ssdeep":"768:kS3DsLbFwJT/0XpXonAQEgjq7OGTG5hWFrC:rAC","tlshash":"1ce27c1e128ecebdc5b74a81b7d939ac262df12334c666d4d6bd2f5164e71d3a023823","first_seen":"2026-03-13T03:38:27.526807Z","last_seen":"2026-03-13T03:38:27.526807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":131,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/trx.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/trx.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/style-KNmfGZZQ.css","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/style-KNmfGZZQ.css HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://j2b8s3.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69afcbd9-9217\"\r\nexpires: Wed, 10 Mar 2027 07:48:53 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: EwwBuUwJCgH3mbkDAAwBuUwKEwH3CwAAAAwBw7WvBgG3AAAAAA\r\nx-77-nzt-ray: e2f754202ccac7328986b36937d14a1a\r\nx-77-cache: HIT\r\nx-77-age: 244121\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":37399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (37398)","md5":"e0e19bc0ef5c8a7be30d687ff72b1d44","sha1":"103123375bbaaca149d026b729eaf3ef58d2d602","sha256":"f471612283039dacc9bbab82dafd8e35ed37c4fd9d099a7af946c41231daac21","sha512":"1be4a4bce5fd32ddc8843fb781a28a642c4815fbbb891ec33e5d5ee29d1555c7338eb07e4965a7dbb4ddbc26d45381178b973a26a8f8de0ce7ea10029ab11a6d","ssdeep":"768:E8CQgTcCWYtomXFbxrnSJPHs245q+ggFgZ:E8dgTcCWYtdX3uPF4X2Z","tlshash":"35f2a75daad5093cec33c166e3f8e58c9229f591df321adaf6433a048ac27bf1987514","first_seen":"2026-03-10T08:00:57.31215Z","last_seen":"2026-06-02T08:09:59.912194Z","times_seen":3597,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/device8.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/device8.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 313206\r\nLast-Modified: Tue, 03 Feb 2026 07:26:32 GMT\r\nConnection: keep-alive\r\nETag: \"6981a328-4c776\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":313206,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"9d5cbfa1ace67fb2fb913cf2181912dd","sha1":"cb2c94a912434ed60dce56571870e10183b50a57","sha256":"7d6a4ca613bde67e8e563a76a2cfaa624eef60312e07324944a843e5a3cac124","sha512":"2be66811ac9e600282668e67bd0d5542c6d12339e6bca5dc9994e29346a1918e2d8a8584b9d86e4ce557b58e35d4716228ae202cc6cfaa4e0f3b72e868ab3aeb","ssdeep":"6144:TCiolWjhquakAuiJ8KRfk+LQnnZ8I6It9nC+hAuFEGUSLszJZ3TGQyCzqyBMo:flRzmVxBgniH+XFEnL9Z3KzCzqq","tlshash":"7b64231badfa18e0509b980d4fbed23c12ac3e165e687d074772ba158b4723d1bd7d04","first_seen":"2026-03-03T12:18:30.146777Z","last_seen":"2026-03-13T03:38:27.529363Z","times_seen":3,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":37,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/ada.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/ada.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/sounds/blackberry2.mp3","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:53.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/sounds/blackberry2.mp3 HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nOrigin: https://j2b8s3.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 13 Mar 2026 03:37:53 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 9135\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: \"69085dc8-23af\"\r\nexpires: Fri, 01 Jan 2027 12:08:38 GMT\r\nlast-modified: Mon, 03 Nov 2025 07:46:16 GMT\r\nx-77-nzt: EwwBuUwJCgH3SSdYAAwBuUwKAQH3AwAAAAwBWd59LgG3f/sEAA\r\nx-77-nzt-ray: e2f754202ccac7329186b36955586a07\r\nx-77-cache: HIT\r\nx-77-age: 5777225\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\ncontent-range: bytes 0-9134/9135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":9135,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"50af11b446ad42a4c3501aa519e44455","sha1":"0cf0cb1c4ed614fe8969fb6cbaa0d630e8fd6574","sha256":"713a1269cbe341333f360d6767939d33c6dc04754fe9028b34deb6ac59e0fc1a","sha512":"d6c1e1acaf6f1af5d3c61e1ce7143cdcd387ee9f407d67ec5ffa4bce37cd7c4abd77f720a615bd9f1face7c9ddedf41e6bca53e483bf5a26bb52cb64451e6c74","ssdeep":"192:xrTX1A8Vcw60SNVGNVhxPI+BGCSt6RfrIJC0Yf0vJxoV9Ik7DrxTP+FlZxU:lcgSNVkpBGp8frIJC2joLN7BOU","tlshash":"20123986d324918dfca68fff22afea35c556562fceb0cc15415a5788847f1027bba12c","first_seen":"2023-04-09T23:40:20Z","last_seen":"2026-08-10T01:45:29.142611Z","times_seen":817,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/render.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/render.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/xlm.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/xlm.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/frontend/js/app.js?v=1772421563","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:42.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /frontend/js/app.js?v=1772421563 HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 12290354\r\nLast-Modified: Fri, 06 Mar 2026 02:54:12 GMT\r\nConnection: keep-alive\r\nETag: \"69aa41d4-bb8932\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12290354,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (520)","md5":"b837db800eb617a3d7e0cc85f01e8e19","sha1":"28e57dbef6f1b63a98d18bea89e6db506250cc07","sha256":"27d36ba3a16585952d289886dcc2b9f63f2ab8e87739deda0dde00f2a313c107","sha512":"08a06e1ece488dff2937835ccfa1924d98bbcb46651ca52d5e065d089fc0b22ce8911b95b24210bfcab32b5b7190f7baa886940ca30b7f7d9fb0aed5aabbe6ea","ssdeep":"6144:ZyJR4ZGi8rAZD8aCJ7dSZcAA0iosnkduHmyFLfqEZcAdzKatbz6Tvr:f8ranUcw5z6H","tlshash":"072528b4eb647a7d47d183b0811984d0368ed17f3654a460b1bdf3a02b9f6acc1e29de","first_seen":"2026-03-03T12:18:30.154474Z","last_seen":"2026-03-13T03:38:27.530829Z","times_seen":3,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":55,"dns":1,"connect":30,"send":0,"wait":52,"receive":778,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/fonts/Inter-Medium.ttf","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /fonts/Inter-Medium.ttf HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/frontend/css/site.css?v=1772421563\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 343200\r\nLast-Modified: Thu, 08 Jan 2026 14:22:34 GMT\r\nConnection: keep-alive\r\nETag: \"695fbdaa-53ca0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":343200,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 60 names, Microsoft, language 0x409","md5":"8540f35bf8acd509b9ce356f1111e983","sha1":"e2d21cdc9730ce4d4bdccb3476413a5b79fe7d52","sha256":"7c7206c451a89a8fa8f38f3c217f67e60b830db9e21645e36155cc62cd1f9903","sha512":"9584182a1f09c9e1a854defe90d34676e6e74712523fd7dff2329b97637a36652d6c44c8ec30f99b4c2fcc6905449e6d4ceea8606ad4b1dfc43ea7e17bef9109","ssdeep":"6144:0ojexUpjwDQ3q4xSsWdvnMMSE6ol8CAq6pSeSq2hL4kyZiPvTsc7HYsEz:KxUp8D4WdfMNg9V6JS3hZqiPvT34sEz","tlshash":"73745a27f713970cda162978ca71c394b7757c91bf5aa20bb49a2e54c89f0f00cd92e9","first_seen":"2024-10-22T08:50:47.766703Z","last_seen":"2026-08-12T06:28:55.709198Z","times_seen":807,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":63,"dns":0,"connect":0,"send":0,"wait":26,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/etc.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/etc.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.smartsuppchat.com/loader.js?","fqdn":"www.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"185.76.9.11","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:43.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1161431244.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:55:02 GMT","end":"Wed, 15 Apr 2026 06:55:01 GMT"},"fingerprint":{"sha1":"D6:AF:CD:AE:04:C9:18:A9:86:FD:53:08:D9:99:99:9B:9D:A8:58:29","sha256":"66:75:58:C3:A9:29:2F:14:30:FB:BE:32:2C:1C:9B:D1:A4:E6:58:D5:9F:33:F7:16:C3:0B:F7:A4:6C:49:F2:B5"}}},"request":{"raw":"GET /loader.js? HTTP/1.1\r\nHost: www.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=300, public, s-maxage=60\r\netag: W/\"6969e151-4684\"\r\nexpires: Fri, 13 Mar 2026 03:42:12 GMT\r\nlast-modified: Fri, 16 Jan 2026 06:57:21 GMT\r\nx-77-nzt: EwwBuUwJCgH3IAAAAAwBuUwKCQH3AAAAAAwBJRPCNAG3AAAAAA\r\nx-77-nzt-ray: e2f75420a19dff248886b36998ee2c01\r\nx-77-cache: HIT\r\nx-77-age: 32\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":18052,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17979)","md5":"a4d5607cdbc76688d37ad6311610a058","sha1":"534adf5ac8c28e88b13d1549add0d84a57a52c61","sha256":"7c209ce50b76600257f47c0a47333504478e9c89793713cc7d113bbb688c3eda","sha512":"3ee08aedbe06d4a8181f362bcf9694d164f36309b70f048d42079989f139915e340515f56a6f84e3bb24d4e027cceee7c2c32a710f58ddbaaa5a5a662ccd3300","ssdeep":"384:wBWbE0rIcvqSI/aQ/UpIxN5BWbEgl/ET/xzy2A3wBV+:wAxka0/scT/xzy2A3wBV+","tlshash":"f682b6cc7691b16543ab61b4843f620ff1376929740d8821b965eae13c78d8ed037fb8","first_seen":"2026-01-16T11:03:53.240781Z","last_seen":"2026-07-27T05:57:15.19162Z","times_seen":4268,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":45,"dns":20,"connect":7,"send":0,"wait":7,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/logo.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 92830\r\nLast-Modified: Tue, 03 Mar 2026 07:24:13 GMT\r\nConnection: keep-alive\r\nETag: \"69a68c9d-16a9e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":92830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 753 x 501, 8-bit/color RGBA, non-interlaced","md5":"38c249d3cec405d6ca4629e279b08367","sha1":"1880808d4f83d8869410fe25cc7489509d4e52f5","sha256":"a4e46dc2eb233aee2fb7a2222029348cab1f0fbe3dc0785f4ee9250ca6b4a2fa","sha512":"ddbdc4846719b1693bbaf4754a6434d414f3b7821530f08c4f2184804ad8c754619fa7fa37b9d903e5d830080164c490281e23199beeb02c6b091139b7355152","ssdeep":"1536:iKLUMSI7HIA1p4Sr4Ph+9Fg9F2CEufGVTEYhhkE2Isxgqtf974hopLcg2K1OPO5z:8Il3sPh+Pg9FtpfGqY8H6+FxLcjbPDg5","tlshash":"a49302c7e5f678e3df828ab91416693194b9ef838d98561e2b12721b04481fd63f037b","first_seen":"2026-03-03T12:18:30.197723Z","last_seen":"2026-03-13T03:38:27.532779Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":177,"dns":0,"connect":0,"send":0,"wait":57,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/bch.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/bch.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/shib.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/shib.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":96,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.smartsuppcdn.com/files/agents/avatars/1195523--55KkXcPAP.jpg?size=80","fqdn":"files.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:53.260Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /files/agents/avatars/1195523--55KkXcPAP.jpg?size=80 HTTP/1.1\r\nHost: files.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/js/type.js?v=1772421563","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:42.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /js/type.js?v=1772421563 HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:42 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2344\r\nLast-Modified: Mon, 18 Mar 2024 08:49:13 GMT\r\nConnection: keep-alive\r\nETag: \"65f80009-928\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2344,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2343)","md5":"07fc3ec7fdccee243fb4bc630e0d0219","sha1":"7ed7ba7f519e839ce1ba4a089445a36f9ab3d845","sha256":"6cbca9bccca1d776858ad34668a5c665cb2954b461e9cd32500d6bf5c69c4ec1","sha512":"58b7d4269fe6d2eaa89e85e30859efc56eb73696427c0de693a4d565b7cf3658ba3382842f75bee869ddb90a86abc9c3d70858a346c7892d2fcd95c6a912ba39","ssdeep":"","tlshash":"8c41be86f7515d37164a415a20bf830bb535b6a90a40c21cfa7864f90a69cc2b4ebf3b","first_seen":"2025-10-05T16:38:30.060584Z","last_seen":"2026-07-24T14:12:59.232578Z","times_seen":12,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":61,"dns":1,"connect":28,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/3d-elements/1.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/3d-elements/1.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 899931\r\nLast-Modified: Sun, 01 Feb 2026 10:28:58 GMT\r\nConnection: keep-alive\r\nETag: \"697f2aea-dbb5b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":899931,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"d370339301d4f7a8acfe0b79cc6f0691","sha1":"9c9a814aed78ed2197cd2aee7eaa574964a70cf3","sha256":"156ad86a4526e5549c71412a195a07cd3e551774deee002b4ac0e8db016091ef","sha512":"30b6389af33adf14f9b02ecb3e2b970d77a02eec428deb86720cadf817754bb08220ac4fe6380b8d6b8fbd7b12cfe966192b8161cc0306b04c0b7cdd9b8cd0f4","ssdeep":"24576:vXLtFjuIHDcia41CZYzbRahWqoUbO+VtBEix5R:vXyI/amWYzbshWqoUbjvCsb","tlshash":"051533c4754af229ec139bbe02931fc3ced3124c93654b934a91ee6b38ce9a5c559b1c","first_seen":"2026-03-03T12:18:30.201004Z","last_seen":"2026-03-13T03:38:27.534831Z","times_seen":3,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/dot.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/dot.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/sol.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/sol.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/usdt.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/usdt.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/xrp.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/xrp.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":261,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/api/v1/markets/ticker","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /api/v1/markets/ticker HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nX-XSRF-TOKEN: eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0=\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nX-RateLimit-Limit: 200\r\nX-RateLimit-Remaining: 198\r\nVary: Origin\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; expires=Fri, 13 Mar 2026 05:37:44 GMT; Max-Age=7200; path=/; secure; samesite=lax\nsite_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D; expires=Fri, 13 Mar 2026 05:37:44 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33238,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f4fce7d403daf61ca95d8ddb0caff75","sha1":"89848fa727867d33271abce09d75e492f656f037","sha256":"44022c3c1d552849e20bd2d6097499cefb94db039ee3aa287e89ac4716c495e9","sha512":"e9756f1c24dca500346815739bd214d4897b2e7b13ea4977ab0bafc19c261580b69a89304309b21bd372abefc31a9d39de6ab56d74efadb76827ec114eb591d4","ssdeep":"768:kS3DsLbFwJT/0XpXonAQEgjq7OGTG5hWFrC:rAC","tlshash":"1ce27c1e128ecebdc5b74a81b7d939ac262df12334c666d4d6bd2f5164e71d3a023823","first_seen":"2026-03-13T03:38:27.526807Z","last_seen":"2026-03-13T03:38:27.526807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":1,"connect":27,"send":0,"wait":155,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/doge.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/doge.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/link.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/link.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"files.smartsuppcdn.com/files/agents/avatars/1195523--55KkXcPAP.jpg?size=80","fqdn":"files.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.27","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:53.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1407973393.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 06:53:58 GMT","end":"Tue, 14 Apr 2026 06:53:57 GMT"},"fingerprint":{"sha1":"A6:DF:B9:5E:FE:0D:41:17:8D:0E:9A:2E:38:16:EA:D6:A0:0F:DA:F3","sha256":"A5:3B:4E:A4:9E:36:B5:F4:96:0A:79:9B:C7:47:5B:5E:66:AC:D2:A8:96:91:B8:5C:93:40:62:96:08:21:0F:E0"}}},"request":{"raw":"GET /files/agents/avatars/1195523--55KkXcPAP.jpg?size=80 HTTP/1.1\r\nHost: files.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3385\r\ncache-control: public, max-age=31557600\r\nexpires: Sat, 06 Mar 2027 18:02:07 GMT\r\nlast-modified: Fri, 06 Mar 2026 13:39:10 GMT\r\nx-request-id: 971a20a0-1986-11f1-863f-7764ce4d2cfe\r\nx-version: 019bcdc3e9af15ff1de5e0c67a45604a006d1e3e\r\nx-77-nzt: EwgBuUwJGwFBDAG5TAoBAdeHoQQADAHDta8XAbdrzgMA\r\nx-77-nzt-ray: fdb5412351be3c279186b3692516ae14\r\nx-77-cache: HIT\r\nx-77-age: 303495\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":3385,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 80x80, components 3","md5":"f847b605ca3d6ac501e9e4053060ffbd","sha1":"278ef4568f35988d67d883156a0e0837ad858187","sha256":"c871150e161d1b52259903d5388b1e3e051c1cdb7fb8014800688907abb11e89","sha512":"17184e51b7fe7524af899431e0759745976eb5ac4f2cd2ce4260b31b5758e701caaf7483e5dfcefed5e2fcb928801a45805cdc4c3776a3bdcc319ff747f8e209","ssdeep":"","tlshash":"4e615db990bd0e16cce68db7c510c5b15bab44c1b0db2fcea4270618e460bd02f2f699","first_seen":"2026-03-13T03:38:27.535515Z","last_seen":"2026-03-13T03:38:27.535515Z","times_seen":1,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":73,"dns":41,"connect":8,"send":0,"wait":36,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T03:37:41.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Fri, 13 Mar 2026 03:37:41 GMT\r\nVary: X-Inertia, Origin\r\nSet-Cookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; expires=Fri, 13 Mar 2026 05:37:41 GMT; Max-Age=7199; path=/; secure; samesite=lax\nsite_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D; expires=Fri, 13 Mar 2026 05:37:41 GMT; Max-Age=7199; path=/; secure; httponly; samesite=lax\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]}],"data":{"size":36905,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (29378), with CRLF line terminators","md5":"c01a4b03d1559813b06347324eaf9681","sha1":"221f30801cb300d7aea9fe77a3c09afa5d006e99","sha256":"64e360a0dca0d5c45e8de47eda2fa00db4bf5b37216faf9e2bc0985fe062a47c","sha512":"d4da2098bf4c31328ee4e66f9fd0258f947d0260971d25a8b11381a7f6cfce4b7b12d230b9927e477650f63e4393450b95939a08145f623b09a8bae11a6755f9","ssdeep":"768:57sqaNY3/3H/ao88qA6dKW5074eH2G/Y7PWyg:5FaNYvsLASC74K2G/ig","tlshash":"def2710af1110ef307c962b0759b6fbba65782cb96a252ed3f8dc09c13ad96c5d33481","first_seen":"2026-03-13T03:38:27.537339Z","last_seen":"2026-03-13T03:38:27.537339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":107,"dns":53,"connect":26,"send":0,"wait":57,"receive":1,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/icp.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/icp.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":99,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/favicon.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:43.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 55442\r\nLast-Modified: Tue, 03 Mar 2026 09:37:44 GMT\r\nConnection: keep-alive\r\nETag: \"69a6abe8-d892\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55442,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 507 x 341, 8-bit/color RGBA, non-interlaced","md5":"88da40086a847631c5900aa1f8c3af17","sha1":"743e0a714115f17fc8a455443e66692e7278a23f","sha256":"e4e61799f4f3f6ac34a406f20c25f5d9198b8a401aa2688e30518dce76dc6b38","sha512":"d860fdcc18a2a9adcd4b9b1f70aa1d19566a213cb3809c5431b919f268adeea762ec25be8e84fb343898640ab9a6e49ae34c6e801333c61a69fb954214588304","ssdeep":"1536:kBovxsJd657OpWXyo4897wCaRqayatEmo0eQg:Govx+Esj8wCaRFtl9U","tlshash":"d843f2507d927f0b5b2018bb58143fb6c9b59f67e5613c8f084241629e382dbd362beb","first_seen":"2026-03-03T12:18:30.206446Z","last_seen":"2026-03-13T03:38:27.538911Z","times_seen":3,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/3d-elements/10.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/3d-elements/10.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 862794\r\nLast-Modified: Sun, 01 Feb 2026 10:28:57 GMT\r\nConnection: keep-alive\r\nETag: \"697f2ae9-d2a4a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":862794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"beff4355e24a645fb1ef038196e67cac","sha1":"0e72b1127c9287d0e1951c71ee1c85ed1e5bf83a","sha256":"0b545245369233ca56de074cd00cdf1d03ea4f48a12aea2a915349b2e5d9a498","sha512":"bada7ab60d232888147e2698635239f6782c755d331653c6f93cac05bcefc759a94d4d2c971d634741f0fe07cb3c5f1b02c568cccbcafa1b8c4e12753a643997","ssdeep":"24576:Ykc1EK68mpc5Xnbnl/kOhphmcnqSsxbI/8wP9ip8hdl:YZ218mglMm/mcnJobIEwoaF","tlshash":"ca052385b3abcb6fe5823cb5b9c0394fe66144d9cde09375c619d98604cf032cac5ba5","first_seen":"2026-03-03T12:18:30.137961Z","last_seen":"2026-03-13T03:38:27.539684Z","times_seen":3,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":283,"dns":0,"connect":0,"send":0,"wait":26,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/xrp.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/xrp.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/pepe.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/pepe.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/hbar.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/hbar.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"white-bit.global/storage/uploads/4f3e024115ad070cc474bacfa6d3df17.png","fqdn":"white-bit.global","domain":"white-bit.global","tld":"global"},"ip":{"addr":"104.26.5.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"white-bit.global","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:38:36 GMT","end":"Thu, 04 Jun 2026 02:38:35 GMT"},"fingerprint":{"sha1":"E4:5B:6D:1F:65:8E:BF:A4:BA:1C:45:D5:C6:64:B3:7B:9C:09:CF:E6","sha256":"86:5A:E5:A6:CC:19:13:E9:6C:3D:9E:0D:D6:AC:3A:89:16:65:8B:5A:46:13:9F:E0:9A:42:5F:C9:1A:D7:E2:D6"}}},"request":{"raw":"GET /storage/uploads/4f3e024115ad070cc474bacfa6d3df17.png HTTP/1.1\r\nHost: white-bit.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xnr2isJbh4tp1mlULgkyP9CETPrfamCY6qx0reirUTJmQ3QwJ8706lU0TxJlVwWS46U9EQ4X4YKroOrO%2BHBLVooN6OxuLOt9fdxFKhUNLIIci3MGZl8lNcdFKpeLZ7X2Gmk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9db80072783d0731-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: chlray;desc=\"9db80072783d0731\", cfL4;desc=\"?proto=TCP\u0026rtt=543\u0026min_rtt=473\u0026rtt_var=214\u0026sent=6\u0026recv=9\u0026lost=0\u0026retrans=0\u0026sent_bytes=2437\u0026recv_bytes=1108\u0026delivery_rate=4296735\u0026cwnd=53\u0026unsent_bytes=0\u0026cid=43fc7d025f379014\u0026ts=22\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":65,"dns":50,"connect":1,"send":0,"wait":12,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"white-bit.global","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"white-bit.global","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/3d-elements/7.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/3d-elements/7.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 868784\r\nLast-Modified: Sun, 01 Feb 2026 10:28:56 GMT\r\nConnection: keep-alive\r\nETag: \"697f2ae8-d41b0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":868784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"9882420bbd291d8c21a34ad51aba1684","sha1":"ace2bfd6bcffa31a52ae17432ce27c65503fd9fb","sha256":"b844d63cb8a438e9c7bc5810740eee40bfe66a3c4ba368050bdc7aa68a7ff0f0","sha512":"af09d285dce28f3e4d6e2410766d2b865a82d6a32841e3bb246413844d77b004339e2e52c6813aeb622d9262d37230eada064cafdaec8c1c9126a7e8f77775a1","ssdeep":"24576:2CrPY7FkCvDdjyaJqTo4Y5adrKbtVEZl8SrCds:2cPdCvDV7JqHY41CtCb8St","tlshash":"7f0523a0f8dbd4fc782f1434cd7a5e954ec2166f461c8e3a54bab543a5ec88b8af450c","first_seen":"2026-03-03T12:18:30.19593Z","last_seen":"2026-03-13T03:38:27.540419Z","times_seen":3,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/3d-elements/8.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/3d-elements/8.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 1093728\r\nLast-Modified: Sun, 01 Feb 2026 10:28:57 GMT\r\nConnection: keep-alive\r\nETag: \"697f2ae9-10b060\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1093728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"10c406468eb28a0dd2bdf6fc89eec575","sha1":"94d62b8e0d6cc41c9d5f50da52a85cbec531bbc2","sha256":"cfb1ea634f922ec9bb1a5391e2f1b877dfd5fd18aaf11dd794221a4c4b131b47","sha512":"9a1fc79be7a7038b1ac8991d08e7deebf4ff4b07ed48a3feec29e4296640f38d58404b872ba22aaeddfcc24f1111ddd7c6a0fd59d861e55c0d98a0c27506eaef","ssdeep":"24576:s4ZR0C+dXD9NPR2Xft5V0EQqY4OyQuI4r9FAKbrCC:jZR0xX7El5uLp9uIM9FAgv","tlshash":"ec2533b9e1c30e277f1bbc11a99f140943cfbb93063ef65aac249922651b9834461f73","first_seen":"2026-03-03T12:18:30.208054Z","last_seen":"2026-03-13T03:38:27.542262Z","times_seen":3,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/fonts/Inter-Regular.ttf","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /fonts/Inter-Regular.ttf HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/frontend/css/site.css?v=1772421563\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 342680\r\nLast-Modified: Thu, 08 Jan 2026 14:22:34 GMT\r\nConnection: keep-alive\r\nETag: \"695fbdaa-53a98\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":342680,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 60 names, Microsoft, language 0x409","md5":"37dcabff629c3690303739be2e0b3524","sha1":"bd1976c1f019853ab6143ef1246e25aa66fd990e","sha256":"3e5f90a0138b38de4cf4d779ad78391974ea1df776b9164842bdcbb60ce383c5","sha512":"04b16cb8b7b85fc7232adf4f82cf44d365761417eef975dec48f1b8db224a2cc3517b507f37787febb43fecb3f267942e091ddaa26d70e37ce82764e986ed9b7","ssdeep":"6144:n/T/NSxUpjwDP3q4xSIVNI1Gq9AE6olVArv0mb50t7NRuhpSw8u8MqTShUIn:nTNSxUp8DnVNIUgVe0sw7NG1n","tlshash":"76745b27eb13930dd70a787c8aa1c7a473357c61be1ae21bb49e2a50c89f1f41cd56d8","first_seen":"2024-10-22T08:50:47.761508Z","last_seen":"2026-08-12T18:15:57.603543Z","times_seen":1189,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":26,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/btc.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/btc.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/near.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/near.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/sui.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/sui.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/3d-elements/15.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/3d-elements/15.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 219637\r\nLast-Modified: Tue, 03 Feb 2026 08:25:43 GMT\r\nConnection: keep-alive\r\nETag: \"6981b107-359f5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"50b5eab2c7c70c884abc68b94ef1fcd1","sha1":"cb47577b86ff505e0bca4ded3b9fd3b61bbbbac0","sha256":"8e21a478f8377525f1462bcef44c2e9458d54c1dfd086e2ffe6aa53df61db77c","sha512":"e607ab3052708fb1b8aebf89c9c611240e505f47dac13f192888aae5b781962c4ddd934d87c20bb3d8891162aad9023951e563f6753d9a61b2b40f2736738a1d","ssdeep":"6144:ZDuOh1krmrDfk99Uj0aAAN1Opsm2RwRR/vmG9d9rQYU:ZflDf+O0aQAw7/vvzU","tlshash":"312423f6b757acb1edacb2158dd08d3526664789cb8f33562f3815c9e478eb000fa219","first_seen":"2026-03-03T12:18:30.170167Z","last_seen":"2026-03-13T03:38:27.543999Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/btc.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/btc.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/bnb.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/bnb.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/sol.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/sol.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":262,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/ada.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/ada.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:44 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":286,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bootstrap.smartsuppchat.com/widget/6f4230105bfe4a34848fe39c29b168ee5f88f4d2.json","fqdn":"bootstrap.smartsuppchat.com","domain":"smartsuppchat.com","tld":"com"},"ip":{"addr":"18.193.231.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsuppchat.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 02 Dec 2025 00:00:00 GMT","end":"Wed, 30 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DC:47:26:FC:2D:4B:14:19:23:BC:B7:70:14:DA:60:A6:21:B0:1E:81","sha256":"0D:5E:FD:70:25:9E:DE:DD:47:CF:0C:58:1C:08:A2:A1:05:AC:A6:7E:0C:43:6F:50:E7:49:E0:A1:60:D0:0E:0F"}}},"request":{"raw":"GET /widget/6f4230105bfe4a34848fe39c29b168ee5f88f4d2.json HTTP/1.1\r\nHost: bootstrap.smartsuppchat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nOrigin: https://j2b8s3.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-version: 8f78827c99f8a70d2cd46ee881b468733ffd9813\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=0, must-revalidate\r\nx-hit: redis\r\netag: \"4d0-LI0BsgVAVYgNZMiMIigALmrOdZQ\"\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1232,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"96a799f4728fbc2b39361bbbf4236a32","sha1":"2c8d01b2054055880d64c88c2228002e6ace7594","sha256":"3752109a8a43cc2ac6f040e5b0e063e0a8c2c0089d440221d24e7e7b85fc445b","sha512":"5815b967dd916204a8b011110f4f5edf5ac57655421eda139e608eb94406732ab9d145f85175527c08680adcb827724b66e93766c489b535dfc9c1e9eeb3510b","ssdeep":"","tlshash":"3121796d8a6822fd4245c6d6c5047f075fbcdcb371043d7dea0d5a4d60db2e61136467","first_seen":"2026-01-20T18:54:54.265596Z","last_seen":"2026-03-13T03:38:27.54612Z","times_seen":5,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":215,"dns":14,"connect":20,"send":0,"wait":24,"receive":0,"ssl":203},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/avax.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/avax.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/fet.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/fet.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/apt.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/apt.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/arb.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/arb.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/images/3d-elements/16.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /images/3d-elements/16.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 160936\r\nLast-Modified: Tue, 03 Feb 2026 08:25:42 GMT\r\nConnection: keep-alive\r\nETag: \"6981b106-274a8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":160936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit colormap, non-interlaced","md5":"f4ea65c8d36ab315567af84e466ac151","sha1":"590d0ca91d92f987811ec23e3f3174209f4f8f7b","sha256":"479cf4ffe8df2f653826aaea665b021764c7152c541e051ef1bad77a0c2b6588","sha512":"ee7320b1d17c40f3df6551a6baf188514ab8372322fea6aebec6de4645029fa903efc98adc7d7927fd3cde58a4f87316e297f1ddc11fce7da2b5c4b85dc236ca","ssdeep":"3072:6podvK3cL8FVDnpj4xI9+7awa/qdd+mXat/pr/dNAGN1EdtK61Nuw473JXe6Bp:FuFVGI0awQOC/VVNbAdU61R475Xe6Bp","tlshash":"f1f3125096e3812fb406af95dcb9bc178ba0fe2ed282cc5e078751417ddca983367a4d","first_seen":"2026-03-03T12:18:30.14064Z","last_seen":"2026-03-13T03:38:27.546774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":77,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/fonts/Inter-Bold.ttf","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /fonts/Inter-Bold.ttf HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/frontend/css/site.css?v=1772421563\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 344152\r\nLast-Modified: Thu, 08 Jan 2026 14:22:32 GMT\r\nConnection: keep-alive\r\nETag: \"695fbda8-54058\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":344152,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 60 names, Microsoft, language 0x409","md5":"f77ce9588dccbc52fdbf0b79f0d63714","sha1":"001ec1ea9a5f752d3248769c174b6fc030ab7dab","sha256":"30a5c45ec23a594af2effe8d3b589ad22c2dede27441050a1604d00ff82fd0dc","sha512":"8ac230f16aca8c24c4eacb43d78586a5592b291040a8470ea0399375dca671c067a80303c8486de6ad606c07cba3130de7670fa686baabf7e67505d1dfa01d82","ssdeep":"6144:dKESFhxUpjwDU3q4xSm/Tpac5oE6o9kAkdCP/+mb+XAJzpfFI6L8WyjHUjt2LO:uhxUp8DG/TI1Akvcc4x2LO","tlshash":"88746b23e722930cd65a6d749bb1c3a873727c90bf1ae20b789a2f54988b1f01dd57d4","first_seen":"2025-11-10T22:45:29.720276Z","last_seen":"2026-08-12T05:33:11.414118Z","times_seen":438,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/uni.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/uni.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/frontend/css/app.css?v=1772421563","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:42.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /frontend/css/app.css?v=1772421563 HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:42 GMT\r\nContent-Type: text/css\r\nContent-Length: 3907670\r\nLast-Modified: Tue, 03 Mar 2026 07:48:15 GMT\r\nConnection: keep-alive\r\nETag: \"69a6923f-3ba056\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3907670,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (318)","md5":"6d0de00642414c85247bde2e861b0dec","sha1":"c61d98526fedef5117b8d23466eb43f61cad32f8","sha256":"da37288d140de907af7f03a5b9d1a3feac45c7c1729e861aec48dba389a37c48","sha512":"70e7e261e62d1250bf2061a5165b38a93339c4fd6b6166db78b50354e9fa7638f39c64c2179e69913a484076e365888e4bef5df3e972957107ce22686e8ba4a0","ssdeep":"12288:Y8bkT6Zux6hCHCcYL4SVK9d9VQg989MQcYhI5uXCL2r+qIscm:ICcYnIscm","tlshash":"b025ff3c96f258326c9aa0f6f1c5e49cbb2f81dccd6d9eaabdd110209f443f5d996840","first_seen":"2026-03-03T12:18:30.163709Z","last_seen":"2026-03-13T03:38:27.549438Z","times_seen":3,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/storage/uploads/pol.png","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /storage/uploads/pol.png HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlpwdENFSkcxK1U3eWlIQVB3YVc0TlE9PSIsInZhbHVlIjoiUUg2cFQzYlErbm9kNFJzTW5ZZWlKeDA5V1BBMzZrOUlHbFR4N2h1MGFhNEJLaDV1RU9FajE5K3Zsamd3KzBVeXlEZUt4WGdxbElwQjNLWUI5cmZ1UTNZU3ZySGYwemQ4U2dPSEVtNlZqM0tMcmZJWXBkdHBoOWFZVWFMM2JxVEoiLCJtYWMiOiIzMDdmMzZjZmIzMTlhNGNmNjVkOGZlNTllOGY3NzhhYWIzZGU2OWZkNDJiNDZmY2YwZWQxYWRhNjEzZGUyNjQ4IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6Ikw4cUIxS0xOdU15L0NNUWdVZFY4cFE9PSIsInZhbHVlIjoiT2xta0pWZlRXaXpiRi81VVN6ekIwejFha3B2dndUTG8rekg1S1gvMHByWXJPSkpBWVZ0aGNvUitlc2U1R1V2STk4cm0wN09uS20rWXNqQU5TSG1USlhVVmlKZ3FJTitjUGE3LzhGZEtsQkFHYXAzb1dwQlFQU29aT0V0M09kUWoiLCJtYWMiOiJjOTU2ZTk5OWFkOWJhNmMyMmYxODM5YTEwN2VmYzZjNmVmNTg1MGU1YjA5NDU5YjQyMjhjNTZmY2U2NTgwMDAzIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.28.1\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\ndate: Fri, 13 Mar 2026 03:37:45 GMT\r\nVary: Origin\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43562)","md5":"7524d36ff4e9a50fdd3e969743128896","sha1":"70875f915991fe57ba8c691c772ae0c6048ae121","sha256":"bf03258174c517281f7d28fe8f313b454a9412427b3d54d1eca3d1660facc536","sha512":"6089e8712c26316d70ac298f1e1afe315702a719300c8941fd1c61311d208094bec94675de75d3a81a98b2c26765fd6e3f2e783b7928d4d7d976f1bce92b0994","ssdeep":"768:4pVDAUCBUEGj4N2dpIi241acXA3vNkDgOm+A:mCBUEGj4N2dCi2k5XA3qMOVA","tlshash":"d2532318a4764a704ffa930c3c512e2d28f9295ab94a0cf4fbf4ec5e4e976bd500b85d","first_seen":"2026-03-13T03:38:27.519118Z","last_seen":"2026-03-13T03:38:27.519118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":121,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"websocket-visitors.smartsupp.com/socket/?EIO=3\u0026transport=websocket","fqdn":"websocket-visitors.smartsupp.com","domain":"smartsupp.com","tld":"com"},"ip":{"addr":"63.182.9.255","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:45.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smartsupp.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 25 Jul 2025 00:00:00 GMT","end":"Sat, 22 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:57:04:01:81:87:91:69:91:5F:FB:F3:51:3F:C3:50:59:25:59:2D","sha256":"D8:0F:70:51:28:C9:4C:A6:5A:C3:91:80:AC:41:82:E2:B2:73:5A:0B:A4:07:51:81:EC:03:09:9E:87:4F:81:F7"}}},"request":{"raw":"GET /socket/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: websocket-visitors.smartsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://j2b8s3.icu\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: FrGdwprAwqHMx4zq50OSFQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 13 Mar 2026 03:37:46 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 8oNwhxu3mQ6C2mZlhQiGDlTdPCM=\r\nSec-WebSocket-Version: 13\r\nWebSocket-Server: uWebSockets\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":0,"dns":277,"connect":296,"send":0,"wait":24,"receive":0,"ssl":305},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetPopup-DxcAd7K2.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:53.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/WidgetPopup-DxcAd7K2.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://j2b8s3.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget-v3.smartsuppcdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:53 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69afcbd9-176a\"\r\nexpires: Wed, 10 Mar 2027 07:48:54 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: EwwBuUwJCgH3FLkDAAwBuUwKEwH3kwAAAAwBWd59LgG3BAAAAA\r\nx-77-nzt-ray: e2f754202ccac7329186b3698fe76209\r\nx-77-cache: HIT\r\nx-77-age: 243988\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":5994,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5944)","md5":"14fcc6aab06f4cbe42baa6dde1a2fdae","sha1":"b06c8cf307d005d898954136f82404e6d17695ec","sha256":"937ebe361587f593181ac7bf5f550629647521b2428494f78e51f733d43bf46f","sha512":"0032b2533c7218631226328f150f393ba27e3fb9dd185569ed38bb4de1c16a0b8a439fd68e92ab08abb8d1b687ffe725ab4b8b184b5eff20d41eddfa19269f27","ssdeep":"96:ocA49juh2Px9yl14HzgJHN3MO4rJCQs1Ucs+MvHfF8H8BTQCk3y3OYf+4scVIubZ:HP9jPx9ylGHzgJt3MIQYUc/EHfacB87C","tlshash":"61c1b55d21aa31377a7ee894b52cd253b71ce2c9a18be53d912bce4062d8dc054e33f2","first_seen":"2026-03-12T05:39:03.577825Z","last_seen":"2026-03-21T23:16:41.459556Z","times_seen":14,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-v3.smartsuppcdn.com/assets/WidgetMessengerInput-C19RirRH.js","fqdn":"widget-v3.smartsuppcdn.com","domain":"smartsuppcdn.com","tld":"com"},"ip":{"addr":"185.76.9.12","port":443,"asn":60068,"as":"Datacamp Limited","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:53.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1857279285.rsc.cdn77.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 15 Jan 2026 06:54:02 GMT","end":"Wed, 15 Apr 2026 06:54:01 GMT"},"fingerprint":{"sha1":"02:18:EB:88:15:84:86:93:22:4A:F0:99:0A:1A:DA:F8:ED:54:F0:09","sha256":"25:3A:01:58:46:1C:69:99:5F:71:B3:05:79:0C:92:FA:E6:AB:B4:80:5B:F1:06:58:1B:AF:DE:8E:96:30:BF:F8"}}},"request":{"raw":"GET /assets/WidgetMessengerInput-C19RirRH.js HTTP/1.1\r\nHost: widget-v3.smartsuppcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://j2b8s3.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://widget-v3.smartsuppcdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 03:37:53 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, public, immutable\r\netag: W/\"69afcbd9-11d47\"\r\nexpires: Wed, 10 Mar 2027 07:48:54 GMT\r\nlast-modified: Tue, 10 Mar 2026 07:44:25 GMT\r\nx-77-nzt: EwwBuUwJCgH3LLkDAAwBuUwKDAH3fQAAAAwBw7WvBgG3AgAAAA\r\nx-77-nzt-ray: e2f754202ccac7329186b36921786e0c\r\nx-77-cache: HIT\r\nx-77-age: 244012\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: stockholmSE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":73031,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"f6de9584c7d5324300c2c3f5c8ab49ec","sha1":"7cd14f05f0989dc6c08b38fcc5908edf1cf6d83c","sha256":"5da1f629fe6a11fc5b5732da5ce1ad82bc419a33c0bc0e02d15c180b994aeb15","sha512":"49ae778480f3444e805f2c109857c807f770838ca3fced3f0d7c4493313d9320f2cbceb979651818b8645158da762c1c67805608c42e8ab0c7ada857990fcc12","ssdeep":"1536:Ue+WgrBjP2iT2wPsJoeOArXJBM1lsF3xABaajxMmwVbQ3dg3l1Ch/wtDsaEkeV51:+FrWAPKf6/YWxyZje","tlshash":"c4634c4433193039907b45f9a17e120ab23796c4714ec168b52fcde93ae8de461bbe7b","first_seen":"2026-03-12T05:39:03.589308Z","last_seen":"2026-03-21T23:16:41.447993Z","times_seen":14,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"j2b8s3.icu/frontend/css/site.css?v=1772421563","fqdn":"j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:42.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:43 GMT","end":"Thu, 04 Jun 2026 02:04:42 GMT"},"fingerprint":{"sha1":"C3:FF:6C:A8:16:25:F6:02:FE:D1:40:32:E7:6D:DD:46:C8:59:6E:FD","sha256":"4E:45:54:41:F4:19:B2:0D:3C:F8:27:1E:A6:54:E2:A2:DD:7B:0D:5A:3E:54:ED:9F:17:B8:6D:0E:41:3A:0E:9C"}}},"request":{"raw":"GET /frontend/css/site.css?v=1772421563 HTTP/1.1\r\nHost: j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://j2b8s3.icu/\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBjaFFVV25SeExUOHBJYjFITDZ0OFE9PSIsInZhbHVlIjoiZEp6NjNGelh4ZG54YWlMdU4wZkxIRExJTWxBVTRmSVp6YklmOGhENDlmSW9yVitnWXhlQUZxWXZuZTNVbG03Qyt4L3g1dWZuZnJXaTdwRVdIWUNnUmtiTUhXYVJyWDhQRldldmw1MUVlV1dZKzFBM2JqYms2SjF2U3JKRGxPU3ciLCJtYWMiOiI1MDRlOTg2ZDgxZmFiMGIwMWRiMTY4MzBjMDZjYjNhMTJjZTUyZTJhMzhhODQxNmNjMjljNjA0NTRmY2E2YzU2IiwidGFnIjoiIn0%3D; site_cookie_session=eyJpdiI6InEybUg2Zmdzd2pTZzJzb3QvMlFqekE9PSIsInZhbHVlIjoicTBNSURJdFNyUW1EVkRqRitMMmFuUjIzZHBwU3ZjL1dTZkFPM1pueVdKRlBRT1VwVVBuYWhTbjBzVk1MRVhRa3I0bHBJdm94RFhzM3FTMWNnRlNTNWhXRFNsczAzZWFGNlFScTJScnNPUXJoY2JrdUM5dk1RaVBXbll3MzFuYVoiLCJtYWMiOiJjZjBlYjc2M2FjOWUyYTUyZWY0YWI1ZmQxZTI3M2JiNzlmMmUwY2IxNmEwYWU5Y2M4OTAxOTdmZDI5NDEwMzE1IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:42 GMT\r\nContent-Type: text/css\r\nContent-Length: 407520\r\nLast-Modified: Tue, 03 Mar 2026 07:48:15 GMT\r\nConnection: keep-alive\r\nETag: \"69a6923f-637e0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":407520,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3b855af4bd6112dd862513f6cd402df3","sha1":"0a6b98244c0ebc50bec11ccefb57ee1eaa4e9e8e","sha256":"b31a938706793d0afdc816455e7b3bce972d1904d7b79692e5e36e59aeeb3c3f","sha512":"92ac63509f62798e8150277587fedf60d7ee4c84cd5ce545e48f63232b578a4d3d5161ca3cdb10c2d13d3f4b094226b9ff07e1be7560cf64201fce1ab0cc5424","ssdeep":"12288:3MVJo9IVr5oRokL7kQF/d9XXGbEgFaL79Az1n3sNvMNcNnFLLnzOU/9IEuEsv9E/:o5oRokL7kQF/d9XXGbEgFaL79Az1n3sl","tlshash":"1784c596faf011157827d2687996aba9376c9003c50eddb87fe4205c8fce3e85172b8d","first_seen":"2026-03-03T12:18:30.19299Z","last_seen":"2026-03-13T03:38:27.554229Z","times_seen":3,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":54,"dns":1,"connect":26,"send":0,"wait":52,"receive":87,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"socket.j2b8s3.icu/app/fake_pusher_key_12345?protocol=7\u0026client=js\u0026version=7.6.0\u0026flash=false","fqdn":"socket.j2b8s3.icu","domain":"j2b8s3.icu","tld":"icu"},"ip":{"addr":"151.244.111.111","port":443,"asn":31549,"as":"Aria Shatel PJSC","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://j2b8s3.icu/","date":"2026-03-13T03:37:44.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"socket.j2b8s3.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 02:04:59 GMT","end":"Thu, 04 Jun 2026 02:04:58 GMT"},"fingerprint":{"sha1":"E2:62:BD:31:94:2E:4F:DB:B0:A5:B6:20:D4:23:B8:AF:F8:AE:A3:FB","sha256":"1B:9F:00:8F:8C:2E:66:38:CB:E5:7E:44:F1:F5:90:28:00:A2:7C:6A:89:43:3B:94:90:09:64:E8:8D:F3:1F:17"}}},"request":{"raw":"GET /app/fake_pusher_key_12345?protocol=7\u0026client=js\u0026version=7.6.0\u0026flash=false HTTP/1.1\r\nHost: socket.j2b8s3.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://j2b8s3.icu\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: aFoyPkaHqywjxsV3+BacAQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.28.1\r\nDate: Fri, 13 Mar 2026 03:37:44 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 5j+CuEzz3ZnU0tArWmp3KJwiDkE=\r\nuWebSockets: 20\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.28.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T17:53:53.021164Z","times_seen":17858794,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":14,"dns":4,"connect":53,"send":0,"wait":64,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"socket.j2b8s3.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}