{"report_id":"e8dce15a-0721-4719-b5f2-40824bb9db66","version":6,"status":"done","tags":[],"date":"2025-08-21T22:34:13Z","url":{"schema":"http","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"title":"Watch The.Bear.S04E05.German.720p.WEB.h264-WvF.mkv - VOE | Content Delivery Network (CDN) \u0026 Video Cloud"},"submit":{"url":{"schema":"http","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":0,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-25T22:34:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ogoampoodopet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ptichoolsougn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"imasdk.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3922,"first_seen":"2014-02-25T09:02:53Z","last_seen":"2025-08-16T09:46:06.541154Z","alert_count":0,"request_count":1,"received_data":466780,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-08-20T15:20:37.971253Z","alert_count":0,"request_count":3,"received_data":176452,"sent_data":1388,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"campfirecroutondecorator.com","ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-03-12","domain_rank":37605,"first_seen":"2025-03-16T06:26:47.544899Z","last_seen":"2025-08-15T11:33:50.356067Z","alert_count":0,"request_count":6,"received_data":231469,"sent_data":10309,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"odntaztu.com","ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"domain_registered":"2025-05-28","domain_rank":0,"first_seen":"2025-08-21T19:25:01.499688Z","last_seen":"2025-08-21T19:25:01.499689Z","alert_count":0,"request_count":1,"received_data":1572,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"jilliandescribecompany.com","ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-05-24","domain_rank":50911,"first_seen":"2025-05-28T10:36:51.527949Z","last_seen":"2025-08-16T21:41:22.009308Z","alert_count":0,"request_count":20,"received_data":2107230,"sent_data":25382,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"bobapsoabauns.com","ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-23","domain_rank":16239,"first_seen":"2025-03-26T18:52:40.148632Z","last_seen":"2025-08-20T10:17:37.730528Z","alert_count":0,"request_count":2,"received_data":35248,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fleraprt.com","ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-14","domain_rank":17838,"first_seen":"2022-01-14T22:55:14Z","last_seen":"2025-08-16T11:44:39.85634Z","alert_count":0,"request_count":2,"received_data":930,"sent_data":1215,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ogoampoodopet.com","ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-02-10","domain_rank":298669,"first_seen":"2025-03-21T06:40:39.271085Z","last_seen":"2025-08-18T18:01:06.444934Z","alert_count":6,"request_count":6,"received_data":8913,"sent_data":5039,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.pncloudfl.com","ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-20","domain_rank":95245,"first_seen":"2021-06-07T14:28:03Z","last_seen":"2025-08-20T03:37:37.192198Z","alert_count":0,"request_count":2,"received_data":555862,"sent_data":994,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-08-21T18:36:11.554763Z","alert_count":0,"request_count":1,"received_data":849,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-08-20T15:14:21.137874Z","alert_count":0,"request_count":2,"received_data":30795,"sent_data":914,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-20T15:10:53.071671Z","alert_count":0,"request_count":3,"received_data":102917,"sent_data":1667,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tzegilo.com","ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-14","domain_rank":18163,"first_seen":"2022-01-14T15:27:15Z","last_seen":"2025-08-20T07:52:36.040699Z","alert_count":0,"request_count":1,"received_data":18653,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ptichoolsougn.net","ip":{"addr":"104.21.2.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-26","domain_rank":70674,"first_seen":"2024-12-10T03:58:19.473076Z","last_seen":"2025-08-21T11:15:28.361603Z","alert_count":1,"request_count":1,"received_data":169349,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"entitlements.jwplayer.com","ip":{"addr":"3.164.230.15","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2007-09-17","domain_rank":18344,"first_seen":"2016-06-21T17:08:11Z","last_seen":"2025-08-20T10:58:39.972888Z","alert_count":0,"request_count":1,"received_data":550,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"1cf95757c58e27fb052532f0d99e2992","sha1":"24bc19599cc089d52d21ab774e6c4d4a72e814ad","sha256":"826de74e5d65a1158788aa20221d23d0b65b42937bb711427d0c21bbd9dedf09","sha512":"786bb80871f5b11ef3d8347c4e46ba560a3e4e661503f1e791e1c37643b4f71d087e2de5aadc9115134780366252473973d1a78e0c2e14eec75f2ff284582dfc","ssdeep":"","tlshash":"1e6000c00000000000000000003c0c00003003c000000033030300c3c003c3000c30c0","size":12,"data":"","first_seen":"2025-06-06T14:34:42.64777Z","last_seen":"2025-10-19T23:43:44.778331Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwpsrv.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","size":67344,"data":"","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-05-05T22:41:44.913108Z","times_seen":309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"803f85828b8a86c0403d44c6dea1b3b5","sha1":"ce25ec8e91f62bcfa24d040625d18403f9526973","sha256":"6b15d13a9509cad54fc4a34a24f9779af48c712d92ef0d65c5c0fc29ee50b24e","sha512":"b5d91d3d6ddbc3a926734f5e7ac5a23f5bebb2c621cbd405668791020a4254293fce65b288cabd876cbdd0e3108d2ca05910fb48fdcc13ce3e58e67e75cb5e15","ssdeep":"","tlshash":"f1f05cd2df1447c851006011d939d8999815731489e19435f09daab257800aebdecbc0","size":454,"data":"","first_seen":"2025-05-28T10:36:56.314245Z","last_seen":"2025-10-19T23:43:44.689777Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"2115494b641b4e1a14f34d2d64552b29","sha1":"fae5e680c19b68b4e43ced6a9d5b2e16908f6b32","sha256":"8b73c45b8b1af92c506986362978acead1583913f419776f6db2196ec46a3b15","sha512":"0e957317b3213fbc19dfff0d255d5396b7185d40021df708f394950c33cf86dc272a3ab58adf7f4592a499e12d3b48903fe306a451f74bcba78557075c111d33","ssdeep":"","tlshash":"e9e0611dde3edbc502b620d2b282d38aa23e101e95049d12225e80857b71edf49dd604","size":369,"data":"","first_seen":"2025-04-23T04:06:55.142043Z","last_seen":"2026-05-05T22:41:44.919259Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"72e89292dad5c7e8a82f6101fc52b71a","sha1":"11917db2f454df110fedaf803ebf640052f953b8","sha256":"1058329efc2e4de916dc58c5996ae6620836b878c33d13742b90f20ccddabe61","sha512":"995b449151db16173299bea7ea6a0df052295a5fa7f19a905863fe5e4278fd647569161df9ea2feb72d33eaafe4fe60cc3a8bc240af7aa2863e4da7b527386dd","ssdeep":"1536:Y2u4R3FNZRo3GiCNIUhxBsSU1UxYs5pfEzI:FRPLzybXotE8","tlshash":"21a31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","size":102873,"data":"","first_seen":"2024-04-21T22:28:32Z","last_seen":"2025-09-27T09:23:21.790129Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"df2b5e52de60e369343479e91bb36b29","sha1":"f5d3d73c0ce0255d4899e6151e7a54aef1e26a7b","sha256":"5f82bdc3f3698939df748aa682bc49c5299d1cc25c6afbcc3e16ecf5fd0318f1","sha512":"e49f5ac5a73f8987a56f7adc538aeb1f8760b8e08261487c9f242b31a1fa00c520f658b5854fa265d7e95927641f6fb826d9805c8780a7569ce4205f3a643d4b","ssdeep":"","tlshash":"e811595f1682520844c879eb5e8310a5f134a991fa3da2e8a325a1107efbc1c97bb8cd","size":864,"data":"","first_seen":"2025-04-16T08:02:19.832585Z","last_seen":"2026-05-05T22:41:44.919876Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/polyfills.webvtt.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6dfd6bb68ee310e2f030cfe1f63ee4e","sha1":"69a2022e55d0866ddd65687463036d1a0b6fd4e0","sha256":"a7d6eabe884766f310f08ac76a12c72a5297672f13309863d9cded6613ed6a01","sha512":"e33f9847fd73c1c0022e79b5ab1a6fdb071f175862b7e2e752bc09812607243ab260934e980c4b25a71c84c8e9bef5f83730b69fc21a8d25cf5fdaf7fb8eaf40","ssdeep":"192:ABq24FoCUV2VB6yNfWntGhcKGoD7JF7lCL6MCUNmTCS7aiTd2iRn4QF7kxM+6Awl:ABq5FZUV2THN/CYnJrC1C7TCcHTdDR4O","tlshash":"5022d8a036f1649e8394d88f457a0190e2285571f98bc9cdf558cdf7dc30b8722aeb79","size":10446,"data":"","first_seen":"2025-04-16T11:00:53.641209Z","last_seen":"2025-11-11T18:38:31.852289Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba04ce282da046cf55192a5e83149805","sha1":"c916ba55455060853a2531909c34c7a079efaa16","sha256":"6ff7bd06bf9aba3e4153d194ef4306ca57da5d933bc98c7c177b62678e97aa2a","sha512":"ad534e053d57453799833f095e6299891b3afe09ab31b9fe18c9149e227eee17c872ab4df2285e329a53acfc100d98d8d7557dcaea195b7438c6533c416f660e","ssdeep":"","tlshash":"3d70000a0802080208a0b80c2202220030003202803000800223a0203008283ac000c0","size":21,"data":"","first_seen":"2025-04-17T20:44:03.876522Z","last_seen":"2026-05-05T22:41:44.920785Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/in.js","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9fe5c95f002fd44894a216b04c44682","sha1":"374cd0405a65e6af34e924d085c9e52332aeb53b","sha256":"0d424164fc0df7c0fd4dee0a841d8f27a765560f15829243fd10eb4aaf711881","sha512":"ab0b21d88c5f1501b680616135c5a13a1c1f01c9e8f0c3773a2a6da75a4e7fe792906a3a2269f741fb5b0d74d08c8f0c24d8fcc3e2ff8328ff628d73f6bbf9d4","ssdeep":"1536:O3ZgKB43L9/4jPzQ54W4Q8UsKERsrnWiH/2p5lA/nQQflsAtBZlCCex1GxX3oeGI:OGf4I54Wo/dAnTH/H/tF7Z59a3kBjVX","tlshash":"312483ac2b97303e713bbd1e6d3a45299232bbd1e46d840cd973ddc94876406e335ea2","size":215356,"data":"","first_seen":"2025-08-19T06:33:45.774006Z","last_seen":"2025-08-25T06:22:46.713343Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"73497a37c3561adbd8ce84e4f017b368","sha1":"9193ae73cb3dd2833be8c942714d5544bfb628c9","sha256":"9312a1adbbf0a4c05fc296d158ec3bd39acfe50e9e98ff02688139aad6fc3351","sha512":"b265a65f30fa9ffac3fb7ffca07326823466dcd67a238a47091a497c7f2b2d13e09603cbb8e85dce136efeb8bbb9d246e4894d6f672dededc47c88a1a85d9a5b","ssdeep":"","tlshash":"c150000003000003030c0000c000000000000003000030c000c0000000000000000000","size":9,"data":"","first_seen":"2023-03-07T01:03:23Z","last_seen":"2026-05-09T13:03:28.826152Z","times_seen":5469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","size":17879,"data":"","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-05-09T14:42:05.605372Z","times_seen":6699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/check.html","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f2e0cd22b41fa7c9212af0b11f449d3","sha1":"6c552632a2eeaa712496444594c3e8c68eadbbb0","sha256":"d7ca5af269e02e5109a61ef55df0196e2206204d6c742daba5a153defc097fda","sha512":"c90bb9984fc0b2a5374129cb10fc509e937ba565063e2530578430fb0329f8058c145c914de139fa166d8530cfff9799a8c78aa1ad2752d9ec72e24c0fed477c","ssdeep":"","tlshash":"d201685934f5684d5127b630255b22182d32a40325cbd94efb2cdb301f825a7eca8aef","size":762,"data":"","first_seen":"2025-03-07T08:34:13.499254Z","last_seen":"2026-03-04T07:06:03.173543Z","times_seen":7245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6dfa16c1404eabda02d10aedda4ad1f","sha1":"a4825ed15a30ec25ef044bd25edcb049856be1bb","sha256":"8307c5064f797cd9935c4445c3fe449fb380b7bd909572c738af145fcbad9e54","sha512":"014de70adc472ede32e3f04307b6b886dbf67a613396099aa3edea1b7eb103fc8779e0b268528b30eaab6e570a31216aba90274a4cc3c961224a25d476ae8bed","ssdeep":"","tlshash":"c8a002e68de500557e1249823e326cac6555375c8c91b16da0a238e752cd37eaa37718","size":68,"data":"","first_seen":"2025-07-09T03:26:33.482011Z","last_seen":"2025-10-19T23:43:44.740593Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ptichoolsougn.net/401/9013477","fqdn":"ptichoolsougn.net","domain":"ptichoolsougn.net","tld":"net"},"ip":{"addr":"104.21.2.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfd22c8e0c4c93ba6f717b5dd9dfe6a3","sha1":"b3f116d716a4e209190374b17b618f12857354a5","sha256":"49abd952798b5b237987a2387dabb15c190f207f93c546e0e2cce6a3c5391e44","sha512":"0260418f803d958e111390e043677f495efcf3030edd23418d0eaef84879b72056b9451df1b34f841fac626c45942b63c1023367743fd0697170d132df986403","ssdeep":"3072:qixQobTobRcWcSyxKzGbLmDic6aL72EKhOIGngGOF9LrKNIJHJ9pkDogNWkkWkZ:q/obTobRcQzGbLmqaL72EKhOIGnbKXKy","tlshash":"7ef3c684f582b4611e636534312fd10eb5aea760a84e8a90d1dae1b27f3703ed377dd8","size":168464,"data":"","first_seen":"2025-08-21T11:10:59.410857Z","last_seen":"2025-08-22T06:05:08.230088Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2060451?id=2060451\u0026jp=_clqejohfdaqsflmdhcujmh\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Vd4lLTdaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=1803918993418752\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a13b2db185657454ebd2aebfa0a869d","sha1":"579060b6f138911c84b99f494501d863c6298d58","sha256":"1f344f7e2da1c0b201243907f3eef580d2d78344f4f753c3664bce8880535ff1","sha512":"9946dfe46f47422e40b62de129a85cc0e2c4651df93dc4a4ceb1fb97e3652270db99d44e50386591bd30ddce67e14028cb12b61ef4d552d2dafa1229d63f3abe","ssdeep":"","tlshash":"54f08be57fb2d8e76da1260d26ba0d71e8516772de47e36c1163a805460487c6646080","size":548,"data":"","first_seen":"2025-08-21T22:34:17.774705Z","last_seen":"2025-08-21T22:34:17.774705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2060451?id=2060451\u0026jp=_clqejohfdaqsflmdhcujmh\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=C0AHI2zaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=1522444016810496\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"601c790bb3088c91a28e6bae17665541","sha1":"c14abddbdeab6fb6a24fe644c9cd2c0a46932b86","sha256":"6089c11c2d55626ddaf289c3a93f0522686600fce9c44727f44d6dc96a6bc6af","sha512":"c2b6930e7086db4e9d0f0e19a25ab29716f82ba5c93490fb074bc3a9ab0a96bd3c54e99d41a9f0d0a9533a3a87d7b6fe5f3b9bca2eafdad1c693f6a6477d54ed","ssdeep":"192:paFH+V7F6zFFsC9YIEHf5q4oULq/RD/Nr8ebvtW+2poK:paVE7F6zFt9/E/Ho6q/l/hzR12poK","tlshash":"8c128e6537b3e2aeb0fb8e1aa8b15d7509e622a55e0351c9b0638e3d6f007b54db1c84","size":9024,"data":"","first_seen":"2025-08-21T22:34:17.768976Z","last_seen":"2025-08-21T22:34:17.768976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1655af67664eeb5cb97b861e311c7c60","sha1":"75c08b8b8a7ec31ce223acc669b732c3f1d18fe6","sha256":"5358f779c2d1e4392c3e7348242de10b7d545ed1524916d8ee1a5cfb75b44082","sha512":"d49c9f5ae3aa71069964105b4498cc9e60d071d8fbc9f57d1a376c381c3b07bb31919e0901186fd906708b4fe679cc68b24bfb70c7a19391d87803789ba0d9fe","ssdeep":"6144:Rn6xEgF6TNGbqBw7nLCPq04yPROPoydAhTxycO1PgUR:agyLCUypO5AScO1PbR","tlshash":"f6a4facdb6a674669363f4f5403f010bb23bb8a6e408886cb649d9e17e749094277f7c","size":466065,"data":"","first_seen":"2025-08-20T23:29:00.269605Z","last_seen":"2025-08-27T07:56:21.408775Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/provider.hlsjs.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"28ad7c8f97ec3efd3fc7355f4b7ab863","sha1":"0cc23dd36c89c6c9d47da8957c638583e8a843da","sha256":"061bc2c8535bfb740a2c1a5dab6e4c91c5388b84609282356b6d67cb0d85be73","sha512":"221c0c31d6cb59acb129ca485960e2a56051d668b76926e2cbe1b1241c46c4f0e7b192d571adea369a0d04916f94a162a12806aff5089f954306a31c54263ccf","ssdeep":"6144:caK/sZg+NY3UbNe6rXTQoalFwc3JWPCaEqeeuFBWqWDJkw0dHhbBI7NEpg8kF4e9:zbNPDCFw2BWqWwHpt7Y","tlshash":"21c42ade3795a01683c2b1a5903f5617633a7d0a280cc16cfa2be9d72d79949b03bf74","size":574870,"data":"","first_seen":"2025-07-09T03:26:33.452721Z","last_seen":"2025-12-13T13:26:16.431753Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/vttparser.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"aac63679e388c09f95e3e3cdbb52d771","sha1":"7262f57cc1346e607071201c4105c50b768ab87f","sha256":"c5ca49b071d946eb43acd7ddb2186e9b98bf95fc971bdebb0dcbfd4cabb3154b","sha512":"f9c0ee52e2c4eb6f2310725a1dcdf26f14109b605031695738f28ef14ff8bb0c86a35ec94940fe403939245f7193853bae0ec5feb1e4d09dfe21b1af9d69e199","ssdeep":"96:BMKCEZLCyGWaVDvTg7ksuFs0ad83YP8GBXZxqqDysNoqZl3brzVt8nPFJHP/65U6:BMjZyGtV/g7rK/a23GdZcqDyAb2nTpdm","tlshash":"9191e89024413c6daba6b69b00ef266043f8047d3d4d0e90b6a4dbab75396cf51b9bf1","size":4403,"data":"","first_seen":"2025-04-16T11:00:53.625974Z","last_seen":"2025-11-11T18:38:31.844695Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/js/loader.bc4a6543429.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","size":83200,"data":"","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-05-05T22:41:44.90844Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwplayer.core.controls.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a349b8e256b710c33f59804e11824af","sha1":"4124b412899128cb8a2521e4f5c2ac88c2c143b1","sha256":"527933d04090c542ae6bff57a0dc240d927908d890e37b578effa55a310932ce","sha512":"8b8efd834ba24cfe9b0f96247bcbba7f2fc1c939a13ebf2cbb8c1e06bd890e5e07f29b82c3303f5498a2f998642ab7d798ab3eff4a975f9eee47175a5358136d","ssdeep":"3072:VM7nFu+slX/+8CtPIVcSJh0EcYSrJ4MOkVGvSwqzrpxMChYFwSC3G:VMxRU/+TAcSJh0lO0GvSVpGJFwSC3G","tlshash":"a07419322142523596e682da76514604b33a8085f506cfacff7ceddd4c6e98b31fabb4","size":343311,"data":"","first_seen":"2025-07-09T03:26:33.46094Z","last_seen":"2025-12-13T13:26:16.486694Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b7f650ed5e68a6093fb5079875dcb74","sha1":"ac248fb3710103047c295df6e4bff5a1e0e22e82","sha256":"f474421d0b21451cc69e9718fd24278d7137f131571ff402ed3ec6418ef15185","sha512":"602a8d3a689cff3801ed23b66ce644f962d1066329f14c2f8bdc7b67f4d51cd0752cb61fbbf903960bdd02f6f659e74135b252db04116ae7d95b4d3121e6f2c5","ssdeep":"","tlshash":"652121db134408740a8e25d6c757202831b220e9b90ea495986c8de01718a2fcb31acd","size":1158,"data":"","first_seen":"2025-05-28T10:36:56.319185Z","last_seen":"2025-10-19T23:43:44.758275Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"49ff2300f43dca2ee8ad9e684f22aae9","sha1":"af3832931ea1cb6faf81664f356a2f7e7fd23ed9","sha256":"4668b1c4be37e700f7fa7f0514795b0e1dfd6c03eaf2d35e499cec8057bc1a01","sha512":"87ea65cc5a5458839efed99b98d2e6090c17dfffda9532d25163c7eac31800e66316b03a9920b954cdc5f7028aab674083198f700c166998233a1c38a852c3b1","ssdeep":"","tlshash":"b4b012fb65c040a83316b8922573dc8b5c0b46cfd9998410c87fe6e13c22219b5415c4","size":102,"data":"","first_seen":"2025-05-16T04:35:40.709687Z","last_seen":"2026-05-05T22:41:44.922741Z","times_seen":276,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/build/assets/27-SABxh.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","size":1756,"data":"","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-05-05T22:41:44.903503Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwplayer.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d3b7e0e4267402d0e259c9a21792258","sha1":"6220167731bbbb87609d184a95f5c4c2b2f8c72c","sha256":"190acb6da87bd161114f93feb270234b6ff00dafa7c98732c452ff447d4cef77","sha512":"4ae57475aa41d82ae52d0204e9978089995d10d72cf1c9beb686e1811a6bb7a7e24140f21ecc073b01e1209a20c5cf4b27f26ae82e981ef8d5374aeb9a1ba75b","ssdeep":"1536:oryPjl9oOHjCyj35oM8j03kwdtxwszufvL3v5qYtwR/iaCttHF3vLGCaUZfkJk80:FHJ1az3LpaUZfkO8bMdhdD5J","tlshash":"59e34ca631c2f4a603e224d6e47b4101f2790949384de9a4f66cecd7795a907b1b3fbc","size":155964,"data":"","first_seen":"2025-07-09T03:26:33.454125Z","last_seen":"2025-12-13T13:26:16.425699Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb730835811fc6164ad0c41a4748ebcb","sha1":"22c1d376d48813e67d49941f63eae358b293ee98","sha256":"459338ffa0b669fd235404d2e2f8b72ea1b402f1ca2fc557a6764e92b10cb43d","sha512":"3b0301bd6c088558a37e49bdee3a4f87d9faefda63412ba77f9ae1ff469cd81b3d14e38d84e56f2b89ae945e03f6fb7fc2f77e8d6c7ada4bbf58d21ac6e9dd61","ssdeep":"1536:iI7Xxg0FsqC7bWLL072UQQP1XICsYt9GjV/yuif2+MfJa71ZPUT2rb9p:t7h9FsqaWs7jZPxhVCvi+vAiT2X","tlshash":"7aa3c88939d6b84943b2e07501bf2ccbb5bb7d80700c9545c161e9b4fcf1aae91a3d6e","size":105552,"data":"","first_seen":"2025-05-28T10:36:56.321576Z","last_seen":"2025-10-19T23:43:44.767379Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"8402025cf4a921ea5bbed15b4a563ec2","sha1":"8c5512fc9a23a58311783b1fc42cfe82f9bcca9e","sha256":"faaa1ee83fb5b8978b4aa2289506dcca441eb677bf0e2613de4e4d5e5adc2be6","sha512":"ff3d59263871ef4693b0303b39d7b01eeda7ce15f4a5dca69b351abf721c437629120118c416efd658fe1f9efd497d519177929dd12059244d6a29a0c3e55ba7","ssdeep":"","tlshash":"9de0c23361ae001d16f331266f5e600495aad0270c6baadef65da8300f3b839e96c3d8","size":412,"data":"","first_seen":"2025-08-21T22:34:17.792861Z","last_seen":"2025-08-21T22:34:17.792861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"a62e460fbde44f2a530da62245211db4","sha1":"47114e7b018ddc2cda5b0ac878103af424d2da36","sha256":"8e5285581b6e3bd0dac80106deffb8850543fe58ab3f6f3e4610a7b489d97720","sha512":"925b0d7939f5060f59b27e6df6180aed396ebb7fe6051d639fc61845a2addbf7a4752ff37b4daf0c926762b4aefc8c0550c2b1f7592169ba47f9f2e74ad915b0","ssdeep":"","tlshash":"e901495b908a256deab7090b666b74e83f1b2811a0c1f42a714c14a0bb2275f62287db","size":849,"data":"","first_seen":"2025-05-28T10:36:56.324133Z","last_seen":"2025-10-19T23:43:44.775602Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-05-09T14:54:44.577538Z","times_seen":24531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","size":5124,"data":"","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-05-07T15:40:48.972747Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"87c4d922e226e77f9897c4e0b19d824b","sha1":"26a4c1d7d8633ab9e69bff1d0db2d99d7554a3ca","sha256":"e4c6a0eca87129f832243887b254d7955082be5dcbccbdc52fb818b026d7b4f8","sha512":"1ca0504ebb3640fa8ea8a86cdbe8f67c668ab5fb74aa8bc742bca7d8de2548640fa1e1f8d2d14f0dfa11c9adb61fb2d5b54934fff02f587ff2d9a1bc2f5cbace","ssdeep":"192:o+xlXSixlLx7XKFTfCkARJW3YhTuYw2Kkk76lHL9TT:o+xlXSWlLx7aFmkAnW3iTbw226pd","tlshash":"e6f109ba3347aba703a50cd690bf5530e4794a093096c428f5bcac8738655c291b6e3a","size":7471,"data":"","first_seen":"2025-06-06T14:34:42.644531Z","last_seen":"2025-10-19T23:43:44.787402Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-09T15:17:51.798996Z","times_seen":152813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"odntaztu.com/en/ohsfum?nj=3\u0026lalydvhx=145427\u0026pdii=1\u0026oq=dav\u0026hgbyxlx=956412\u0026tn=_ycudqbxwruxjjteiirhfjlw\u0026fqubpwb=150928\u0026qnqw=193861\u0026hokgs=619672\u0026id=2060451","fqdn":"odntaztu.com","domain":"odntaztu.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"63d90a1a93c6353a78a2705aa30e1b2b","sha1":"9c3d2025c55d51419b1ea5bb3dbe5d9b96bf1620","sha256":"abb23942656b689d2096529a643833569aaddb08c747a87de827b24dd07234db","sha512":"2b706a2590a410ecd78b6b129eb2f340af117f1148aa0d7647d0b6e18746908363bed483f3b3f826896aa00f7ac0c4ac14ff5f512c753738ecc28bef6aaa8eb9","ssdeep":"","tlshash":"e3f0c0883456e8cb9c602c142bfe4e9384d100fa6d737714e2a4c55c4214229d54344a","size":535,"data":"","first_seen":"2025-08-21T22:34:17.760807Z","last_seen":"2025-08-21T22:34:17.760807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f3b4e59e037fcdafd7918380c9e4462","sha1":"53e2530697e93b3025ae93d1bdafd3689763ac84","sha256":"bec98c0f5785c56b0ea5cacb3bedb41e8c3fb5a6b8781ce8d8ef8a8a08bee50a","sha512":"df03b6d8422fd039fbd768f116658a2524024cbd77786fc5562a7c5dcca01bdd6b32cf2b16e09d2773edd3c967c31ce9f5991c38337190a9f262b07c270e1574","ssdeep":"","tlshash":"c1c080346420c4344c5d544d7173db5dbcf315983de22442945f8e4c5871ed50851cfc","size":181,"data":"","first_seen":"2025-03-08T22:01:05.109003Z","last_seen":"2025-09-19T09:58:33.173923Z","times_seen":134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"0beac54daf16ad2d8235e5ae5b2a712a","sha1":"2c7dceda748b5be34b4b1cc057f8657ef986439f","sha256":"dae7da40b408a6e777d59a00838ae402f4abcf4be082be3b88a9068634a3fd8e","sha512":"ae7a9a036f48a4e1efcc0514710ba90854e26577569a600dbdb9063f92b52a82570523c89888d60b50e4c39b91beb974fc5d548db4c5a89392db1433c33f5373","ssdeep":"","tlshash":"48e0f102346d5660a4cb002f1a72223433a2359b3951885644cdc83b9ca0d44945d2e4","size":397,"data":"","first_seen":"2025-04-04T04:59:30.319262Z","last_seen":"2026-05-06T10:25:30.825968Z","times_seen":329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jilliandescribecompany.com/build/assets/27-SABxh.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /build/assets/27-SABxh.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=u2ymIrLsGhFAEgo0; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=XpE38TWGtxV3UnwS; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 Aug 2025 18:22:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-6dc\"\r\nexpires: Sat, 06 Sep 2025 18:22:26 GMT\r\nage: 1224683\r\ncontent-length: 743\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1755)","md5":"0f8d196002a87042ea0937428f428732","sha1":"a51a5552c6d4ecd7cef5eaf692805ed2c63b80bb","sha256":"3b04c518e637741a9132153c76798ce7988d6b3d7062df0e34b639f8016815dd","sha512":"4579e32b820b00129bc56ed5f6b565f9a202bb129167fdbf3ea31e497954e0127a43d49a011b11355fdcf3326068b59384598c5ed9b3bf2965e9399d639ecece","ssdeep":"","tlshash":"9f31b85570f96631c1593859e37bb362b2e00d5b7d253c8160ad0b726e39cc2dd7af88","first_seen":"2025-07-09T03:26:33.454888Z","last_seen":"2026-05-05T22:41:44.903503Z","times_seen":239,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imasdk.googleapis.com/js/sdkloader/ima3.js","fqdn":"imasdk.googleapis.com","domain":"imasdk.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /js/sdkloader/ima3.js HTTP/1.1\r\nHost: imasdk.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\ndate: Thu, 21 Aug 2025 22:33:49 GMT\r\nexpires: Thu, 21 Aug 2025 22:33:49 GMT\r\ncache-control: private, max-age=900, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 17368041359818088958\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 146902\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":466065,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2718)","md5":"1655af67664eeb5cb97b861e311c7c60","sha1":"75c08b8b8a7ec31ce223acc669b732c3f1d18fe6","sha256":"5358f779c2d1e4392c3e7348242de10b7d545ed1524916d8ee1a5cfb75b44082","sha512":"d49c9f5ae3aa71069964105b4498cc9e60d071d8fbc9f57d1a376c381c3b07bb31919e0901186fd906708b4fe679cc68b24bfb70c7a19391d87803789ba0d9fe","ssdeep":"6144:Rn6xEgF6TNGbqBw7nLCPq04yPROPoydAhTxycO1PgUR:agyLCUypO5AScO1PbR","tlshash":"f6a4facdb6a674669363f4f5403f010bb23bb8a6e408886cb649d9e17e749094277f7c","first_seen":"2025-08-20T23:29:00.269605Z","last_seen":"2025-08-27T07:56:21.408775Z","times_seen":11,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":171,"dns":19,"connect":15,"send":0,"wait":51,"receive":54,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/vanilla-lazyload/10.17.0/lazyload.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1810\r\ncf-ray: 972d9827f911568d-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb04017-1404\"\r\nlast-modified: Mon, 04 May 2020 16:17:27 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 510145\r\nexpires: Tue, 11 Aug 2026 22:33:50 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HxGQxYsk8%2Ff6bFVxU7cu9wpiu2ZYdo5oU02WCPEHlc9ZgypKPvxRVNFrwP05hADxR%2Fk9A1UvFSKZDrDgFMizsefTAU7PWTR9S6lH50qvdAdYPNTmjJKYPl49QJvSg4u%2FbLqsYL3w\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5124,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5082)","md5":"375e3e0688214ca1595fc28956430dd1","sha1":"09ba8de39859cd17c2701057352dd5b8bc3c07f6","sha256":"a052ce2a1bfa39fd0315ec22b7b123a0097dc99884a5b10c348931a2b0190b1f","sha512":"da84ce21b5de848227f5cc70b591805ab9228a4c796058480a8259378a0c0a8b36137b02310d950faa4440b27330ba0b21518404b2b974d6feb74556837f172e","ssdeep":"96:lncpq9Hqqq0ykOP6WUuBymFCxWPIu4WYdlnlb3W5d1wgip+Aip9DyB9tyqkXlQ9I:VpHlqeOSWU2cxWPElZjJi7DyB9tyFX2K","tlshash":"06b1420cb069b03f656bb036413f130b7236605678958498f578dae9cabc84e2433fbd","first_seen":"2023-03-10T00:45:43Z","last_seen":"2026-05-07T15:40:48.972747Z","times_seen":407,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogoampoodopet.com/500/9013477?excludes=\u0026oaid=08022c7ca8294dc5e897cb5673ab730d\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.699.0-s\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=1\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2Fe%2Fcuvpbrllohmc\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ogoampoodopet.com","domain":"ogoampoodopet.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ogoampoodopet.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:24:43 GMT","end":"Sat, 18 Oct 2025 05:24:42 GMT"},"fingerprint":{"sha1":"F9:79:8E:73:08:0F:00:A8:A8:34:31:34:F2:AC:FA:89:9C:19:C0:CE","sha256":"F9:81:D8:67:D1:8C:E2:63:34:13:DD:D0:1E:FD:76:40:FB:4D:3D:A6:6D:A0:F5:44:67:8B:82:04:1B:DD:E8:15"}}},"request":{"raw":"GET /500/9013477?excludes=\u0026oaid=08022c7ca8294dc5e897cb5673ab730d\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.699.0-s\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=1\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2Fe%2Fcuvpbrllohmc\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ogoampoodopet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: OAID=08022c7ca8294dc5e897cb5673ab730d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 5f65fb241bd6bd2ab80dbf92eddbc2a1\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nvary: Origin\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08022c7ca8294dc5e897cb5673ab730d; expires=Fri, 21 Aug 2026 22:33:51 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1898,"size_decoded":0,"mime_type":"application/javascript","magic":"JSON text data","md5":"38104725557f4fffb0b498c2ffe97de9","sha1":"50dbb4cbb5fe406627d32d465ae4a64651ac8e68","sha256":"704f8a51508ab5ba1383b65a0d573c3e6eac993330bf8faf92ab3f84d3f2ce17","sha512":"72a405747d42a2730de0b9a071e7c52886466e26fa4a745eee1140ef75629d311e56d1811cc4be9f306e38ffdecb4874c0d9c59bdd480df63a6ddb49b88ffca7","ssdeep":"","tlshash":"c04119d9b1b904b6e35c6051ec2a3905d26ba00b94adcd8dc99d16291c9e1834cdc288","first_seen":"2025-08-21T22:34:17.73137Z","last_seen":"2025-08-21T22:34:17.73137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ogoampoodopet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 00:31:08 GMT","end":"Sat, 18 Oct 2025 01:29:43 GMT"},"fingerprint":{"sha1":"4E:96:D6:75:E3:4E:EB:72:97:6E:6C:E5:16:12:62:F0:5C:39:62:43","sha256":"AC:C3:8A:C8:E3:75:C3:F1:0D:5F:68:9A:20:81:89:FC:96:E0:CC:A1:B8:04:E1:4D:96:DE:70:B4:7E:4B:70:EE"}}},"request":{"raw":"GET /www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 16893\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Mar 2025 02:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67d78504-41fd\"\r\nexpires: Fri, 22 Aug 2025 05:43:13 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 60637\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YcUcn4TnGBbWNgkmJ2cJogvOFUGdRdbMvjLZ29BTqIb4eNS26DjUMxKZtWm%2BCAIEeXm8KNvJ9hOcPaj1Y5k8DOjU1bLXJkIlkepmiPU6sw%3D%3D\"}]}\r\ncf-ray: 972d9831edb456ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"31f5bb5f43a7bd2800c6724e3a4125d2","sha1":"bc1bcd6aa31ac91dd34359c2fbbcaefb3e15c875","sha256":"e5dd86d52381d2bff5f1b74d3923443d3d95ced64048662307ed3ec2d52eb61b","sha512":"472e23766bb20f680ab31d5c358d9555ce56596444072978dd6340ca5e918aedcf1985a811c7f3f41b72bb15ce3df8ca98a2fddb5ec9a1eeb5f30d586fc7c23e","ssdeep":"384:wDIuIpXyvlnQ8HrcT30rRp8Rp6g9TzBtnL1Ti7DpHQ9:wsHyvBXHrQxF93By7DhQ9","tlshash":"0572c06f0a4a5703999d1c0d1eab7c9d667a425f007c2e6b23239c5cf94a36f6042df5","first_seen":"2025-03-17T02:19:44.486682Z","last_seen":"2025-11-29T07:50:01.235056Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":21,"dns":4,"connect":1,"send":0,"wait":8,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:53.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 15 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 570044\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-09T15:22:38.78062Z","times_seen":805665,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":29,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tzegilo.com/stattag.js","fqdn":"tzegilo.com","domain":"tzegilo.com","tld":"com"},"ip":{"addr":"172.67.193.52","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tzegilo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 15 Jul 2025 13:03:10 GMT","end":"Mon, 13 Oct 2025 14:01:42 GMT"},"fingerprint":{"sha1":"63:44:F2:D8:6F:1F:20:09:BB:64:B8:65:D7:08:7F:9F:70:FD:23:6A","sha256":"69:42:0C:97:BF:80:90:D6:F2:1C:01:38:E2:96:21:71:C0:69:91:32:F8:1D:3D:97:80:B1:A0:E2:5B:FB:44:02"}}},"request":{"raw":"GET /stattag.js HTTP/1.1\r\nHost: tzegilo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 11 Jul 2024 10:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nlink: \u003chttps://flerap.com/\u003e; rel=preconnect; crossorigin, \u003chttps://fleraprt.com/\u003e; rel=preconnect; crossorigin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCJ7J3RDSHv0Qy9GKDjL5ReZryFNQXH6%2Bwdt8NGl17L8bHFaiqthTFCLd0EDeajlfh39i3xwhjugUg9OZF9LRgPVIHYEOaM%2FmQ%3D%3D\"}]}\r\nage: 5387\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"668fb2be-45d7\"\r\ncontent-encoding: br\r\ncf-ray: 972d982f2e9b56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17879,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17229)","md5":"01227f5edc20e0ff4ed643b27cb8bb68","sha1":"d71a88f7341f2b1bdaa7deb9a66888607bd52598","sha256":"75c91d86601e23ab56d872b31b42660f893fc6d6b0785e085c06c2c038e98fb2","sha512":"88046b07c07ff6de47ef7d1e0d7ca281fc48e91fc6a292cdf611457b96ac92bb0068971cfd55c0cc3e6179d7335e77a6a14b15fa502bbae7b2233546da6c0f98","ssdeep":"384:WDWdyJ+TJTwWV+6RUL2qq8L6jW4+QL1zWAWvVRIDiei:7so1V+g+d+j4pJ5","tlshash":"8d82094a72d525ee82a3a1d10cef612ffb664e86a97e1785e381b49c187404ec3d7f90","first_seen":"2024-07-11T16:28:55Z","last_seen":"2026-05-09T14:42:05.605372Z","times_seen":6699,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":17,"dns":5,"connect":1,"send":0,"wait":8,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwplayer.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwplayer.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=u2ymIrLsGhFAEgo0; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=senyNYIDsvz0wnpp; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 Aug 2025 18:22:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-2613c\"\r\nexpires: Sat, 06 Sep 2025 18:22:16 GMT\r\nage: 1224693\r\ncontent-length: 53207\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":155964,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2d3b7e0e4267402d0e259c9a21792258","sha1":"6220167731bbbb87609d184a95f5c4c2b2f8c72c","sha256":"190acb6da87bd161114f93feb270234b6ff00dafa7c98732c452ff447d4cef77","sha512":"4ae57475aa41d82ae52d0204e9978089995d10d72cf1c9beb686e1811a6bb7a7e24140f21ecc073b01e1209a20c5cf4b27f26ae82e981ef8d5374aeb9a1ba75b","ssdeep":"1536:oryPjl9oOHjCyj35oM8j03kwdtxwszufvL3v5qYtwR/iaCttHF3vLGCaUZfkJk80:FHJ1az3LpaUZfkO8bMdhdD5J","tlshash":"59e34ca631c2f4a603e224d6e47b4101f2790949384de9a4f66cecd7795a907b1b3fbc","first_seen":"2025-07-09T03:26:33.454125Z","last_seen":"2025-12-13T13:26:16.425699Z","times_seen":141,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwpsrv.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwpsrv.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=B4c6YWIVR60YNsWO; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=633cu7jC3tUEFs5j; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 Aug 2025 18:22:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-10710\"\r\nexpires: Sat, 06 Sep 2025 18:22:17 GMT\r\nage: 1224692\r\ncontent-length: 19408\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b7c09a238f43ba40002820079de36b91","sha1":"620bbc4b53e6fd80b6cd5c89271bc09973d51903","sha256":"be32622dbb1e238992fe4d24d3fd2aaf05b5a283f58f249790b673f04e64c24f","sha512":"41864f6164c9375d1a4abcfc0e831b453e963e0f6c109da0a74e34157b59714eb8b9b0ce2c63b59cade937acb560d38b4a328f0e51fe7ce9ec97df10d8a22686","ssdeep":"768:DiDjPSAlvbtXral8WKOR7pr1oJl92LCaA1YL9ncpgW:+nPlZral8WK+EJl92LCcLWpV","tlshash":"4463c78d3685b16a5a6770b8806fb546723d1dd6308dc250ea50eec93c3de5ee237b2c","first_seen":"2025-04-10T04:03:01.174964Z","last_seen":"2026-05-05T22:41:44.913108Z","times_seen":309,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/polyfills.webvtt.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /jwplayer/8.38.2/polyfills.webvtt.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=G45PiyhUXQ2gb00P; __ddg10_=1755815630; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=JwFueRxa1ylwjmuV; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg10_=1755815630; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 08 Aug 2025 21:51:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-28d3\"\r\nexpires: Sun, 07 Sep 2025 21:51:57 GMT\r\nage: 1125713\r\ncontent-length: 4108\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10451,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10441), with no line terminators","md5":"e6dfd6bb68ee310e2f030cfe1f63ee4e","sha1":"69a2022e55d0866ddd65687463036d1a0b6fd4e0","sha256":"a7d6eabe884766f310f08ac76a12c72a5297672f13309863d9cded6613ed6a01","sha512":"e33f9847fd73c1c0022e79b5ab1a6fdb071f175862b7e2e752bc09812607243ab260934e980c4b25a71c84c8e9bef5f83730b69fc21a8d25cf5fdaf7fb8eaf40","ssdeep":"192:ABq24FoCUV2VB6yNfWntGhcKGoD7JF7lCL6MCUNmTCS7aiTd2iRn4QF7kxM+6Awl:ABq5FZUV2THN/CYnJrC1C7TCcHTdDR4O","tlshash":"5022d8a036f1649e8394d88f457a0190e2285571f98bc9cdf558cdf7dc30b8722aeb79","first_seen":"2025-04-16T11:00:53.641209Z","last_seen":"2025-11-11T18:38:31.852289Z","times_seen":23,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/173/fdd/39f/173fdd39f5ac01fff978ebedb468d19561d7b99e.gif","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 07:49:13 GMT","end":"Wed, 12 Nov 2025 08:49:12 GMT"},"fingerprint":{"sha1":"53:C1:B1:A0:81:82:67:55:8A:65:59:03:C4:88:B8:86:25:56:63:88","sha256":"AB:A3:11:5C:99:77:7A:FE:E1:33:E4:5D:40:37:93:D6:BB:7D:D3:35:3B:ED:91:F9:87:66:23:2E:EA:7C:3D:B2"}}},"request":{"raw":"GET /pn/173/fdd/39f/173fdd39f5ac01fff978ebedb468d19561d7b99e.gif HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-type: image/gif\r\ncontent-length: 504017\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 3ebc0e05c2c0bca3938e66564eb05de6\r\nexpires: Sat, 23 Aug 2025 04:47:04 GMT\r\nlast-modified: Wed, 18 Jun 2025 15:46:26 GMT\r\nx-cdn-host-id: ds7445,ds5833\r\nx-openstack-request-id: tx1b5d6d251bbd4d4ca4d41-006852dfdb\r\nx-proxy-cache: HIT\r\nx-timestamp: 1750261585.34898\r\nx-trans-id: tx1b5d6d251bbd4d4ca4d41-006852dfdb\r\ncf-cache-status: HIT\r\nage: 64007\r\ncf-ray: 972d9830f8e8712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":504017,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 192 x 192","md5":"3ebc0e05c2c0bca3938e66564eb05de6","sha1":"173fdd39f5ac01fff978ebedb468d19561d7b99e","sha256":"884a795a9c4c2d1470639d7e4a77e7c9e24a183f4d2261c86f521c98d22b1277","sha512":"afd65a0c3054ecd3cdf14c73f4f5eafea23965db0e272b1ca8df165ca85a0776d350bb0e41202a8b45d1cad39d7e4be7dd87b457746982eb1a9fa4521cb0ae2b","ssdeep":"12288:jQy0K7IBHKkRK+/q5pvGl/hBXhHC9y8ZJZeH0:jQL+kR5/qDIJwfveU","tlshash":"c5b423483f05e382bd6f3df8f944438ba6b8598961b219d8a589a70fcdb0644773136e","first_seen":"2025-07-12T11:42:41.164762Z","last_seen":"2026-05-09T15:11:23.540317Z","times_seen":278,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":33,"dns":10,"connect":1,"send":0,"wait":9,"receive":22,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogoampoodopet.com/mtg/","fqdn":"ogoampoodopet.com","domain":"ogoampoodopet.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ogoampoodopet.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:24:43 GMT","end":"Sat, 18 Oct 2025 05:24:42 GMT"},"fingerprint":{"sha1":"F9:79:8E:73:08:0F:00:A8:A8:34:31:34:F2:AC:FA:89:9C:19:C0:CE","sha256":"F9:81:D8:67:D1:8C:E2:63:34:13:DD:D0:1E:FD:76:40:FB:4D:3D:A6:6D:A0:F5:44:67:8B:82:04:1B:DD:E8:15"}}},"request":{"raw":"POST /mtg/ HTTP/1.1\r\nHost: ogoampoodopet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/json\r\nContent-Length: 134\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: OAID=08022c7ca8294dc5e897cb5673ab730d\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-length: 0\r\nx-trace-id: 9a4a4cded9f88949037590d2942d4e62\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ogoampoodopet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/in.js","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /in.js HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 18 Aug 2025 07:58:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68a2dd38-3493c\"\r\nexpires: Thu, 28 Aug 2025 22:33:49 GMT\r\ncache-control: max-age=604800\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215356,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a9fe5c95f002fd44894a216b04c44682","sha1":"374cd0405a65e6af34e924d085c9e52332aeb53b","sha256":"0d424164fc0df7c0fd4dee0a841d8f27a765560f15829243fd10eb4aaf711881","sha512":"ab0b21d88c5f1501b680616135c5a13a1c1f01c9e8f0c3773a2a6da75a4e7fe792906a3a2269f741fb5b0d74d08c8f0c24d8fcc3e2ff8328ff628d73f6bbf9d4","ssdeep":"1536:O3ZgKB43L9/4jPzQ54W4Q8UsKERsrnWiH/2p5lA/nQQflsAtBZlCCex1GxX3oeGI:OGf4I54Wo/dAnTH/H/tF7Z59a3kBjVX","tlshash":"312483ac2b97303e713bbd1e6d3a45299232bbd1e46d840cd973ddc94876406e335ea2","first_seen":"2025-08-19T06:33:45.774006Z","last_seen":"2025-08-25T06:22:46.713343Z","times_seen":24,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":52,"dns":4,"connect":19,"send":0,"wait":21,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/cache/cuvpbrllohmc_storyboard_L5.jpg","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /cache/cuvpbrllohmc_storyboard_L5.jpg HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=JwFueRxa1ylwjmuV; __ddg10_=1755815630; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=oog29HaOZWdNQkta; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg10_=1755815630; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\nXSRF-TOKEN=eyJpdiI6IlBRQTM1MEUya3JlRXJDdi9WdnE5aWc9PSIsInZhbHVlIjoiZkl0d3JHakRhZU9PS1daR1g3WkEweWd0OGl5NWRvT0NBZkFXc1lVbEovUUFHV3dXTTFPTkc0L3FGSVBDVzZSM0VzZi9hUkxXQ0ZvN0ZCSjY5RjZyVlpVRGdyRFZkVWxiUHVDLzRGaFY2TGlvd2YxUjRkRTF3c0dnN2VPSmVYcDIiLCJtYWMiOiJkNzI4MWZmOTc1OWZjYjQ4YTk4ZTk4ODlmODdlNDI3N2FiYjVmNDg2MmUxNjVlY2M1NGZhNDgzM2NmZjZmMjlhIiwidGFnIjoiIn0%3D; expires=Fri, 22 Aug 2025 00:03:50 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6IjhBZnBKWVczTmdBQTZoMmhVbmZRT2c9PSIsInZhbHVlIjoiRGJNNkI4WEIzVDl5OWUySWdkZDBEalRjSVpNMEJHQzBhSGNtYVlvODVPUmJyUTJmb295YjhkQkh6dVhCTFM5MlpiMXlENlNHNG9tRFIzMDU4cGo4RnNVdWRjZEVBWWh0YWpQRFJNUHA0Tis4bDNYckRsT2tHTFBzcUJTRHo2aFMiLCJtYWMiOiJhZjYwZDYyMDY2YmNhYzQ2NDFkYWNhNGUzNDJiMzU4Nzc2YjdjMjg5ZWQxMzMzZGYwNjQ5YzRkYzdmMzk3MDllIiwidGFnIjoiIn0%3D; expires=Fri, 22 Aug 2025 00:03:50 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\ncontent-type: image/jpeg; charset=UTF-8\r\ncontent-length: 82505\r\ncache-control: max-age=2592000\r\nexpires: Sat, 20 Sep 2025 22:33:50 GMT\r\nlast-modified: Thu, 26 Jun 2025 00:30:34 GMT\r\netag: \"685c94aa-14249\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: MISS\r\nage: 0\r\nddg-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82505,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1279x719, components 3","md5":"acf3549dfc55b6b6c510eed396f4cbb9","sha1":"0cb67cc78a6ba6ad88f62e5318fd0923bb52fc72","sha256":"8e383096cd5db4f87f48192e3b92aef2ce503fbb21ccb839cd4b855949bc320b","sha512":"01caff4243057de4f7fe725873eb254d9a55b618e71f70683552914292f2bf1ada9b3b2a8e4255a3a5b2d20c555e3fce56dd7b5c8a6cc58bb32ad96168c1ff4f","ssdeep":"1536:9tfNobuEFVVN+cqpSGank8fsKpK+DQ1bp1vo1w0/P4HsZTvthEd+N:9ZN4DFeUtnxO1bJUTvthj","tlshash":"758302698fd24e98e53b749ef014038cd3e92e6157d88c6c1b0465da56dc8f988852df","first_seen":"2025-08-21T22:34:17.744274Z","last_seen":"2025-08-21T22:34:17.744274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/log/log_js_error","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:53.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"POST /log/log_js_error HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 448\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=hhHGepwHnVWP5qE7; __ddg10_=1755815630; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IlBhOUVIam54RUE3dzRza1VGdkdzZEE9PSIsInZhbHVlIjoibWd2M3VVSTY0THpxcU9KMW5JWlcyYUJkUWxsejBOVW8yZkh4bi9YQVNIemROaVU3SjhzbTA1TFczdElsbUhkcVRBZkUrRzYwQzM1L01ZTmQ3VERwUkJqOVdmTTdYR3VRQUhmSVVJd1k1Szh5U01nZmo1NmZvcUtseFlDVHQwbWQiLCJtYWMiOiI5N2I4M2YyZDdhNDg5ODkwMmYzMDE2ZjMxNDg2OGYxMzAwYjIyN2FkODNjNTE0MWQzNWFkNDFjMTA4YzE0MTk0IiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6ImpxbkpYdjBLNWdsUmFGNC9JQzBCL0E9PSIsInZhbHVlIjoiSFp1MTByTldWS1RKaDJqZG9zQ3phYWFoV2c2ZlF4a1B1TjdqOEtLa3dkcEhvN0FaMEVSQTZDK3orOU1kcDJhVmNUUlJ5dFJrNStsM3NMSy8zN3NSTzB5Q1cyNHBXTThjaERsVmxIdks2REJBazJrVWdtZmlXa05NZXQzNEZlSFAiLCJtYWMiOiIzZDYxYjQ2ZjNhMjMzMTViNTBkYWUxMzFiNDAyYTlkN2RlY2JhZWViOTIzMmVjOTRmNWQ5ZGRjODg4NTRjYTc0IiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=UUCI37Es9yNOelGZ; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:53 GMT\n__ddg10_=1755815633; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:53 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:53 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 21 Aug 2025 22:33:53 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":13,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11a4a7f4bdeb09fec0e96f5bfc77f8f8","sha1":"204b8ca987542dec72f121643984b47f1e53f0b1","sha256":"8f08745c17c60fa28f8dcdac4a36178dade1efcc73644373ad21fb98da3b25f0","sha512":"1ebed8602e4377789f06cb53363fd4388710e58a7a17947ed75de42f5c615c580f96e489e8e9a7d6b8a20d9347ed859cad085cc88ff5aea8845fee3688b68141","ssdeep":"","tlshash":"e3600003000cc0f0300300c0303c0300003c3000030000000c0c03300300c030000030","first_seen":"2025-06-07T12:23:50.48069Z","last_seen":"2025-10-23T17:26:41.07065Z","times_seen":82,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ptichoolsougn.net/401/9013477","fqdn":"ptichoolsougn.net","domain":"ptichoolsougn.net","tld":"net"},"ip":{"addr":"104.21.2.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ptichoolsougn.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 19 Aug 2025 19:00:13 GMT","end":"Mon, 17 Nov 2025 19:57:53 GMT"},"fingerprint":{"sha1":"DE:60:44:6F:82:77:62:E3:E6:30:36:EB:F3:5C:7C:2F:D8:A3:7E:3B","sha256":"3D:D8:BB:D2:77:BA:68:70:AE:4F:56:DF:F6:21:E2:C8:A9:A9:DD:FE:74:B9:D4:12:B9:6B:A2:AD:36:EE:1D:B1"}}},"request":{"raw":"GET /401/9013477 HTTP/1.1\r\nHost: ptichoolsougn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=600, s-maxage=1800\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qDkeNsozv5roPl3TUwpKbYluQxcGMdmZ5DOBeK4fqqbSvpmA89ny0tuDhZOQLlN8Jpc2WHWbreueE%2B%2FNGGTNPO75Ln7jsklJJ%2Bl6DjUOww%3D%3D\"}]}\r\ncf-ray: 972d98281e7d568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168464,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cfd22c8e0c4c93ba6f717b5dd9dfe6a3","sha1":"b3f116d716a4e209190374b17b618f12857354a5","sha256":"49abd952798b5b237987a2387dabb15c190f207f93c546e0e2cce6a3c5391e44","sha512":"0260418f803d958e111390e043677f495efcf3030edd23418d0eaef84879b72056b9451df1b34f841fac626c45942b63c1023367743fd0697170d132df986403","ssdeep":"3072:qixQobTobRcWcSyxKzGbLmDic6aL72EKhOIGngGOF9LrKNIJHJ9pkDogNWkkWkZ:q/obTobRcQzGbLmqaL72EKhOIGnbKXKy","tlshash":"7ef3c684f582b4611e636534312fd10eb5aea760a84e8a90d1dae1b27f3703ed377dd8","first_seen":"2025-08-21T11:10:59.410857Z","last_seen":"2025-08-22T06:05:08.230088Z","times_seen":7,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":21,"dns":5,"connect":1,"send":0,"wait":44,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ptichoolsougn.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/srt/15149/cuvpbrllohmc_de.vtt","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /srt/15149/cuvpbrllohmc_de.vtt HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=G45PiyhUXQ2gb00P; __ddg10_=1755815630; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iDN9wD8y6YztTEHM; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg10_=1755815630; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\ncontent-type: text/vtt\r\ncontent-length: 31128\r\nlast-modified: Fri, 15 Aug 2025 05:10:30 GMT\r\netag: \"689ec146-7998\"\r\nexpires: Sat, 20 Sep 2025 22:33:50 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31128,"size_decoded":0,"mime_type":"text/vtt; charset=utf-8","magic":"WebVTT subtitles, Unicode text, UTF-8 text","md5":"1087ed425263818c29e216c3e72e12e4","sha1":"9161868c10a72d8908acacc84d4388f94246fb53","sha256":"f6bd2fa4c8f41c68d4c010ce7347a53c5bf6d2c67b65cea656dcc0dc18c26bed","sha512":"1736dcb1f45c66737b92b03fdbdf17dca0570c7c56eaabc10b4d3508c2fd0f38ebec7b0d5894a1e4b82198480d55ae19dce0ced7b91299d6c26b7729091a5b2b","ssdeep":"768:IOE58nx3mykF2Y4EPk1s6kBnzy2jSnEf5wqLQR+DuWqHg+3Upj:DoKmxFgEVbjSaP++DBqHGj","tlshash":"9dd29347d3a342b75af323793190e9eaf923914f03e44844a4ef79da3a4327874db964","first_seen":"2025-08-21T22:34:17.749958Z","last_seen":"2025-08-21T22:34:17.749958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/cache/cuvpbrllohmc_storyboard_L0.jpg","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /cache/cuvpbrllohmc_storyboard_L0.jpg HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=oog29HaOZWdNQkta; __ddg10_=1755815630; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IlBRQTM1MEUya3JlRXJDdi9WdnE5aWc9PSIsInZhbHVlIjoiZkl0d3JHakRhZU9PS1daR1g3WkEweWd0OGl5NWRvT0NBZkFXc1lVbEovUUFHV3dXTTFPTkc0L3FGSVBDVzZSM0VzZi9hUkxXQ0ZvN0ZCSjY5RjZyVlpVRGdyRFZkVWxiUHVDLzRGaFY2TGlvd2YxUjRkRTF3c0dnN2VPSmVYcDIiLCJtYWMiOiJkNzI4MWZmOTc1OWZjYjQ4YTk4ZTk4ODlmODdlNDI3N2FiYjVmNDg2MmUxNjVlY2M1NGZhNDgzM2NmZjZmMjlhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjhBZnBKWVczTmdBQTZoMmhVbmZRT2c9PSIsInZhbHVlIjoiRGJNNkI4WEIzVDl5OWUySWdkZDBEalRjSVpNMEJHQzBhSGNtYVlvODVPUmJyUTJmb295YjhkQkh6dVhCTFM5MlpiMXlENlNHNG9tRFIzMDU4cGo4RnNVdWRjZEVBWWh0YWpQRFJNUHA0Tis4bDNYckRsT2tHTFBzcUJTRHo2aFMiLCJtYWMiOiJhZjYwZDYyMDY2YmNhYzQ2NDFkYWNhNGUzNDJiMzU4Nzc2YjdjMjg5ZWQxMzMzZGYwNjQ5YzRkYzdmMzk3MDllIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=hhHGepwHnVWP5qE7; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg10_=1755815630; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\nXSRF-TOKEN=eyJpdiI6IlBhOUVIam54RUE3dzRza1VGdkdzZEE9PSIsInZhbHVlIjoibWd2M3VVSTY0THpxcU9KMW5JWlcyYUJkUWxsejBOVW8yZkh4bi9YQVNIemROaVU3SjhzbTA1TFczdElsbUhkcVRBZkUrRzYwQzM1L01ZTmQ3VERwUkJqOVdmTTdYR3VRQUhmSVVJd1k1Szh5U01nZmo1NmZvcUtseFlDVHQwbWQiLCJtYWMiOiI5N2I4M2YyZDdhNDg5ODkwMmYzMDE2ZjMxNDg2OGYxMzAwYjIyN2FkODNjNTE0MWQzNWFkNDFjMTA4YzE0MTk0IiwidGFnIjoiIn0%3D; expires=Fri, 22 Aug 2025 00:03:50 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6ImpxbkpYdjBLNWdsUmFGNC9JQzBCL0E9PSIsInZhbHVlIjoiSFp1MTByTldWS1RKaDJqZG9zQ3phYWFoV2c2ZlF4a1B1TjdqOEtLa3dkcEhvN0FaMEVSQTZDK3orOU1kcDJhVmNUUlJ5dFJrNStsM3NMSy8zN3NSTzB5Q1cyNHBXTThjaERsVmxIdks2REJBazJrVWdtZmlXa05NZXQzNEZlSFAiLCJtYWMiOiIzZDYxYjQ2ZjNhMjMzMTViNTBkYWUxMzFiNDAyYTlkN2RlY2JhZWViOTIzMmVjOTRmNWQ5ZGRjODg4NTRjYTc0IiwidGFnIjoiIn0%3D; expires=Fri, 22 Aug 2025 00:03:50 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\ncontent-type: image/jpeg; charset=UTF-8\r\ncontent-length: 203752\r\ncache-control: max-age=2592000\r\nexpires: Sat, 20 Sep 2025 22:33:50 GMT\r\nlast-modified: Thu, 26 Jun 2025 00:30:50 GMT\r\netag: \"685c94ba-31be8\"\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: cache-control, content-range, accept, origin, session-id, content-disposition, x-requested-with, content-type, content-description, referer, user-agent\r\nx-cache-status: MISS\r\nage: 0\r\nddg-cache-status: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":203752,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1250x700, components 3","md5":"3e35113e61336ce0d53cd91efeb8f522","sha1":"b46034dc48d39b553161351164d5d5dfa7accb5d","sha256":"7d89027214c0a55b59c27ef9b3a5216dc0c182f9316e57d5af236b4bbea8167d","sha512":"7112ee3130c552fe47577377d18f2ba2e5cd73d8c29c4f6e068000adfe0d24f33adffd1b5ba5f5f174a5a8ab494339a40325c70216c8f3bd41954b3f5968f08d","ssdeep":"3072:8H/GHudMNHXeJUnW2cUbbBOEptTwUoF2NzSyFZa7RvXeu1oUMBEYqvn/6QNlVO:QvONwR2XFOktXNBm7Rvh4dq6QNW","tlshash":"9a1412b3d71a2929e71e5233683d9b8edb5fdea143c697280150d0defbe190d980eb50","first_seen":"2025-08-21T22:34:17.752219Z","last_seen":"2025-08-21T22:34:17.752219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=386fd459-b256-4cee-b1d8-cb397c0e120a","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /async_log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=386fd459-b256-4cee-b1d8-cb397c0e120a HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 450\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Thu, 21 Aug 2025 22:33:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://jilliandescribecompany.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogoampoodopet.com/500/9013477?excludes=\u0026oaid=08022c7ca8294dc5e897cb5673ab730d\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.699.0-s\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=1\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2Fe%2Fcuvpbrllohmc\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ogoampoodopet.com","domain":"ogoampoodopet.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ogoampoodopet.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:24:43 GMT","end":"Sat, 18 Oct 2025 05:24:42 GMT"},"fingerprint":{"sha1":"F9:79:8E:73:08:0F:00:A8:A8:34:31:34:F2:AC:FA:89:9C:19:C0:CE","sha256":"F9:81:D8:67:D1:8C:E2:63:34:13:DD:D0:1E:FD:76:40:FB:4D:3D:A6:6D:A0:F5:44:67:8B:82:04:1B:DD:E8:15"}}},"request":{"raw":"OPTIONS /500/9013477?excludes=\u0026oaid=08022c7ca8294dc5e897cb5673ab730d\u0026var=\u0026ymid=\u0026tgp=\u0026sw_version=v1.699.0-s\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=1\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2Fe%2Fcuvpbrllohmc\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ogoampoodopet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://jilliandescribecompany.com/\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-length: 0\r\nallow: GET, OPTIONS\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":87,"dns":0,"connect":26,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ogoampoodopet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/chicken.gif?z=2060451\u0026pb=61dc68ae1ac6c10aadea0edd7a9a05941755822831\u0026pbc=bxmmdKdplO_vuqdo\u0026pbi=c40ZMyYodDLvuqdo\u0026pbu=I6cr8fj_-qTvuqdo\u0026psp=UKac9lAhvcxvSLECyhYS6zKkd5sO4E7Tfq5QWPXu_hJgQpUpefN9zZAA9Gkm4BLI3nTU4owjAfJa_EGHE1-_5DHenRiHuEUQNMsyMvgwudXK-OUciybQGNqk5yJMfbve-R6O6SQmfpPrcFBC5wDw57Bg57khGvToPyD74miFIgSqN0D8gMMLik8V80XrwzqIt_fBHWm-GHXDvrXpmht7H9FbUEwE4QCcr1kUIPNp9QrEfDIJ3AlCegk4rWyGfj7mVmhpirV3SDLh4fbt4Pa6MePAbMZSyHLTQqgqXCkyQMm2jn44KKhqyHwrL5Sq0_fVn6vky2iuLadvlXc86gg5DvMxCp_vwQKzEg0iPaU1NsLiv_0aXUg-MQiVkLbAPkkPrHEVdEAYANZfy_VaJu3RwMlbxpUA-RuFPZgQCCVj5oQXNyy6lb2Ud0OornWqIVQAst_j3hVnR8L3xLrl_rPMwVySY59DEIanFqPq0H_8SQ0UWbom7g-5GpcRRUvN6Jd5MpKLglfYI9fduKlJ-I4gRIUKYXpzd5N1zIitUEjBIMDM1FBAvvUpvrH-59A20Xalqok3xdgrt3hDOC-kugkscXRHxoSqHDhPV5OMZJcTRTRDpqnua5XYK9kT_kLAff7-M5nmi_IOUDRQAu2W7FDygXOK6opxudxOgpAqQ8FCqpUBd31HdNUKiliPOUdC0YzBMvLxq1hrKA-yKY5oy8uv8h4IuGUx5_7sNTvMAfBdJtB4TrSt7IEuKR4hGwKlOjXX9SNRhObbxQAkOA8BlSXj_NzoRAo92KfQ__giHOEfWs7C51VbdY7XAU3UCPjwRB-lYih1GTzc6zB1i3P8Lld0CYUb9J-h0LQL1kMh-AWMEJFJsiz-U_E5SyVgU9J0lRUFbjk2qv5njNzYAprwPAaAHLt5Tanud30j5ftyLNk2ApbJaldZ6JdGKsdbcgV2fmZhFUnfrG9tBi0esw3W7owHdNMkTLx_h6HG9c6I4qRaCmvSITjVs8VfhnQ3nfkdtBlRUEosH9csmSFHWNT_x2T-fKdGOtzr6IJUrB3KGL2OA4_Xxq7U4ebns_fsHBIDpyidg_pL_60cpI-msTeXEJIA0H2dJDeJEAH9_rtNzyHmDrEald-YYhyHvpGhp2lrId5kH0s-UgXUzW-AQbrGD8xAHWCGIr3S8_xCv5PHPqIVKTpfZXd6D-qX9GFDxXVqRtY3f96QWyddYv_8R_vBSicmUJC_tuEP5HYc_yiRw8Fnkr8OkO8-N2OA_fwr3tuB7lPTmPyMz6deIvA6Qb150jHRVcrIpClEi_B2CdURXVxIw-Z461SmsHeewd9T6xzOc2p_CB4i4KlZsga3P13Eibqnko5-f2tTl_h8JkPA_6rWlTCSn6QWy--21ixDT0V492qj9Vz9_kE4ccbE7JVOJwBlAismjnoGkKwkBrYjQeyTwVnkSWJTtZzFEe2eWBexr1zGWJxt6gXY-7d9U4gM-fy0xbB4ZbK5nBnMWp8bcXuF5Ug5rEudu-27tf5HS5DMqw0KE-wE4dhI_YZFaFektM5JhOTy1YNrMjd7iTKx9vt5Pj4turlDgLfwHD6htlOxkTzRX2-E93MbFlQWi3aUntwMl7yG8-OLbZlApMaNJsGLB323yS9C8PXn5yQN7rxuEQoIsNx8OT0Q1Rv8xBmVRGg3SlaLCkWsBRSy7Wi16tqOwyQqqiZj86NoqIt9byHsBLiXWlJB3htLEbudId-WRp3sQVZTHJDrJ5xgXQwroFpDLF_iDfgGO4fjmIsuEnkHQTQ37y1SOVAEM7qnXnnMxtpNWtxPUaM8MQKhOHQNL_y7Mt8xj4GqJDHfEE0lUvgyZMUs16mKEgtFNWOAX7N81NHFPgc4c5KL9kWvXb71xcZnjLIQ9QJbitARgySzfB6nFVq9O7hT6bDSk7sWDuWFgxMRWA7OJxF2hBc6IEEmwK37MGn2uFtBqKnunw76vfZ8gIMvPn0W3JC9AjaGKNiF7vCl0eDNqP9YQEcCWWBriEIsWascvYI9M2Tqi2Rh-roQ9YLEj8NbtNWEbjUESJaQ9WX14xIKu0i8kX364G8kbCJXQhrKqp7mwU78RI0KoHjKP3bJW2bYMjOAvohtKxW2K5MQM7Vebg3VWRc11ulmPl3IHKgFMGVRFMpJHhj-yNk5uQDmHAIVi_Y10Hz3WPvHxKYhDyJ4vakPtHr2GILfqr5-C3vrfJwf-9h1w_Yt6avI69b8BS685FYZs6Ba4SrOlptmOpWDj5PVRxd4h-wkun5_Rgif1ZtBt5X6nA11xF2Myh_7wNiDfUVEZOcMDZY3lNC098jympjxTOXw6rtUChGJkqH_b95ITctL5_sDFAixRdjGHGi6JTfCAa7tVeNfIZZkYEtI6quRbZyI-Y8BXlRazsUzBtdfTBjCQfa_9eWNmMq2WxuFDs6CWwkahMA=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=YTcQGkHaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=7714893504582656\u0026eclog=0\u0026snc=0\u0026ssc=4\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:54.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /chicken.gif?z=2060451\u0026pb=61dc68ae1ac6c10aadea0edd7a9a05941755822831\u0026pbc=bxmmdKdplO_vuqdo\u0026pbi=c40ZMyYodDLvuqdo\u0026pbu=I6cr8fj_-qTvuqdo\u0026psp=UKac9lAhvcxvSLECyhYS6zKkd5sO4E7Tfq5QWPXu_hJgQpUpefN9zZAA9Gkm4BLI3nTU4owjAfJa_EGHE1-_5DHenRiHuEUQNMsyMvgwudXK-OUciybQGNqk5yJMfbve-R6O6SQmfpPrcFBC5wDw57Bg57khGvToPyD74miFIgSqN0D8gMMLik8V80XrwzqIt_fBHWm-GHXDvrXpmht7H9FbUEwE4QCcr1kUIPNp9QrEfDIJ3AlCegk4rWyGfj7mVmhpirV3SDLh4fbt4Pa6MePAbMZSyHLTQqgqXCkyQMm2jn44KKhqyHwrL5Sq0_fVn6vky2iuLadvlXc86gg5DvMxCp_vwQKzEg0iPaU1NsLiv_0aXUg-MQiVkLbAPkkPrHEVdEAYANZfy_VaJu3RwMlbxpUA-RuFPZgQCCVj5oQXNyy6lb2Ud0OornWqIVQAst_j3hVnR8L3xLrl_rPMwVySY59DEIanFqPq0H_8SQ0UWbom7g-5GpcRRUvN6Jd5MpKLglfYI9fduKlJ-I4gRIUKYXpzd5N1zIitUEjBIMDM1FBAvvUpvrH-59A20Xalqok3xdgrt3hDOC-kugkscXRHxoSqHDhPV5OMZJcTRTRDpqnua5XYK9kT_kLAff7-M5nmi_IOUDRQAu2W7FDygXOK6opxudxOgpAqQ8FCqpUBd31HdNUKiliPOUdC0YzBMvLxq1hrKA-yKY5oy8uv8h4IuGUx5_7sNTvMAfBdJtB4TrSt7IEuKR4hGwKlOjXX9SNRhObbxQAkOA8BlSXj_NzoRAo92KfQ__giHOEfWs7C51VbdY7XAU3UCPjwRB-lYih1GTzc6zB1i3P8Lld0CYUb9J-h0LQL1kMh-AWMEJFJsiz-U_E5SyVgU9J0lRUFbjk2qv5njNzYAprwPAaAHLt5Tanud30j5ftyLNk2ApbJaldZ6JdGKsdbcgV2fmZhFUnfrG9tBi0esw3W7owHdNMkTLx_h6HG9c6I4qRaCmvSITjVs8VfhnQ3nfkdtBlRUEosH9csmSFHWNT_x2T-fKdGOtzr6IJUrB3KGL2OA4_Xxq7U4ebns_fsHBIDpyidg_pL_60cpI-msTeXEJIA0H2dJDeJEAH9_rtNzyHmDrEald-YYhyHvpGhp2lrId5kH0s-UgXUzW-AQbrGD8xAHWCGIr3S8_xCv5PHPqIVKTpfZXd6D-qX9GFDxXVqRtY3f96QWyddYv_8R_vBSicmUJC_tuEP5HYc_yiRw8Fnkr8OkO8-N2OA_fwr3tuB7lPTmPyMz6deIvA6Qb150jHRVcrIpClEi_B2CdURXVxIw-Z461SmsHeewd9T6xzOc2p_CB4i4KlZsga3P13Eibqnko5-f2tTl_h8JkPA_6rWlTCSn6QWy--21ixDT0V492qj9Vz9_kE4ccbE7JVOJwBlAismjnoGkKwkBrYjQeyTwVnkSWJTtZzFEe2eWBexr1zGWJxt6gXY-7d9U4gM-fy0xbB4ZbK5nBnMWp8bcXuF5Ug5rEudu-27tf5HS5DMqw0KE-wE4dhI_YZFaFektM5JhOTy1YNrMjd7iTKx9vt5Pj4turlDgLfwHD6htlOxkTzRX2-E93MbFlQWi3aUntwMl7yG8-OLbZlApMaNJsGLB323yS9C8PXn5yQN7rxuEQoIsNx8OT0Q1Rv8xBmVRGg3SlaLCkWsBRSy7Wi16tqOwyQqqiZj86NoqIt9byHsBLiXWlJB3htLEbudId-WRp3sQVZTHJDrJ5xgXQwroFpDLF_iDfgGO4fjmIsuEnkHQTQ37y1SOVAEM7qnXnnMxtpNWtxPUaM8MQKhOHQNL_y7Mt8xj4GqJDHfEE0lUvgyZMUs16mKEgtFNWOAX7N81NHFPgc4c5KL9kWvXb71xcZnjLIQ9QJbitARgySzfB6nFVq9O7hT6bDSk7sWDuWFgxMRWA7OJxF2hBc6IEEmwK37MGn2uFtBqKnunw76vfZ8gIMvPn0W3JC9AjaGKNiF7vCl0eDNqP9YQEcCWWBriEIsWascvYI9M2Tqi2Rh-roQ9YLEj8NbtNWEbjUESJaQ9WX14xIKu0i8kX364G8kbCJXQhrKqp7mwU78RI0KoHjKP3bJW2bYMjOAvohtKxW2K5MQM7Vebg3VWRc11ulmPl3IHKgFMGVRFMpJHhj-yNk5uQDmHAIVi_Y10Hz3WPvHxKYhDyJ4vakPtHr2GILfqr5-C3vrfJwf-9h1w_Yt6avI69b8BS685FYZs6Ba4SrOlptmOpWDj5PVRxd4h-wkun5_Rgif1ZtBt5X6nA11xF2Myh_7wNiDfUVEZOcMDZY3lNC098jympjxTOXw6rtUChGJkqH_b95ITctL5_sDFAixRdjGHGi6JTfCAa7tVeNfIZZkYEtI6quRbZyI-Y8BXlRazsUzBtdfTBjCQfa_9eWNmMq2WxuFDs6CWwkahMA=\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=YTcQGkHaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=7714893504582656\u0026eclog=0\u0026snc=0\u0026ssc=4\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2508211733b7178e06b97a405ebc863960dd; BCAI=ADROLQAAAAAAAAAB; BMI=AEbTegAAAAAAAAAB; BCRI=k93JFQAAAAAAAAAB; IMC_102=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:54 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ADROLQAAAAAAAAABABSSDwAAAAAAAAAB; Path=/; Expires=Fri, 22 Aug 2025 22:33:54 GMT; Secure; SameSite=None\nBMI=AEbTegAAAAAAAAABAB8WQgAAAAAAAAAB; Path=/; Expires=Fri, 22 Aug 2025 22:33:54 GMT; Secure; SameSite=None\nBCRI=k93JFQAAAAAAAAAB9X6uKwAAAAAAAAAB; Path=/; Expires=Fri, 22 Aug 2025 22:33:54 GMT; Secure; SameSite=None\nIMC_102=2; Path=/; Expires=Fri, 22 Aug 2025 22:33:54 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-05-09T15:11:23.498649Z","times_seen":21405,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/e/cuvpbrllohmc","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-21T22:33:48.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /e/cuvpbrllohmc HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=u2ymIrLsGhFAEgo0; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg1_=iWC43UE8PtmlgVu2rQHH; Domain=.jilliandescribecompany.com; HttpOnly; Path=/; Expires=Fri, 21-Aug-2026 22:33:49 GMT\nXSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; expires=Fri, 22 Aug 2025 00:03:49 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D; expires=Fri, 22 Aug 2025 00:03:49 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\ndate: Thu, 21 Aug 2025 22:33:49 GMT\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Twitter Ads","description":"Twitter Ads is an advertising platform for Twitter 'microblogging' system.","website":"https://ads.twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Advertising"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":128865,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (52305)","md5":"a1fda9f7836978519dd2c298b2648b95","sha1":"fb7eb11c3c80d2be257e91450b734ab3345aaa58","sha256":"adb9edc17828b67b937961d8736f69b5f2a28345d49f4c43c70d36de4c553b32","sha512":"4ddd373ec3e554af4665fb1af316837d38a922387b33930d8c94b42f11c91c11cf6f26a50d9cbe5923a2ad396151170740136e4af4083287195fac788bb9c645","ssdeep":"3072:P7hXQ/17h9FsqaWs7jZPxhVCvi+vAiT2r++PobW:DO7laWs7lP2i+v8r++Pt","tlshash":"40c3fa8939d6b84903b2d07541bf28cbb5bb7d80700c9444e1a5e9b4fdf1aae90b3d6d","first_seen":"2025-08-21T22:34:17.755039Z","last_seen":"2025-08-21T22:34:17.755039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":68,"dns":0,"connect":30,"send":0,"wait":101,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/js/loader.bc4a6543429.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /js/loader.bc4a6543429.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=u2ymIrLsGhFAEgo0; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=vW0XAlcUPGDZhI1t; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 Aug 2025 18:22:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-14500\"\r\nexpires: Sat, 06 Sep 2025 18:22:19 GMT\r\nage: 1224690\r\ncontent-length: 26513\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":83200,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f43b942340f3e45d3ae53d0712b13256","sha1":"e11a4d4c3d7fff07ab752e7cb73342aa156dd66f","sha256":"32113f06d823097d0181fdc56d12e40e3ab7ca9d07609ce3f41c6d2c6b1846e2","sha512":"63a713372921c75df85848b0da2c35c14d12a8348b10263fa035090110417a141d1497edcb989a1f777d9addcc7a6843ce2d270f5e1be873f76cf1ccf2b8320a","ssdeep":"1536:+Im9L7Faw8G/1K+jpw8y5f0HMNz2szEe/XmC2:+Im9fww9Hw8y5f0HWEe/u","tlshash":"2a83c51c26d0b9590b8b9f36b72f28dcf5570e2f6d84c84bc605bc602579a1bede2532","first_seen":"2025-07-09T03:26:33.467529Z","last_seen":"2026-05-05T22:41:44.90844Z","times_seen":239,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"entitlements.jwplayer.com/SDtULpKyEeWwxnBWgb9+iQ.json","fqdn":"entitlements.jwplayer.com","domain":"jwplayer.com","tld":"com"},"ip":{"addr":"3.164.230.15","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jwplayer.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 25 Dec 2024 00:00:00 GMT","end":"Sat, 24 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:5F:22:36:72:E7:49:11:8F:B7:80:90:DA:4D:43:52:ED:0A:89:13","sha256":"E0:7A:FC:22:76:89:11:1A:58:F4:9F:05:51:C6:71:29:F8:0B:7B:AB:0B:3B:F9:C3:67:76:84:5E:50:04:C4:DF"}}},"request":{"raw":"GET /SDtULpKyEeWwxnBWgb9+iQ.json HTTP/1.1\r\nHost: entitlements.jwplayer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 19:58:39 GMT\r\ncache-control: max-age=1800, s-maxage=9840\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c2eb9b44aa5080bf631af7c8ed97f7de.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: 6DK9IhE3i5TY6EakBpX1dy8gV5UYcl6rIuYC5G-8I_fnjgR-cuOJig==\r\nage: 9310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c20f0b27ee245f6214ab8f902403fc2","sha1":"882fa6abcfe6e81134dd3b98c959cc6a934871b2","sha256":"6b96b9fc478c03f2288db09e54c9cc6c5cb4b8948e64877c4b7f073b4f5e852d","sha512":"e5aecce6a18bd15376413572f8b2c8c3de3e93827fb4452d9cb7a20520381c15d5edf7d444d0fe0ade8a45aef0b379a03338e76d46b41d5eba152749016dd53a","ssdeep":"","tlshash":"a0b01222fe8dd03c42f2311941037000c76041c24208403ce0005492a22573b1f50308","first_seen":"2025-06-06T12:03:22.571567Z","last_seen":"2025-09-27T09:23:21.750409Z","times_seen":89,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":67,"dns":41,"connect":8,"send":0,"wait":9,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/images/logos/voe-logo-2.svg","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /s/images/logos/voe-logo-2.svg HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=633cu7jC3tUEFs5j; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=0SrI8tTMBNQjlcpd; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 27 Jul 2025 18:44:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 27 Apr 2025 04:35:04 GMT\r\netag: W/\"680db3f8-193\"\r\nexpires: Tue, 26 Aug 2025 18:44:22 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 2173767\r\ncontent-length: 251\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a638d0dfa6feb7ce4b90e7c91c5b0df4","sha1":"7a0a86f47b51781f48bb9f232f05193936490027","sha256":"38b49bc67e053e96441e62f8423a9ed0e907ef768a0ffbba4370128760f814dc","sha512":"d0d5823062954b3398a974322a7f848f71ba602c2369c79ee16868904c2e66ff1a10152a221bf68d4d0f2abb167c730bacecd0855743c7c3b521523dac0edf54","ssdeep":"","tlshash":"abe06871d4aedc054640cb2ca3e7719124bd911233c03fece7b48e263e43a36512c2b8","first_seen":"2025-04-27T22:01:48.046871Z","last_seen":"2026-05-06T10:25:30.693778Z","times_seen":315,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogoampoodopet.com/401/9013477?oo=1\u0026sw_version=v1.699.0-s\u0026oaid=08022c7ca8294dc5e897cb5673ab730d\u0026st=true","fqdn":"ogoampoodopet.com","domain":"ogoampoodopet.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ogoampoodopet.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:24:43 GMT","end":"Sat, 18 Oct 2025 05:24:42 GMT"},"fingerprint":{"sha1":"F9:79:8E:73:08:0F:00:A8:A8:34:31:34:F2:AC:FA:89:9C:19:C0:CE","sha256":"F9:81:D8:67:D1:8C:E2:63:34:13:DD:D0:1E:FD:76:40:FB:4D:3D:A6:6D:A0:F5:44:67:8B:82:04:1B:DD:E8:15"}}},"request":{"raw":"POST /401/9013477?oo=1\u0026sw_version=v1.699.0-s\u0026oaid=08022c7ca8294dc5e897cb5673ab730d\u0026st=true HTTP/1.1\r\nHost: ogoampoodopet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 24\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\ncontent-type: application/json\r\nx-trace-id: bd1823da7003c59df2ec8f58bbfdbb50\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nset-cookie: OAID=08022c7ca8294dc5e897cb5673ab730d; expires=Fri, 21 Aug 2026 22:33:50 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2224,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b2ccdef0e3744229a7ac20241540df3d","sha1":"df32cf6709c729f7a6361ecdeb4353e4ac231b87","sha256":"2033378247f3bd298601eeb706e2fecb798c2e4adb9f560e627029dc013a1a11","sha512":"687777deee604458be606375972b79acc90081a7c01042866610daa009334447fa599edb3a4c8a1d50e83fab52229fe10c4a13a97574305f14090206fce6457f","ssdeep":"","tlshash":"e44103088e28457a86ee5ab9ec0b6d471bb9061f7a4c752de7454d1770ebce103db20b","first_seen":"2025-08-21T22:34:17.759189Z","last_seen":"2025-08-21T22:34:17.759189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":99,"dns":11,"connect":26,"send":0,"wait":33,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ogoampoodopet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"odntaztu.com/en/ohsfum?nj=3\u0026lalydvhx=145427\u0026pdii=1\u0026oq=dav\u0026hgbyxlx=956412\u0026tn=_ycudqbxwruxjjteiirhfjlw\u0026fqubpwb=150928\u0026qnqw=193861\u0026hokgs=619672\u0026id=2060451","fqdn":"odntaztu.com","domain":"odntaztu.com","tld":"com"},"ip":{"addr":"94.242.247.32","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"","organization":""},"issuer":{"commonName":"Buypass Class 2 CA 5","organization":"Buypass AS-983163327"},"validity":{"start":"Wed, 28 May 2025 10:34:32 GMT","end":"Sun, 23 Nov 2025 22:59:00 GMT"},"fingerprint":{"sha1":"EF:F6:E6:2F:DB:B7:45:07:06:1B:C5:33:36:BC:28:BF:41:9F:32:3F","sha256":"88:43:67:0E:9D:8E:D7:BF:D3:E5:6A:6B:D1:9C:7C:2A:89:2C:4B:89:32:1F:9B:B8:B9:A6:DF:44:50:14:F1:A1"}}},"request":{"raw":"GET /en/ohsfum?nj=3\u0026lalydvhx=145427\u0026pdii=1\u0026oq=dav\u0026hgbyxlx=956412\u0026tn=_ycudqbxwruxjjteiirhfjlw\u0026fqubpwb=150928\u0026qnqw=193861\u0026hokgs=619672\u0026id=2060451 HTTP/1.1\r\nHost: odntaztu.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Thu, 24 Sep 2026 22:33:51 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Thu, 24 Sep 2026 22:33:51 GMT; Secure; SameSite=None\nUID=25082117333203cea4a3394a53b0f9ba4c05; Path=/; Expires=Thu, 24 Sep 2026 22:33:51 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (535), with no line terminators","md5":"63d90a1a93c6353a78a2705aa30e1b2b","sha1":"9c3d2025c55d51419b1ea5bb3dbe5d9b96bf1620","sha256":"abb23942656b689d2096529a643833569aaddb08c747a87de827b24dd07234db","sha512":"2b706a2590a410ecd78b6b129eb2f340af117f1148aa0d7647d0b6e18746908363bed483f3b3f826896aa00f7ac0c4ac14ff5f512c753738ecc28bef6aaa8eb9","ssdeep":"","tlshash":"e3f0c0883456e8cb9c602c142bfe4e9384d100fa6d737714e2a4c55c4214229d54344a","first_seen":"2025-08-21T22:34:17.760807Z","last_seen":"2025-08-21T22:34:17.760807Z","times_seen":1,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":118,"dns":1,"connect":19,"send":0,"wait":20,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Jun 2025 12:11:05 GMT","end":"Sun, 28 Sep 2025 13:11:03 GMT"},"fingerprint":{"sha1":"89:E0:23:FC:5B:0F:07:0F:7E:EC:B8:4F:B5:1D:3B:1F:6B:5C:22:0B","sha256":"66:DE:FF:43:09:A3:D6:B0:70:4E:47:82:C8:66:35:42:25:2E:23:CA:5A:1A:CF:A3:1E:23:A0:0E:D3:E3:95:95"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08022c7ca8294dc5e897cb5673ab730d; expires=Fri, 21 Aug 2026 22:33:50 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 972d982a4aae0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"302f51a0f38c492b4bfcd89592dc28fa","sha1":"5fde7bc86211fa31b9fe1a76b494611c87662152","sha256":"8efd19032989da8373caacb1ca1ff00fc4f9cf18759ff0a0e4e08ea6461c0865","sha512":"08ccf0843d017bfa96ea9ba1246899220b29b6692cfa792f5f0f27ef5bde034edcee16f778a17d035d1e88cd1bf4da9a2214fe224b5d28648bc9bd8b882fbd15","ssdeep":"","tlshash":"d1a00285142c1ec881d61aa66a5fde9e44d40243940d574852e4a00139ca9ad598a24d","first_seen":"2025-08-21T22:34:17.762801Z","last_seen":"2025-08-21T22:34:17.762801Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":38,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/engine/storyboard/cuvpbrllohmc?t=0","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /engine/storyboard/cuvpbrllohmc?t=0 HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=G45PiyhUXQ2gb00P; __ddg10_=1755815630; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mKuClRM4tApbnxbX; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg10_=1755815630; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\nXSRF-TOKEN=eyJpdiI6IjlMYkc5VlMxelVBejQ2SndqMUNiR3c9PSIsInZhbHVlIjoiVlVDSSt6MGIrYXZNTHJmTVlGMVFyeXl0N01KUkxJQ1hrN1d0UjZzMUNMMlNGaEZQQ09sSzlpNTBjMDlWYVo0VVpGZ0c5dWcvc29vc056VjgvZHB6anJCQXBtTThzQ3FHc1F5RlZjdkdoT1phblVrVXFIazlUUzFvUGxnQldsSlUiLCJtYWMiOiI2MTJlMjNkNWZiNThkNzBlM2Y4MTcxMWQ1YjIxMGY2YjAxZWEyMzA2YzM5ZmMwMGMyMzdkZWVjODRiNTk0MWFlIiwidGFnIjoiIn0%3D; expires=Fri, 22 Aug 2025 00:03:50 GMT; Max-Age=5400; path=/; secure; samesite=none; partitioned\nvoe_session=eyJpdiI6IjhzTnBrbi9XcktyQkFwcGhzd3FPNUE9PSIsInZhbHVlIjoiSEROVlBVcFNsWXhvSkFxOXZ0OU1lR0lzVnV0L0FXZnlOL284U3lPNEJET0VTbUlVU0JBbUwrSDVUVktIcVBkQklZOUcxQ203MHRocUw4ZithWHk1MlVOZDVXYi9JbGRXb3hjQUJNZ2t6YXYwWlBmUDR6S3FCWTJOK25pdG0yVDIiLCJtYWMiOiI5M2RiNjdlY2VmYTlmOGY2MWU4NWVjNDhkZmMwODljZjJmMjcyMjFhZjhmOWJhMzBhMzU3ZTE0NGQ4M2U1NzM1IiwidGFnIjoiIn0%3D; expires=Fri, 22 Aug 2025 00:03:50 GMT; Max-Age=5400; path=/; secure; httponly; samesite=none; partitioned\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-type: text/vtt; charset=UTF-8\r\ncache-control: no-cache, private\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12570,"size_decoded":0,"mime_type":"text/vtt; charset=UTF-8","magic":"WebVTT subtitles, ASCII text","md5":"73390e2d6053eaa6290ac80ab95e5d0c","sha1":"ed2408128a60f527308d4a6c380d256fc38ace67","sha256":"ce0724db40ea501eff8a01e2479d0ac0ada99a4f3784f24c6deb10a5120193cb","sha512":"8b1644fe5ea0b072711ff433b5397ccf37d0ad3cb5fbe3377a3b462436939c1948c22541f364eb55ae2f1aa75c5c8150f7f19c9cf416bb3eb6f2bde619e4d269","ssdeep":"96:LTszIIcJi79DUJVMS+2mvkZnG8hgz4hu53/JAlOnDdVLcj5z5cwiomx3pOmbsRrq:skss1fcHLTbJrulKYc","tlshash":"12422ce2477e24ad6ed40f2099f43edcc210c2de8fd4a0966485b5e1aad663d6f3e341","first_seen":"2025-08-21T22:34:17.764342Z","last_seen":"2025-08-21T22:34:17.764342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.pncloudfl.com/pn/051/bc2/564/051bc2564b2f1d178df70a8e476f6028965e4dd5.png","fqdn":"cdn.pncloudfl.com","domain":"pncloudfl.com","tld":"com"},"ip":{"addr":"172.66.165.188","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.pncloudfl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 07:49:13 GMT","end":"Wed, 12 Nov 2025 08:49:12 GMT"},"fingerprint":{"sha1":"53:C1:B1:A0:81:82:67:55:8A:65:59:03:C4:88:B8:86:25:56:63:88","sha256":"AB:A3:11:5C:99:77:7A:FE:E1:33:E4:5D:40:37:93:D6:BB:7D:D3:35:3B:ED:91:F9:87:66:23:2E:EA:7C:3D:B2"}}},"request":{"raw":"GET /pn/051/bc2/564/051bc2564b2f1d178df70a8e476f6028965e4dd5.png HTTP/1.1\r\nHost: cdn.pncloudfl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 49707\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncache-control: max-age=432000\r\ncf-bgj: imgq:100,h2pri\r\naccept-ranges: bytes\r\ncf-polished: origSize=58920\r\naccess-control-allow-headers: Content-Type,X-Requested-With,X-Auth-Token,X-Openstack-Request-Id,X-Container-Meta-type,X-Container-Meta-Temp-URL-Key,Authorization\r\naccess-control-allow-methods: HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Container-Meta-Temp-Url-Key,X-Container-Bytes-Used,Last-Modified,X-Timestamp\r\netag: 95e745d0e0e8163e33515482888c770f\r\nexpires: Fri, 22 Aug 2025 05:05:45 GMT\r\nlast-modified: Mon, 23 Dec 2019 08:43:56 GMT\r\nx-cdn-host-id: ds7288,ds7445,ds5951,ds7445,ds5833\r\nx-openstack-request-id: txb37d3379b2b943ec8e20e-0066cf31b2\r\nx-proxy-cache: HIT\r\nx-timestamp: 1577090635.86078\r\nx-trans-id: txb37d3379b2b943ec8e20e-0066cf31b2\r\ncf-cache-status: HIT\r\nage: 149286\r\ncf-ray: 972d9830f8e6712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced","md5":"4673c13a91bb5c704ae6931bd747e787","sha1":"94e5f644eedd8c68f87b53c93e29a84420eab90a","sha256":"bde3fd4c3bdcbb03572e264fe5519e7c38ce7aa43a78a991628ab578359fca9f","sha512":"77cf4916444a22afb83fce7450308ec840a091e5629879044164adb200c82b01b3dedbeb2178c041fe4e8fe581e9e202763ba87074acc14a994ee1309485aa21","ssdeep":"768:n/l5l7AtQThyzkesTyGSj3olQEt0nbqDeRA4rGb7f55M1vlHTRTpADF+52uFua1:n/L6x4ZTnSDolQoXdLbjiv3W08a1","tlshash":"4823025531fa6a82020451e0efb098ff38cbf47e95656d92e3992f55fce63c8a0e11c6","first_seen":"2025-07-16T08:35:15.749023Z","last_seen":"2025-12-02T17:05:01.827316Z","times_seen":156,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":36,"dns":15,"connect":1,"send":0,"wait":13,"receive":3,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /s/css/site.min.css?cb42e55bbdab3f11540fa3b620a6e66e HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=u2ymIrLsGhFAEgo0; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fBl63mtS1EtcyK9B; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 20 Aug 2025 17:24:59 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 05 May 2025 16:07:50 GMT\r\netag: W/\"6818e256-42120\"\r\nexpires: Fri, 19 Sep 2025 17:24:59 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 104930\r\ncontent-length: 36472\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":270624,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65271)","md5":"c71fa701386844028fe6595289427599","sha1":"8be981f11be9f5aab5fd100ee58b8a9332674382","sha256":"39710492ff4eb2fd207455f6edca3b9649b46fd2644021344afdf1d4c9a5ca11","sha512":"eb59d640b418acd5a06c791f80e3e98916cf53953477cdaab70b938c09a9d596ce18771910af42227e052d95251f5fce7c0ef1db0bcacc9b63c749d72ef29bf1","ssdeep":"3072:7nL9Df9J/RNOokVsdmrjY82oUXpPzfjzntD:7nL9Df9DN/vdmrjY82oUXpPzfjzntD","tlshash":"fb4492e6f9d0307d2c67c259a690fefd6a2ea545db120ea6f003672487c96d309739cc","first_seen":"2025-04-08T05:57:49.888306Z","last_seen":"2026-05-06T10:25:30.692367Z","times_seen":356,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/build/assets/DQJFgy2Q.css","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /build/assets/DQJFgy2Q.css HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=u2ymIrLsGhFAEgo0; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=eEC4LrVO2eHDZxT3; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 Aug 2025 18:22:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-15e1\"\r\nexpires: Sat, 06 Sep 2025 18:22:07 GMT\r\nage: 1224702\r\ncontent-length: 1656\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5600)","md5":"2848a360d8364b7e046a9a5c8e9571c2","sha1":"c8a8a30bbfc66dd82043a720be753726eea3b2cd","sha256":"974c1546dbd5dab88bef845d52eebec9ff7dd471e0f87aa776f03f3c04e17410","sha512":"6e92d7ac1b7052ff55c3d4b6b8999b84298433333cc1265fb12a0278484313da19b91e982f65513bee6b6293ed22bb63e48274079f151b4d30688472eca50474","ssdeep":"96:3+Egyn5WZTllol4lXuZx2AhlFlplXAB1CIDTI:uEgDlol4lXu72ADPrwHCIDTI","tlshash":"a6c12317e741501c7d63c16f62a1a7c9372bd4c2fb726f7efab1e062d69229920e3241","first_seen":"2025-07-09T03:26:33.460144Z","last_seen":"2026-05-05T22:41:44.904041Z","times_seen":239,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/favicon-16x16.png","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=633cu7jC3tUEFs5j; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=G45PiyhUXQ2gb00P; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg10_=1755815630; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Mon, 11 Aug 2025 12:39:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 533\r\nlast-modified: Mon, 05 May 2025 16:07:50 GMT\r\netag: \"6818e256-215\"\r\nexpires: Wed, 10 Sep 2025 12:39:21 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 899669\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4a1c219d978909f413ca1b9a39f7523d","sha1":"08859f796b01690ee81a13e4bcc0976f16c473ca","sha256":"dc91f3be29e28fa5aa027f4c3165a5df794424e66c1627b90a204482b470f0be","sha512":"898c1447a0dd59b40541b9720d28b191d01ce9e4e1d1c5e3ccae3e879a2249183fc74e752760f3ae0c16639c9dad6e8b5d00c627bbb4c5965c99aff1ec0aeada","ssdeep":"","tlshash":"fef020bc3323583cddcd9db641f51094a913d88c86c42d3cbec672ec44356a8c9e4036","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-05-06T10:25:30.698067Z","times_seen":937,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2060451?id=2060451\u0026jp=_clqejohfdaqsflmdhcujmh\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=C0AHI2zaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=1522444016810496\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /get/2060451?id=2060451\u0026jp=_clqejohfdaqsflmdhcujmh\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=C0AHI2zaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=1522444016810496\u0026eclog=0\u0026snc=0\u0026ssc=1\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2508211733b7178e06b97a405ebc863960dd\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Thu, 24 Sep 2026 22:33:51 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Thu, 24 Sep 2026 22:33:51 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9024,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (9024), with no line terminators","md5":"601c790bb3088c91a28e6bae17665541","sha1":"c14abddbdeab6fb6a24fe644c9cd2c0a46932b86","sha256":"6089c11c2d55626ddaf289c3a93f0522686600fce9c44727f44d6dc96a6bc6af","sha512":"c2b6930e7086db4e9d0f0e19a25ab29716f82ba5c93490fb074bc3a9ab0a96bd3c54e99d41a9f0d0a9533a3a87d7b6fe5f3b9bca2eafdad1c693f6a6477d54ed","ssdeep":"192:paFH+V7F6zFFsC9YIEHf5q4oULq/RD/Nr8ebvtW+2poK:paVE7F6zFt9/E/Ho6q/l/hzR12poK","tlshash":"8c128e6537b3e2aeb0fb8e1aa8b15d7509e622a55e0351c9b0638e3d6f007b54db1c84","first_seen":"2025-08-21T22:34:17.768976Z","last_seen":"2025-08-21T22:34:17.768976Z","times_seen":1,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v8/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/figtree/v8/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 19 Aug 2025 16:49:25 GMT\r\nexpires: Wed, 19 Aug 2026 16:49:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 193465\r\nlast-modified: Mon, 12 May 2025 21:45:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-05-09T14:43:03.728997Z","times_seen":5789,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":140,"dns":1,"connect":30,"send":0,"wait":30,"receive":9,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/chicken.gif?z=2060451\u0026pb=61dc68ae1ac6c10aadea0edd7a9a05941755822831\u0026pbc=bxmmdKdplO_vuqdo\u0026pbi=c40ZMyYodDLvuqdo\u0026pbu=I6cr8fj_-qTvuqdo\u0026psp=ft84vu_JPmxJj5TvrbyCI5CeDgmBwGHfMaiCo4aZC6OFQyl5o8kW4gzy3H9-HdoCziR5r5QR66UupsrCBZXiSzA0WZB6RoO6xrqg1CbdCrfMcVfzslnmt-h39Gpw16oQJC652YKmQI8llFaELAkXzE4xeANz5ez_6JE-51Fmu6jTWAZhjZptzWtxmgc15Qcd8s59-KVY4Pa5MRml4RZEOWGM9Kb1cuTNbcP6Rh5VkpfGHaw5tQuGXwIVI64bka1XIip2089VCQW4mZloSD6EZZjvNP1ns8lMAfiT-0mjYygXkCvMvjK-8Z0vcGxL3L6LCSIZTavekE6Ik7EEhxusGqfIQDHfX9DlQKiB83x0iRuT1wT-Q780wqmyqiKLj5QhLja-PEdfLr4K39xoyE0O9wYIiWvEfmHr42bAYTFpjjI38Gk-8XAHbv_qku4EmpuHXSdHYEzFQ6bcaDzbxyynP7c-y48e46bGMPVw8jzWg_QKg0LYjBsHN2UWWTrEXLrrHuzFgCWwI7_RH2L5IRh4nWS0Xz5Kk0qX4KKC1c54wYLncUKVdAuPlOr1WEXdXGd3t3rrZ9uRpez2cYng_vri_hg56gFP5JiOqOZdjv8PDgUrGTDB4BCkmQJuWAwAxVWftbqOQ1pcVBXytkGwCFyYdNIpRVP_DKLh97oZzskPBme6mqbRCR2ZfA-XKYKQzdhH2yO9LrDFCuGi5i-qXQxJijrfDeBEmWwS45bx9ifKXb4rlXCL2-aKcIYqTryuCNcNN6ly2-YTsvdg2KlIBARS-Gjqe11KHeh38EhB-g3ZIMpjJN_c_iSEcCCzoc2RKxfZUjQtDP8KntT3VxmEV40_RhTGtJI8FETsBzAQ7oTcs5s53wurdCKL53Wzmx37hSnaXPn94C_PEOkrETc5VnMh0UNS42B9Uf0A6oqDIQ5KbmyrRU_d6gBDLmRXkeKvUGiHAaYmgjmA0u3O6_PS6G9p3jWpaI1btHHQRn2vuX-Sah_EnTlZXswBQzGCtfdfjm4BHJdXzDi0r_yMVuEH_CEe945KSZxHD01dxJmZ8Krl8uVfHWk0DA7NgJvm-H8YwMRyCRqHjg-onGvOmQ3kxHW1UUyxqngMfSnncCV7ngxX4POlCL6PpaGNClSqYDjAAgV4ueKqrHkP8T4D_wSKlrzwtOCJQLRObOUDtRSupfyPfmiR4LqOnqaeI4WZlaCYPZR6aWlAaJOUwX8lGfBwqXU4lrkKZ4P59fsk0u6O5hIe_l7B62ry5BJtfPrQY0JFjpHYY4W4AwzaOBID_hip9PsPHuMFMY2v7n7_CIRfbArBr_HCwJwc2GmJT_tAEfNr4ty9usS_f3mu7zzqVDy4NQr1FdWlaCvU8ihMonRaLI7cUY-kJSl9d112csBQLgdxGC85dtmC54zBBgfJ2PhQK6MSToLugcHDO9YeBYuLZkZsZRoZzPiKMCyiw1fqij3MJ-wOfpCYgtfuy3q3c-PRWJ_fhiGsE5DKfOWLS6bfFZzEr3E3TebKPCIoQW56C2Y3GgHkCsjFxbnyPn8xPEeutl8gjfPqBOflukAunOTCpBRnFVqN-SCMy2f1y12s22EHHx7wwg7J3wSX7_Qen1zWU2Dhma-LXhihEdh9lYGQmLhh9_NP3yZSEjFFXWLrR9KsechrmllLa7crbmKWbVx7Vt-0FTCAJptCI6qDyQnTMKQWFaoKU7gDwASbpndit1dTARgzM5bC-fG6jwB1WG52tXsZPZcaYGR5DHH1NbIOnsJF8uIPHJxUZcmUl6wAEiNRYVyMzlSqCMSiWFOG74T3_4FNgKTggXPNxB1Df49sapmtx1xGY0Hhhcx22dpPOKjB-EsWGnRJ4eKPGbX9zPuLP1klIWmc_UDTJTHp3ZuQr5XpVq5k1b_U7IDCk3lm042VO0EWq93KaHsR3fsZfylZSDFmUlP9wbda3gVtwvJB6YFifHNSAZHS1UVUcCVhe-3KTmSP3EXOPda2z12bkajBpyTeqPTFK0tvBPVzAyUW6TsF2NlAEnaHedOGGhV1k9J_pn7Y6J2ZlbqzS0CwXhRkQzYZcj9ErLjaDyoOnBrKzlCeexrn7Zsuc3NX3O65EQjZCZ4T333_oc92MtWA_u_8hXa74l8RFaYghqPh4rDCvSDI25C--dxl1jQ0Q2_xNAaEPTrbkJfxqc90WfMtFpwnGkXD-Mf64ctmL98kCUrYV2DT_pDqjHnEtNS3Hod_NWy0A2GYGo6WAW77sbf-0nfoMXXISeJL2PxuaNZ6q0Qnnjep3brDaRNdNocnaLuWlZH91RxWIBiGWVepDqYg5psbo_78Aykn8y25LqSTSZ3UHm_cca7tOSsp-ZDHW_OoYra4bNXoGbvsUVOcOVGC-6zTvk047YFkGb2aCamC0QDDbKuR5Uoef5MqDDT6Ud8BkgG1rJP-Jc2Bske14THkIzvlGAluSCW3peryRcx5kFvFw5heFFNvs3dKKLBWTrqcaA==\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=9a8KNzEaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=4055718807308288\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:53.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /chicken.gif?z=2060451\u0026pb=61dc68ae1ac6c10aadea0edd7a9a05941755822831\u0026pbc=bxmmdKdplO_vuqdo\u0026pbi=c40ZMyYodDLvuqdo\u0026pbu=I6cr8fj_-qTvuqdo\u0026psp=ft84vu_JPmxJj5TvrbyCI5CeDgmBwGHfMaiCo4aZC6OFQyl5o8kW4gzy3H9-HdoCziR5r5QR66UupsrCBZXiSzA0WZB6RoO6xrqg1CbdCrfMcVfzslnmt-h39Gpw16oQJC652YKmQI8llFaELAkXzE4xeANz5ez_6JE-51Fmu6jTWAZhjZptzWtxmgc15Qcd8s59-KVY4Pa5MRml4RZEOWGM9Kb1cuTNbcP6Rh5VkpfGHaw5tQuGXwIVI64bka1XIip2089VCQW4mZloSD6EZZjvNP1ns8lMAfiT-0mjYygXkCvMvjK-8Z0vcGxL3L6LCSIZTavekE6Ik7EEhxusGqfIQDHfX9DlQKiB83x0iRuT1wT-Q780wqmyqiKLj5QhLja-PEdfLr4K39xoyE0O9wYIiWvEfmHr42bAYTFpjjI38Gk-8XAHbv_qku4EmpuHXSdHYEzFQ6bcaDzbxyynP7c-y48e46bGMPVw8jzWg_QKg0LYjBsHN2UWWTrEXLrrHuzFgCWwI7_RH2L5IRh4nWS0Xz5Kk0qX4KKC1c54wYLncUKVdAuPlOr1WEXdXGd3t3rrZ9uRpez2cYng_vri_hg56gFP5JiOqOZdjv8PDgUrGTDB4BCkmQJuWAwAxVWftbqOQ1pcVBXytkGwCFyYdNIpRVP_DKLh97oZzskPBme6mqbRCR2ZfA-XKYKQzdhH2yO9LrDFCuGi5i-qXQxJijrfDeBEmWwS45bx9ifKXb4rlXCL2-aKcIYqTryuCNcNN6ly2-YTsvdg2KlIBARS-Gjqe11KHeh38EhB-g3ZIMpjJN_c_iSEcCCzoc2RKxfZUjQtDP8KntT3VxmEV40_RhTGtJI8FETsBzAQ7oTcs5s53wurdCKL53Wzmx37hSnaXPn94C_PEOkrETc5VnMh0UNS42B9Uf0A6oqDIQ5KbmyrRU_d6gBDLmRXkeKvUGiHAaYmgjmA0u3O6_PS6G9p3jWpaI1btHHQRn2vuX-Sah_EnTlZXswBQzGCtfdfjm4BHJdXzDi0r_yMVuEH_CEe945KSZxHD01dxJmZ8Krl8uVfHWk0DA7NgJvm-H8YwMRyCRqHjg-onGvOmQ3kxHW1UUyxqngMfSnncCV7ngxX4POlCL6PpaGNClSqYDjAAgV4ueKqrHkP8T4D_wSKlrzwtOCJQLRObOUDtRSupfyPfmiR4LqOnqaeI4WZlaCYPZR6aWlAaJOUwX8lGfBwqXU4lrkKZ4P59fsk0u6O5hIe_l7B62ry5BJtfPrQY0JFjpHYY4W4AwzaOBID_hip9PsPHuMFMY2v7n7_CIRfbArBr_HCwJwc2GmJT_tAEfNr4ty9usS_f3mu7zzqVDy4NQr1FdWlaCvU8ihMonRaLI7cUY-kJSl9d112csBQLgdxGC85dtmC54zBBgfJ2PhQK6MSToLugcHDO9YeBYuLZkZsZRoZzPiKMCyiw1fqij3MJ-wOfpCYgtfuy3q3c-PRWJ_fhiGsE5DKfOWLS6bfFZzEr3E3TebKPCIoQW56C2Y3GgHkCsjFxbnyPn8xPEeutl8gjfPqBOflukAunOTCpBRnFVqN-SCMy2f1y12s22EHHx7wwg7J3wSX7_Qen1zWU2Dhma-LXhihEdh9lYGQmLhh9_NP3yZSEjFFXWLrR9KsechrmllLa7crbmKWbVx7Vt-0FTCAJptCI6qDyQnTMKQWFaoKU7gDwASbpndit1dTARgzM5bC-fG6jwB1WG52tXsZPZcaYGR5DHH1NbIOnsJF8uIPHJxUZcmUl6wAEiNRYVyMzlSqCMSiWFOG74T3_4FNgKTggXPNxB1Df49sapmtx1xGY0Hhhcx22dpPOKjB-EsWGnRJ4eKPGbX9zPuLP1klIWmc_UDTJTHp3ZuQr5XpVq5k1b_U7IDCk3lm042VO0EWq93KaHsR3fsZfylZSDFmUlP9wbda3gVtwvJB6YFifHNSAZHS1UVUcCVhe-3KTmSP3EXOPda2z12bkajBpyTeqPTFK0tvBPVzAyUW6TsF2NlAEnaHedOGGhV1k9J_pn7Y6J2ZlbqzS0CwXhRkQzYZcj9ErLjaDyoOnBrKzlCeexrn7Zsuc3NX3O65EQjZCZ4T333_oc92MtWA_u_8hXa74l8RFaYghqPh4rDCvSDI25C--dxl1jQ0Q2_xNAaEPTrbkJfxqc90WfMtFpwnGkXD-Mf64ctmL98kCUrYV2DT_pDqjHnEtNS3Hod_NWy0A2GYGo6WAW77sbf-0nfoMXXISeJL2PxuaNZ6q0Qnnjep3brDaRNdNocnaLuWlZH91RxWIBiGWVepDqYg5psbo_78Aykn8y25LqSTSZ3UHm_cca7tOSsp-ZDHW_OoYra4bNXoGbvsUVOcOVGC-6zTvk047YFkGb2aCamC0QDDbKuR5Uoef5MqDDT6Ud8BkgG1rJP-Jc2Bske14THkIzvlGAluSCW3peryRcx5kFvFw5heFFNvs3dKKLBWTrqcaA==\u0026freq=0\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=9a8KNzEaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=4055718807308288\u0026eclog=0\u0026snc=0\u0026ssc=3\u0026tp=0\u0026vp=8\u0026pi=W1oqmg\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cart=1; cart_p=2; CHCK=1; PTS=; UID=2508211733b7178e06b97a405ebc863960dd\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-route-id: stats.impression\r\nset-cookie: BCAI=ADROLQAAAAAAAAAB; Path=/; Expires=Fri, 22 Aug 2025 22:33:53 GMT; Secure; SameSite=None\nBMI=AEbTegAAAAAAAAAB; Path=/; Expires=Fri, 22 Aug 2025 22:33:53 GMT; Secure; SameSite=None\nBCRI=k93JFQAAAAAAAAAB; Path=/; Expires=Fri, 22 Aug 2025 22:33:53 GMT; Secure; SameSite=None\nIMC_102=1; Path=/; Expires=Fri, 22 Aug 2025 22:33:53 GMT; Secure; SameSite=None\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"28e463819a210071de3b45ebe7633613","sha1":"6dccd571828ec0912629119cf7eabfea9f33ddbc","sha256":"44251f61629e2bfeead421241a917f43ad047af351659f01cd8fd937f0417f84","sha512":"8a82ac5a7883cd9b74bdb561cf825ce86474e259ad8c445e538d697b0003e3f2b1d6edcd3dc6512f4ad16e9074da204a79938257c457ecf68f4329eac0182e67","ssdeep":"","tlshash":"04900003e280e082c3a0c0300e0ccb802b88a2308a28030fb0fc2baefc3a3a20c23000","first_seen":"2023-04-05T09:26:54Z","last_seen":"2026-05-09T15:11:23.498649Z","times_seen":21405,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/jwplayer.core.controls.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /jwplayer/8.38.2/jwplayer.core.controls.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=633cu7jC3tUEFs5j; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Xpy3yRnK7LqB8XLI; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 Aug 2025 18:22:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-53d0f\"\r\nexpires: Sat, 06 Sep 2025 18:22:17 GMT\r\nage: 1224692\r\ncontent-length: 87320\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":343311,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0a349b8e256b710c33f59804e11824af","sha1":"4124b412899128cb8a2521e4f5c2ac88c2c143b1","sha256":"527933d04090c542ae6bff57a0dc240d927908d890e37b578effa55a310932ce","sha512":"8b8efd834ba24cfe9b0f96247bcbba7f2fc1c939a13ebf2cbb8c1e06bd890e5e07f29b82c3303f5498a2f998642ab7d798ab3eff4a975f9eee47175a5358136d","ssdeep":"3072:VM7nFu+slX/+8CtPIVcSJh0EcYSrJ4MOkVGvSwqzrpxMChYFwSC3G:VMxRU/+TAcSJh0lO0GvSVpGJFwSC3G","tlshash":"a07419322142523596e682da76514604b33a8085f506cfacff7ceddd4c6e98b31fabb4","first_seen":"2025-07-09T03:26:33.46094Z","last_seen":"2025-12-13T13:26:16.486694Z","times_seen":141,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/vttparser.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /jwplayer/8.38.2/vttparser.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=oog29HaOZWdNQkta; __ddg10_=1755815630; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IlBRQTM1MEUya3JlRXJDdi9WdnE5aWc9PSIsInZhbHVlIjoiZkl0d3JHakRhZU9PS1daR1g3WkEweWd0OGl5NWRvT0NBZkFXc1lVbEovUUFHV3dXTTFPTkc0L3FGSVBDVzZSM0VzZi9hUkxXQ0ZvN0ZCSjY5RjZyVlpVRGdyRFZkVWxiUHVDLzRGaFY2TGlvd2YxUjRkRTF3c0dnN2VPSmVYcDIiLCJtYWMiOiJkNzI4MWZmOTc1OWZjYjQ4YTk4ZTk4ODlmODdlNDI3N2FiYjVmNDg2MmUxNjVlY2M1NGZhNDgzM2NmZjZmMjlhIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjhBZnBKWVczTmdBQTZoMmhVbmZRT2c9PSIsInZhbHVlIjoiRGJNNkI4WEIzVDl5OWUySWdkZDBEalRjSVpNMEJHQzBhSGNtYVlvODVPUmJyUTJmb295YjhkQkh6dVhCTFM5MlpiMXlENlNHNG9tRFIzMDU4cGo4RnNVdWRjZEVBWWh0YWpQRFJNUHA0Tis4bDNYckRsT2tHTFBzcUJTRHo2aFMiLCJtYWMiOiJhZjYwZDYyMDY2YmNhYzQ2NDFkYWNhNGUzNDJiMzU4Nzc2YjdjMjg5ZWQxMzMzZGYwNjQ5YzRkYzdmMzk3MDllIiwidGFnIjoiIn0%3D; UGVyc2lzdFN0b3JhZ2U=%7B%7D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=o9p7KLXE1cA1ptWp; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg10_=1755815630; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sun, 10 Aug 2025 23:06:03 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-1133\"\r\nexpires: Tue, 09 Sep 2025 23:06:03 GMT\r\nage: 948467\r\ncontent-length: 1898\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4403,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4403), with no line terminators","md5":"aac63679e388c09f95e3e3cdbb52d771","sha1":"7262f57cc1346e607071201c4105c50b768ab87f","sha256":"c5ca49b071d946eb43acd7ddb2186e9b98bf95fc971bdebb0dcbfd4cabb3154b","sha512":"f9c0ee52e2c4eb6f2310725a1dcdf26f14109b605031695738f28ef14ff8bb0c86a35ec94940fe403939245f7193853bae0ec5feb1e4d09dfe21b1af9d69e199","ssdeep":"96:BMKCEZLCyGWaVDvTg7ksuFs0ad83YP8GBXZxqqDysNoqZl3brzVt8nPFJHP/65U6:BMjZyGtV/g7rK/a23GdZcqDyAb2nTpdm","tlshash":"9191e89024413c6daba6b69b00ef266043f8047d3d4d0e90b6a4dbab75396cf51b9bf1","first_seen":"2025-04-16T11:00:53.625974Z","last_seen":"2025-11-11T18:38:31.844695Z","times_seen":23,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bobapsoabauns.com/www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png","fqdn":"bobapsoabauns.com","domain":"bobapsoabauns.com","tld":"com"},"ip":{"addr":"104.21.73.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:53.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bobapsoabauns.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 00:31:08 GMT","end":"Sat, 18 Oct 2025 01:29:43 GMT"},"fingerprint":{"sha1":"4E:96:D6:75:E3:4E:EB:72:97:6E:6C:E5:16:12:62:F0:5C:39:62:43","sha256":"AC:C3:8A:C8:E3:75:C3:F1:0D:5F:68:9A:20:81:89:FC:96:E0:CC:A1:B8:04:E1:4D:96:DE:70:B4:7E:4B:70:EE"}}},"request":{"raw":"GET /www/images/31f5bb5f43a7bd2800c6724e3a4125d2.png HTTP/1.1\r\nHost: bobapsoabauns.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 21 Aug 2025 22:33:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 16893\r\nlast-modified: Mon, 17 Mar 2025 02:12:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"67d78504-41fd\"\r\nexpires: Fri, 22 Aug 2025 05:43:13 GMT\r\ncache-control: max-age=86400\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nage: 60640\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jh6UB4G0RCIkrvJQg90GJtt2nxEOBTkhmup%2BkrYANqIyJUeZqtH2hYkDbswXXNDc5RlgwaTH6boKHiBkDrReGjPxSA51UzVM3Mb5In5epg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 972d983ecb9b56c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16893,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"31f5bb5f43a7bd2800c6724e3a4125d2","sha1":"bc1bcd6aa31ac91dd34359c2fbbcaefb3e15c875","sha256":"e5dd86d52381d2bff5f1b74d3923443d3d95ced64048662307ed3ec2d52eb61b","sha512":"472e23766bb20f680ab31d5c358d9555ce56596444072978dd6340ca5e918aedcf1985a811c7f3f41b72bb15ce3df8ca98a2fddb5ec9a1eeb5f30d586fc7c23e","ssdeep":"384:wDIuIpXyvlnQ8HrcT30rRp8Rp6g9TzBtnL1Ti7DpHQ9:wsHyvBXHrQxF93By7DhQ9","tlshash":"0572c06f0a4a5703999d1c0d1eab7c9d667a425f007c2e6b23239c5cf94a36f6042df5","first_seen":"2025-03-17T02:19:44.486682Z","last_seen":"2025-11-29T07:50:01.235056Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/check.html","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /check.html HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Mon, 21 Jul 2025 07:22:27 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687deab3-39e\"\r\nx-js-ab: current\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":926,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"088dba8e97eede53134c93219f7ebbae","sha1":"adb707654d1fe0af7d0d7a9f55660d22bd3625e4","sha256":"6da0120b4c7bc45b63fcbb87595c3c1ea2cdca482b0c48d4d2ab434f9e897aff","sha512":"23a1f87731e8aee4658993cd1ce35ec179fea80b89bf52aca7634488f1bdfcf88b9cabca4859481357a9fee06cbb49df64bbe0878b1dae0e5df4fa34003c6d80","ssdeep":"","tlshash":"6211d04934e1684c1127a6301597a2183c32a40315cbd949fb9cd7301f815a7dc596df","first_seen":"2024-11-22T16:59:41.974716Z","last_seen":"2026-03-04T10:11:28.020186Z","times_seen":13721,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"campfirecroutondecorator.com/get/2060451?id=2060451\u0026jp=_clqejohfdaqsflmdhcujmh\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Vd4lLTdaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=1803918993418752\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2\u0026uf=0\u0026freq=0","fqdn":"campfirecroutondecorator.com","domain":"campfirecroutondecorator.com","tld":"com"},"ip":{"addr":"94.242.247.33","port":443,"asn":7979,"as":"SERVERS-COM","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"campfirecroutondecorator.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 09 Aug 2025 14:32:42 GMT","end":"Fri, 07 Nov 2025 14:32:41 GMT"},"fingerprint":{"sha1":"FA:F0:00:86:1D:48:37:40:0C:34:84:97:22:CD:F3:88:EC:F7:54:03","sha256":"A7:7B:8F:F8:01:A0:87:07:71:73:F9:5A:EF:7C:EC:00:3A:D1:8F:A9:16:4F:C9:D7:7E:77:38:1C:58:75:5C:B8"}}},"request":{"raw":"GET /get/2060451?id=2060451\u0026jp=_clqejohfdaqsflmdhcujmh\u0026dr=102\u0026cuaa=1\u0026nojs=0\u0026bavar=0\u0026febuild=1.0.573-st\u0026t=0\u0026wcks=1\u0026wgl=1\u0026cnvs=1\u0026os=0\u0026tz=UTC\u0026ss=1\u0026ls=1\u0026bb=0\u0026cti=0\u0026fn=3\u0026es=13\u0026ge=2\u0026th=7IorIckxTvsTbyRkhS-hNXWVsPCTpVIbFIUEQtsql-\u0026plu=PDF%20Viewer::Chrome%20PDF%20Viewer::Chromium%20PDF%20Viewer::Microsoft%20Edge%20PDF%20Viewer::WebKit%20built-in%20PDF\u0026lang=en-US\u0026pf=Win32\u0026cd=24\u0026vcv=Mesa\u0026vcn=llvmpipe\u0026ix=0\u0026x=1280\u0026y=1024\u0026md=0\u0026psu=Vd4lLTdaHR0cHM6Ly9qaWxsaWFuZGVzY3JpYmVjb21wYW55LmNvbS9lL2N1dnBicmxsb2htYw\u0026afid=1803918993418752\u0026eclog=0\u0026snc=0\u0026ssc=0\u0026vp=8\u0026dto=2\u0026im=1\u0026noch=1\u0026cs=2\u0026uf=0\u0026freq=0 HTTP/1.1\r\nHost: campfirecroutondecorator.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: cart=1; cart_p=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\nx-route-id: config\r\nset-cookie: CHCK=1; Path=/; Expires=Thu, 24 Sep 2026 22:33:51 GMT; Secure; SameSite=None\nPTS=; Path=/; Expires=Thu, 24 Sep 2026 22:33:51 GMT; Secure; SameSite=None\nUID=2508211733b7178e06b97a405ebc863960dd; Path=/; Expires=Thu, 24 Sep 2026 22:33:51 GMT; Secure; SameSite=None\r\ncontent-encoding: gzip\r\ntiming-allow-origin: *\r\naccept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (548), with no line terminators","md5":"8a13b2db185657454ebd2aebfa0a869d","sha1":"579060b6f138911c84b99f494501d863c6298d58","sha256":"1f344f7e2da1c0b201243907f3eef580d2d78344f4f753c3664bce8880535ff1","sha512":"9946dfe46f47422e40b62de129a85cc0e2c4651df93dc4a4ceb1fb97e3652270db99d44e50386591bd30ddce67e14028cb12b61ef4d552d2dafa1229d63f3abe","ssdeep":"","tlshash":"54f08be57fb2d8e76da1260d26ba0d71e8516772de47e36c1163a805460487c6646080","first_seen":"2025-08-21T22:34:17.774705Z","last_seen":"2025-08-21T22:34:17.774705Z","times_seen":1,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 27446\r\ncf-ray: 972d98238e58712a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"64ed75bb-6b36\"\r\nlast-modified: Tue, 29 Aug 2023 04:36:11 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1235538\r\nexpires: Tue, 11 Aug 2026 22:33:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cu8vX91Vf8jNz8ZWyW9mGGZCo7glaDdaG1XbPR7iH6DmGjzhiuglgmt2Hkf5EzHhThAhsRBwgArNlrFL7RnUShc20tXK5P6fF3sE68yyKac%2B6gvRHxrJHHTwhbsihisFubAuVANA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-05-09T15:17:51.798996Z","times_seen":152813,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":22,"dns":1,"connect":4,"send":0,"wait":17,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/bootstrap/5.3.3/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 21 Aug 2025 22:33:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21170\r\ncf-ray: 972d98238e5a712a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65d4c5f6-52b2\"\r\nlast-modified: Tue, 20 Feb 2024 15:32:06 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 486120\r\nexpires: Tue, 11 Aug 2026 22:33:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DzFM9wpFx4X3e4FQHeeFwQlQUh6G%2BCdnL97pMfbZBvtxQPKuoZW85LAIt281kQ9FWv%2Fevf%2BmqxIQOTjEEDLk0yxY1Ng%2F1WWO48fAq7VEwyDpXvAcxF3qqlFPamV0VGBAuQdc3PMN\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-05-09T14:54:44.577538Z","times_seen":24531,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":19,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Figtree:wght@400;600;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Figtree:wght@400;600;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 21 Aug 2025 22:33:49 GMT\r\ndate: Thu, 21 Aug 2025 22:33:49 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2508,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"81697f14fef5e75334dddac376b63b52","sha1":"e5a95321183528f482564419929d611b096aec6c","sha256":"62779f80bdd9979d0857443f631b0242c5866967a949b2bb01b4102135fdc8f1","sha512":"3560e6032a282d358ade6331a3b877c650d3a14f872371902e8d406b52a73235adf28de56f67679db796fdc6d61d9457a6c7e24aea11285580b35efc48860c1b","ssdeep":"","tlshash":"8f51fe81086ba504df930dc152ce7e33ef1ea390684589349efe189cacead279352b5d","first_seen":"2025-05-16T04:35:40.676416Z","last_seen":"2025-09-09T16:18:13.677046Z","times_seen":108,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":295,"dns":1,"connect":17,"send":0,"wait":33,"receive":0,"ssl":283},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /s/js/site.min.js?ea7bc466cd21d4b756b621241c671b1d HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=u2ymIrLsGhFAEgo0; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=B4c6YWIVR60YNsWO; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 20 Aug 2025 19:47:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 05 May 2025 16:07:50 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"6818e256-191d9\"\r\nexpires: Fri, 19 Sep 2025 19:47:47 GMT\r\nage: 96362\r\ncontent-length: 24315\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":102873,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52179)","md5":"72e89292dad5c7e8a82f6101fc52b71a","sha1":"11917db2f454df110fedaf803ebf640052f953b8","sha256":"1058329efc2e4de916dc58c5996ae6620836b878c33d13742b90f20ccddabe61","sha512":"995b449151db16173299bea7ea6a0df052295a5fa7f19a905863fe5e4278fd647569161df9ea2feb72d33eaafe4fe60cc3a8bc240af7aa2863e4da7b527386dd","ssdeep":"1536:Y2u4R3FNZRo3GiCNIUhxBsSU1UxYs5pfEzI:FRPLzybXotE8","tlshash":"21a31829b314193252ffa2f7749b2a057336d526ca82c055b878c56c0ef9d8536e3f2e","first_seen":"2024-04-21T22:28:32Z","last_seen":"2025-09-27T09:23:21.790129Z","times_seen":623,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/jwplayer/8.38.2/provider.hlsjs.js","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:49.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /jwplayer/8.38.2/provider.hlsjs.js HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=633cu7jC3tUEFs5j; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=fKnzgBvB0ps3xtN7; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg10_=1755815629; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:49 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 Aug 2025 18:22:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 08 Jul 2025 18:22:04 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"686d61cc-8c596\"\r\nexpires: Sat, 06 Sep 2025 18:22:17 GMT\r\nage: 1224692\r\ncontent-length: 161731\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":574870,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"28ad7c8f97ec3efd3fc7355f4b7ab863","sha1":"0cc23dd36c89c6c9d47da8957c638583e8a843da","sha256":"061bc2c8535bfb740a2c1a5dab6e4c91c5388b84609282356b6d67cb0d85be73","sha512":"221c0c31d6cb59acb129ca485960e2a56051d668b76926e2cbe1b1241c46c4f0e7b192d571adea369a0d04916f94a162a12806aff5089f954306a31c54263ccf","ssdeep":"6144:caK/sZg+NY3UbNe6rXTQoalFwc3JWPCaEqeeuFBWqWDJkw0dHhbBI7NEpg8kF4e9:zbNPDCFw2BWqWwHpt7Y","tlshash":"21c42ade3795a01683c2b1a5903f5617633a7d0a280cc16cfa2be9d72d79949b03bf74","first_seen":"2025-07-09T03:26:33.452721Z","last_seen":"2025-12-13T13:26:16.431753Z","times_seen":141,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jilliandescribecompany.com/android-icon-192x192.png","fqdn":"jilliandescribecompany.com","domain":"jilliandescribecompany.com","tld":"com"},"ip":{"addr":"186.2.163.111","port":443,"asn":59692,"as":"IQWeb FZ-LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:50.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jilliandescribecompany.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Jun 2025 09:04:54 GMT","end":"Sun, 28 Sep 2025 09:04:53 GMT"},"fingerprint":{"sha1":"07:FB:4F:6A:FF:32:CC:97:F7:BE:A1:D4:CE:3D:8D:4A:83:89:F2:4B","sha256":"49:4C:6C:55:0F:10:74:50:7D:15:CB:1C:B7:C2:53:F1:C6:29:C8:12:36:43:01:91:59:98:9A:27:2A:79:E6:5B"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: jilliandescribecompany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/e/cuvpbrllohmc\r\nCookie: __ddg8_=633cu7jC3tUEFs5j; __ddg10_=1755815629; __ddg9_=91.90.42.154; __ddg1_=iWC43UE8PtmlgVu2rQHH; XSRF-TOKEN=eyJpdiI6IkoycXU3L25tS2JwTWMyZ3pKdXBEUFE9PSIsInZhbHVlIjoiVk1pRnpudjlNdThrMXBLVm5WSmpmdFFlTUNaSzRkT3F2ZEFHS1FiUVIvSXR3RDZJeDJKNkJic1J1OWFRaERxWFJ5TkZTQ1VlQzVHZzVNdkNVTlRsaGZXZ1o2MEFid3BtNjZnVk9tZFB1T0Fmclk0eUhBOU41MmgrUHE2N25XT3giLCJtYWMiOiJkMDc4M2RlZGNiZjNjNjg5N2UxN2Q5MzBlODViMjdmMjVkYjZlMDJlNWEwYWI4NzA4NDM3YjgwN2UwNWJmYjJlIiwidGFnIjoiIn0%3D; voe_session=eyJpdiI6IjZOb2dYcW1WZGlCZGZJQU1Id2pDV0E9PSIsInZhbHVlIjoiTCtPd1ovcHNHUDRxWElONTc5RDNnUytybWhqbnBzOWVwajAwUXc1b0tra0xUZ3lmVkk4SUxyUzBPZTNZQndZemNiSzZmSytVZFpReG90UjVVelgxL2JER2JYeXlPNW5iUnlUMnI1TzY4bHQ5NlBaTll1bEFjS0svKzQzMUhHYXoiLCJtYWMiOiJiM2ZlMWMwODFjN2NjOGQxOTY3YjgwMTlhNGYxNTJlOGE0YmE5Mzk2NDczOGNlODk0YTBjMmU2MjQ3ZGE0NDcwIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=3vtWzfRNxHu9swfh; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg10_=1755815630; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\n__ddg9_=91.90.42.154; Domain=.jilliandescribecompany.com; Path=/; Expires=Thu, 21-Aug-2025 22:53:50 GMT\r\nstrict-transport-security: max-age=2628000\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 23 Jul 2025 05:39:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 7068\r\nlast-modified: Mon, 05 May 2025 16:07:50 GMT\r\netag: \"6818e256-1b9c\"\r\nexpires: Fri, 22 Aug 2025 05:39:45 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 2566445\r\nddg-cache-status: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"6e09fa5e43f9f169c8b65bdba9683b46","sha1":"e986e9353a404b28a522b85dc0b7afb480b6cb27","sha256":"7940cbb7ef222596bef1a1d1db04e8a1b745dfdeb769ff9a46f4e3717396af0b","sha512":"877c8c593b415b7ee70c698c429bde02a0448c94a1500f202ea9f6c0c54ac4fa36c3bfc0d449d0dcd1b00802e494464ca38d45b98ce21c9829fec1d90806af8f","ssdeep":"192:0l+appIc5YmxlmChBC6QOANGVZQcyefhMD0Jdg5FadQzf:0lFpjFAeGGVRyS5S0K","tlshash":"ffe1aed7100650cc4e7f96dfe5af84c0672702ae4d6a1ab3047c23359b291ea9e19628","first_seen":"2023-05-08T15:55:48Z","last_seen":"2026-05-06T10:25:30.691515Z","times_seen":908,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=386fd459-b256-4cee-b1d8-cb397c0e120a","fqdn":"fleraprt.com","domain":"fleraprt.com","tld":"com"},"ip":{"addr":"139.45.195.252","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fleraprt.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Wed, 11 Dec 2024 00:00:00 GMT","end":"Sun, 11 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"23:5D:23:03:7B:8D:47:5A:E9:9C:E7:E0:5C:7E:E6:4F:A2:DC:B6:D0","sha256":"9E:F7:13:45:55:C0:E9:09:A9:42:CC:D1:27:57:55:66:A1:63:5C:CB:EA:38:76:AA:6D:AB:5A:02:42:09:5D:46"}}},"request":{"raw":"POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f\u0026ruid=386fd459-b256-4cee-b1d8-cb397c0e120a HTTP/1.1\r\nHost: fleraprt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1422\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.25.5\r\nDate: Thu, 21 Aug 2025 22:33:51 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://jilliandescribecompany.com\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-05-09T14:42:05.604476Z","times_seen":56735,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":104,"dns":11,"connect":26,"send":0,"wait":27,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogoampoodopet.com/impression/j0nbdFyzicGVFqHIoLoWJtRmZWMUx6nMwhTesZsD_w8yJ7FaEHnLH7tkwaGDDNi1zosz90YAkEEG5evSQti8m_O25mF6tlkcvFT4RM-dpR61aFNaTxfkTIeaG3fM5o85wVLVUBil3VLOl2t8cafxEU6_7FiW0fr8Ibc7EWFRMM_HjWHRqNdD_z_wc7dnhmIRhqb2cXbxfzXUY2p7C1hekL7fKlhXbW6d6VMzFBKfvXl95_omdLEHfDxET2NeBFcq7snnnSnKzmIlEn9JqMOy2OaUoAieXVh_EjzG_30rmWPgdnY61FY1LBR-In-FkXHen3l9ZAFOatYNkIBKZOOGuVrgT3r3auLfhhSmfSS_vpDAAHL-Q7x3SqLHrfjalVluZst6UOEY2ElkTVdYzR0Ox3Fr82QvS2XEgzbgxbhoAfHX_ZiERpK_5b659S8lIbVFZy1jZVYtyjS-WiPixdPHRENtZAE1hF9IIUnrZLb73cbxcYM96lKxZAJWn4i5jeRgvp6C5BMUmK4A24d7mhglmqHtpv2TGSnqqNH3Ky9Nsjg96_fqPkKTr-KWOtiBO74sX5o4uCRqu9U0rrxynmnVNDoZPXm9XNCiW4zkkt7qjx0B4NyHxQ8eSUoqYhYtfWpYGqpFMnEEvCX9Dsgtjz0h3bRYPiaAQ-OQaKu7lHLHfg-blYs7eFGpTPe6m32lguTRFAWY1JrbCC445gcGxncLIRliUahTAR5IT0U_kuZhkt3pPOYr5krPaYl3-OD4Zyw6-25nmWj0m_TrRd5knH-ojLEW1MmwS4p5Qqnrc_gnDpJnqe8PnOmQXHzpjzZ34E8IwHAqkKTtfMAy0nXEVajRP_jOMfxTeFFsro0Wl47A1qdBia8YJT_5orIUDZQ=?_z=9013477\u0026sw_version=v1.699.0-s\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=1\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2Fe%2Fcuvpbrllohmc\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026bto=0\u0026btz=UTC\u0026jsp=1","fqdn":"ogoampoodopet.com","domain":"ogoampoodopet.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:53.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ogoampoodopet.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:24:43 GMT","end":"Sat, 18 Oct 2025 05:24:42 GMT"},"fingerprint":{"sha1":"F9:79:8E:73:08:0F:00:A8:A8:34:31:34:F2:AC:FA:89:9C:19:C0:CE","sha256":"F9:81:D8:67:D1:8C:E2:63:34:13:DD:D0:1E:FD:76:40:FB:4D:3D:A6:6D:A0:F5:44:67:8B:82:04:1B:DD:E8:15"}}},"request":{"raw":"GET /impression/j0nbdFyzicGVFqHIoLoWJtRmZWMUx6nMwhTesZsD_w8yJ7FaEHnLH7tkwaGDDNi1zosz90YAkEEG5evSQti8m_O25mF6tlkcvFT4RM-dpR61aFNaTxfkTIeaG3fM5o85wVLVUBil3VLOl2t8cafxEU6_7FiW0fr8Ibc7EWFRMM_HjWHRqNdD_z_wc7dnhmIRhqb2cXbxfzXUY2p7C1hekL7fKlhXbW6d6VMzFBKfvXl95_omdLEHfDxET2NeBFcq7snnnSnKzmIlEn9JqMOy2OaUoAieXVh_EjzG_30rmWPgdnY61FY1LBR-In-FkXHen3l9ZAFOatYNkIBKZOOGuVrgT3r3auLfhhSmfSS_vpDAAHL-Q7x3SqLHrfjalVluZst6UOEY2ElkTVdYzR0Ox3Fr82QvS2XEgzbgxbhoAfHX_ZiERpK_5b659S8lIbVFZy1jZVYtyjS-WiPixdPHRENtZAE1hF9IIUnrZLb73cbxcYM96lKxZAJWn4i5jeRgvp6C5BMUmK4A24d7mhglmqHtpv2TGSnqqNH3Ky9Nsjg96_fqPkKTr-KWOtiBO74sX5o4uCRqu9U0rrxynmnVNDoZPXm9XNCiW4zkkt7qjx0B4NyHxQ8eSUoqYhYtfWpYGqpFMnEEvCX9Dsgtjz0h3bRYPiaAQ-OQaKu7lHLHfg-blYs7eFGpTPe6m32lguTRFAWY1JrbCC445gcGxncLIRliUahTAR5IT0U_kuZhkt3pPOYr5krPaYl3-OD4Zyw6-25nmWj0m_TrRd5knH-ojLEW1MmwS4p5Qqnrc_gnDpJnqe8PnOmQXHzpjzZ34E8IwHAqkKTtfMAy0nXEVajRP_jOMfxTeFFsro0Wl47A1qdBia8YJT_5orIUDZQ=?_z=9013477\u0026sw_version=v1.699.0-s\u0026dmn=ptichoolsougn.net\u0026fs=0\u0026cf=0\u0026sw=1280\u0026sh=1024\u0026sah=1024\u0026wx=0\u0026wy=0\u0026ww=1280\u0026wh=1024\u0026cw=1280\u0026wiw=1280\u0026wih=1024\u0026wfc=1\u0026pl=https%3A%2F%2Fjilliandescribecompany.com%2Fe%2Fcuvpbrllohmc\u0026drf=\u0026np=1\u0026pt=0\u0026nb=1\u0026ng=0\u0026ix=0\u0026nw=1\u0026tb=false\u0026bto=0\u0026btz=UTC\u0026jsp=1 HTTP/1.1\r\nHost: ogoampoodopet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jilliandescribecompany.com/\r\nCookie: OAID=08022c7ca8294dc5e897cb5673ab730d\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-trace-id: 517f66f3ff05fbc234d0f2eabb30852c\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-05-09T15:18:45.334277Z","times_seen":99341,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ogoampoodopet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:53.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 15 Aug 2025 08:13:09 GMT\r\nexpires: Sat, 15 Aug 2026 08:13:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 570044\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-05-09T15:22:38.78062Z","times_seen":805665,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogoampoodopet.com/mtg/","fqdn":"ogoampoodopet.com","domain":"ogoampoodopet.com","tld":"com"},"ip":{"addr":"139.45.197.245","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:51.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ogoampoodopet.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Jul 2025 05:24:43 GMT","end":"Sat, 18 Oct 2025 05:24:42 GMT"},"fingerprint":{"sha1":"F9:79:8E:73:08:0F:00:A8:A8:34:31:34:F2:AC:FA:89:9C:19:C0:CE","sha256":"F9:81:D8:67:D1:8C:E2:63:34:13:DD:D0:1E:FD:76:40:FB:4D:3D:A6:6D:A0:F5:44:67:8B:82:04:1B:DD:E8:15"}}},"request":{"raw":"OPTIONS /mtg/ HTTP/1.1\r\nHost: ogoampoodopet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://jilliandescribecompany.com/\r\nOrigin: https://jilliandescribecompany.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 21 Aug 2025 22:33:51 GMT\r\ncontent-length: 0\r\nallow: OPTIONS, POST\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://jilliandescribecompany.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 600\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T15:38:22.40258Z","times_seen":14902800,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-21","alert":"Sinkholed","trigger":"ogoampoodopet.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jilliandescribecompany.com/e/cuvpbrllohmc","date":"2025-08-21T22:33:53.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"DF:A1:DB:1F:BC:5E:31:D7:F8:FE:26:E3:B9:B3:02:98:B1:C8:50:EC","sha256":"A2:57:20:B6:AE:46:89:B9:39:C7:57:9B:1E:43:96:E3:5A:BC:7E:3F:1D:18:10:34:CC:53:3D:DB:78:4E:5C:21"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 21 Aug 2025 22:33:53 GMT\r\ndate: Thu, 21 Aug 2025 22:33:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c1dfd96443eb2be2a1f91f6adb6f9dbb","sha1":"34fcc9ca9febd9112aeeb81b053d0d2bb6ab4b9c","sha256":"59e10836dc5089dc4aa2f54b882ceb39184f2970d915a5de1a594d502876143a","sha512":"efb5355fb90c85834e4ca9fda61acb4d52c9b6d72cecb5a71182203dbc409f463b71ebc183da475021e4c73881ed89da1e794d16e2d5dc9eff95495f59c5d3b6","ssdeep":"768:DFHFYFZFNFO4F/LFYFgFGbyF5OS/vyqr2/MoOf/i/3gBknTOE/NkcKHuh9OO/juV:jZ2pVn","tlshash":"c1c20da10417444097835ce223cebf34fe0f92507142d0b5abfdab6baddbc6652693ad","first_seen":"2025-06-02T18:32:43.310456Z","last_seen":"2025-09-08T23:14:17.148601Z","times_seen":1698,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}