{"report_id":"e9248d47-6c6a-4efa-a637-3a37d15c3615","version":6,"status":"done","tags":[],"date":"2025-11-07T14:08:53Z","url":{"schema":"https","addr":"jupfn.com/","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jupfn.com/","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"title":"Jupiter | Airdrop","dom":{"size":266085,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1351)","md5":"b7544d90e4f7bd144ae7e6bb636feb7a","sha1":"5e52c57c4a56137ab231efa230074560ee56e76c","sha256":"b489f700236015b5dadbe649d7d0af288d6fdfedf77bd7d0107d3ad7f483022d","sha512":"d6de631bb9c82fa0178a00bd349b920084bc5019795f32ab014a8e6d2479f77b0dbda34b844e42ee0c3eaf029c3e42490e7cfdfa17b61e9fa4d4e81e45b7bb25","ssdeep":"3072:NlnNmTLZEwMCRQ4Px5BfOI7lOpRuQbxKagDOpK:K9Q455BfPs3uw7e","tlshash":"8e44d86d1a731554ba1bc11d1ffd17c5e220458bed8adc5d7ace2a804fc72acb892ec8","dom_hash":"domhashb59ab27056e78e519a4c3e37ad741fce","first_seen":"2025-11-07T14:07:54.218044Z","last_seen":"2025-11-08T08:17:40.278632Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"jupfn.com/","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-12T14:08:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"jupfn.com","ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-06","domain_rank":0,"first_seen":"2025-11-07T14:08:54.643116Z","last_seen":"2025-11-07T14:08:54.643116Z","alert_count":12,"request_count":12,"received_data":1655749,"sent_data":5267,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-02T22:12:57.589972Z","alert_count":0,"request_count":1,"received_data":13550,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-02T22:17:55.857863Z","alert_count":0,"request_count":2,"received_data":30626,"sent_data":1070,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-02T22:12:55.494707Z","alert_count":0,"request_count":6,"received_data":154026,"sent_data":3174,"comment":"","tags":null,"fingerprints":null},{"fqdn":"lofip.cfd","ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-07","domain_rank":0,"first_seen":"2025-11-07T14:08:54.651962Z","last_seen":"2025-11-07T14:08:54.651962Z","alert_count":0,"request_count":3,"received_data":1539808,"sent_data":1312,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-02T22:13:40.433865Z","alert_count":0,"request_count":1,"received_data":429244,"sent_data":430,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-04T19:58:28.473673Z","times_seen":738031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/script.js","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c39bf259e4daf3167ad3d74899e6d27c","sha1":"76bc73b79a071d619f763f89af274486afc61c01","sha256":"388611daa0c17c272dc0be89c030545bdfebad8eee4e985dbbe47c93060ad2bf","sha512":"f43dda6e53f3cccb9bfcb2238122c12b08670d2b68e685cbf19c9332c413dde69a1d4915e036ffa1902f22e2303aafa8b216213068c83ff5cc8f8163083e3f5a","ssdeep":"192:RE1ZB310XoPi01oPB1hPahvlSEdgkTLTAT2MjYjPC9ZBgYT1Th2Mjb:CL10Xoa01op1hyhr6jYbCDjb","tlshash":"21d11a517150303542bbab667bd31159f2bed053ac8bd0663b9d86831fb2d9c98e3ec8","size":6762,"data":"","first_seen":"2025-11-07T14:09:00.226323Z","last_seen":"2025-11-09T18:32:38.914806Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZFWBCWZEK1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db32a59a47eddba22044f959fb37a4f2","sha1":"d01114e6b9c5e8248c10e3b4f722656ced5e9a73","sha256":"e033f3decb3f45c0555e9a4713929b126eaec540bd4f88228e4b1dcd7199fdc4","sha512":"79f9e39f7bd0478b20848a08507a6d3d25dd3935048e6a9f2d47ad1445453486f6eabc790f1b8ef5c9bcd8498c87ea450e826f2a4cc1d8b13fa3bcd716048929","ssdeep":"6144:fJnxe4VpE+astnXRXy16OZd0CdpIQfYhvgJm7Tmn:xxegTaQXRXyBRYhg","tlshash":"7e941ace73c674265396e478503f018ba57b28a2f49cc89af189cce01e7469a4277f7d","size":428640,"data":"","first_seen":"2025-11-07T14:09:00.218642Z","last_seen":"2025-11-07T14:09:00.218642Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c218eb4772eb017cc6dfcf7d2269f7e2","sha1":"bbb8bb671401843cbae25bdd65bf96ebd200e7a9","sha256":"3fd7e619895fadfb66258382a16046345ee481b7525b462e2436ffc524b732ef","sha512":"4ad20cb418bd1d4077d0af05cdbd00ea1f05351ff7ab14e65d657d0d598748c8f9c6c0df565d11443c24a1b59ca830adbffd863d58dd3085b085aca271711dc3","ssdeep":"","tlshash":"5221b647624639ddc71195087afe495ccf095d482d934eecf1de5d964302a7b0090dfa","size":1357,"data":"","first_seen":"2025-11-04T15:43:37.734294Z","last_seen":"2025-11-08T08:17:40.308268Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-04T19:23:23.11409Z","times_seen":237049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-04T19:58:28.473673Z","times_seen":738031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-04T19:58:28.473673Z","times_seen":738031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-04T19:23:23.11409Z","times_seen":237049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-04T19:23:23.11409Z","times_seen":237049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-04T19:23:23.11409Z","times_seen":237049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-04T19:23:23.11409Z","times_seen":237049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-04T19:23:23.11409Z","times_seen":237049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/geHp.js","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6820d186cf27d8f501fe3004875c090","sha1":"5a6ba68ac325bff605c22a056db2a61a2b4d7a04","sha256":"32401e9b02882d66b9b0789ecbcf5fd36d59a0e7e5df68d1503a8a48a3d99c85","sha512":"2e3fcbc41968b01eb5ae1f4072696b78ae9143445f8e1b15119a0c1b9b307a1e2f05bb84679e0da7aeee93a9495be3eb48acc62bc55628bea205c9cd92b626b4","ssdeep":"24576:i/XGAg5gKQBfVHa4xrordSIAaW8PhDQn9GC6sza3TdfkDU/hShISt7PH+J9/yyjm:qfVH7+d9hQn9GC6sza3TdfkDwkISVP0Q","tlshash":"8865f990e3d0f77c724bcf726b3fa4d8d2290b4a79c44b5aa144fd166a9920bd6dc930","size":1535863,"data":"","first_seen":"2025-11-04T15:43:37.726328Z","last_seen":"2025-11-08T08:17:40.313561Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/GsyX.js?xxx=75c090","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b41783f7121dad40b2f6363258e80d8d","sha1":"0361f008635f980d3b93c321985a2e66d13c1485","sha256":"56c6a1c2f5eece7a5518686e4fda3a30c1c638b347e21934905dbb1a0855a8a2","sha512":"fdf779e0b793e21c06ba3521efb6696b3e8dda5e7f25b2c97557f5357b7cf88e27fd491ac6977d1d40c7682c25effe92a0c9845297b04d1ad23fd614c1a026df","ssdeep":"768:O3abSA73gULg+0jOwVJuKO+IdfOW5nL2pDcwyRgvUyM2vHCQKz7hqBwEwwmiNMi8:OTIuy3TM7Da4Rqx","tlshash":"9443c48223d0349165df4ff3f72bf0e5d52e1a4f3e64094be218bd916aaa148ead4d30","size":57434,"data":"","first_seen":"2025-11-04T15:43:37.716455Z","last_seen":"2025-11-08T08:17:40.302072Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0017c9029044c4c7efcd20ee99b6591","sha1":"b531b7bb56d4fc77c0329c82044fecdab6bb61cd","sha256":"cbb25bef407ad081ece32f32b4fd0fbe90cd5fbe080cb88e9be428ee5b960e3d","sha512":"397bc806d2ef3928a644bb81b8deaf89f881c891980a4d7361f8a1dea274e9a27f990f4461d559e2449abea65b4f619daa88819ef5581cfe2d837c62ad2eef9e","ssdeep":"","tlshash":"13e0d88a188355a01227185c5bcb9a1136a1113b399a955a39dc4000af727e779386fe","size":367,"data":"","first_seen":"2025-11-07T14:09:00.234028Z","last_seen":"2025-11-07T16:51:40.578408Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5157c7406e7b34c02fdeae5f334ebf8","sha1":"19138e7873d8103192ee60930dcfa460bd7cb02b","sha256":"423a4641cba573fdf4f12ea9105bef63788c7599832d26147eddb5082a3d97c5","sha512":"4208551b7f1cbccad4e6fa91e611d48df017409b976d5e42a282a634eabe1cc6db441217a7644739e0024336ae97d71d4bb916e644e509efcce365d421e1a5b0","ssdeep":"","tlshash":"56c02bcc311b0c7042ffab448b3fba01b012321494d06d31490a23048d30e03d764a50","size":153,"data":"","first_seen":"2025-11-07T14:09:00.234733Z","last_seen":"2025-11-07T14:09:00.234733Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-04T19:58:28.473673Z","times_seen":738031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-04T19:58:28.473673Z","times_seen":738031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-04T19:58:28.473673Z","times_seen":738031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-04T19:58:28.473673Z","times_seen":738031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b9002e348ab21aea2b4cc751767984e","sha1":"c11db973eecb00d2b072def43b9169a37b0cdd2f","sha256":"f10939ed6c08eb7cca44c2561da5647d84bf1ee3cad1c580639827f83039d329","sha512":"70603fa57cd6a8f98682f8f166e5e8ec2dd1a4f932cddfa3e404ea6f687d925f2b6d251b6cb67644c9b2a2576ca36844c48a4155b00bdada9b36179cd583b38a","ssdeep":"","tlshash":"d8f0552e0aad232147336528462b7228333611172c85a8293b5c91d43fec19f6979fce","size":552,"data":"","first_seen":"2025-11-07T14:09:00.235492Z","last_seen":"2025-11-09T18:32:38.917748Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"556a2f4cbb0c93d8a12c21e54e58fdd2","sha1":"f4368687bb682fdd9ae954cc2aa66d44c6d1f274","sha256":"c4cf875e132e206d957b89e6f3b456f7f494130b5e6fb1b357b72b1aec9c3d9f","sha512":"344ccf4012632057a72cce679668a2ad1deb7d52e18d2b54ad1892129f3bb40e4c154b0e18d00727f4eac9e4e0642f26787b10f8f4519e61db545b17510d0e9b","ssdeep":"","tlshash":"5fe0d8ce5842e8510f22042dbfab1a1a07a29167898c9451b4dd92907f357a72538d6b","size":382,"data":"","first_seen":"2025-11-04T15:43:37.736941Z","last_seen":"2025-11-08T08:17:40.30926Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-04T19:58:28.473673Z","times_seen":738031,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-04T19:23:23.11409Z","times_seen":237049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-04T19:23:23.11409Z","times_seen":237049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZFWBCWZEK1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:37:40 GMT","end":"Mon, 05 Jan 2026 08:37:39 GMT"},"fingerprint":{"sha1":"A0:B4:2E:82:A1:27:01:D4:2F:43:C6:5A:4C:76:BD:AA:46:E7:DF:A1","sha256":"EE:18:CE:69:D5:34:E0:87:E6:41:61:C2:8F:06:9E:82:E4:85:2F:5E:5E:4B:99:79:9B:C2:6B:E3:A6:EC:EA:A9"}}},"request":{"raw":"GET /gtag/js?id=G-ZFWBCWZEK1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\nexpires: Fri, 07 Nov 2025 14:08:31 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 142531\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428640,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"db32a59a47eddba22044f959fb37a4f2","sha1":"d01114e6b9c5e8248c10e3b4f722656ced5e9a73","sha256":"e033f3decb3f45c0555e9a4713929b126eaec540bd4f88228e4b1dcd7199fdc4","sha512":"79f9e39f7bd0478b20848a08507a6d3d25dd3935048e6a9f2d47ad1445453486f6eabc790f1b8ef5c9bcd8498c87ea450e826f2a4cc1d8b13fa3bcd716048929","ssdeep":"6144:fJnxe4VpE+astnXRXy16OZd0CdpIQfYhvgJm7Tmn:xxegTaQXRXyBRYhg","tlshash":"7e941ace73c674265396e478503f018ba57b28a2f49cc89af189cce01e7469a4277f7d","first_seen":"2025-11-07T14:09:00.218642Z","last_seen":"2025-11-07T14:09:00.218642Z","times_seen":1,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":197,"dns":0,"connect":16,"send":0,"wait":63,"receive":45,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/style.css","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Nov 2025 16:44:57 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"690b7f09-455a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NFXThNw6sy7ni%2FQpUFSXpCptuRG1CQAfkAawCFK8%2Ferj%2Ftvd1np2HVdCEwetl3hDlgsCDc1FUEtPpuS%2Bh9jlc9%2BQOF%2BHZf0%3D\"}]}\r\ncf-ray: 99ad6732386d5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17754,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"deef5ff282c3ca4e1344c8e673240388","sha1":"0df4fae43ea6109a1f9b3859e63e14863398d7f4","sha256":"9525d1dda753c1b6b7525475f5172e1402ff29f9d52dabaf3626e57005dcc442","sha512":"322a2a0ba7f358eeaf211dbd142d7cebef9f59c4c157db5753702466043ef59f3eff79fb50246f1e57289fb7e7f8213711c6a28afc4f5a9961a8aa16f7160eb8","ssdeep":"384:7QufLYckw1m/mlB6LLBxEPBME4GDYOCe61:7QekCm/2B6LLBxEPBME4GDYOCe61","tlshash":"c082f04a6aa31404b81ba5b92ffb5705622cd443d10fccbc7bcd725ccf4a2d899a2b4d","first_seen":"2025-10-24T16:47:19.619376Z","last_seen":"2026-07-27T00:55:51.978572Z","times_seen":67,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/images/jupiter-logo.webp","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /images/jupiter-logo.webp HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2732\r\nlast-modified: Wed, 05 Nov 2025 16:45:38 GMT\r\npriority: u=4,i=?0\r\netag: \"690b7f32-aac\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4g3we9q48hIQLw0a9HWSpsUa6RO0pJ%2Bvqdxnd8lI%2BpYDPHKldemiTnFuM5w3zI4Y2A5qMfjM0WkfrMzKio3UO7iCYvEGVfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99ad6732386f5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2732,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"166b8f20ee23f8ccbf1db5ea57cd3aa3","sha1":"602640a96318f1e919be0c5c4318c5341275bfe6","sha256":"17c3e8c91e365a800f297443626309fbaf95340312dc9ef2baa1a8e4e42d415c","sha512":"eb0d94e558399efd2a29b4e61475a8d21ef2621e08a38a0b44e6d018f151d31944cbf16aeab0fa28dfe44eef376fa22156a579fb1c8844bdc8d8083c512cdbfc","ssdeep":"","tlshash":"bd515ceb157681dbc68c7b35c37d9683c247908481da100cb8458094c36b3def8e762a","first_seen":"2025-08-21T00:16:09.986987Z","last_seen":"2026-07-27T00:55:51.966776Z","times_seen":114,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/images/main.png","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /images/main.png HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 536341\r\nlast-modified: Wed, 05 Nov 2025 16:45:43 GMT\r\npriority: u=4,i=?0\r\netag: \"690b7f37-82f15\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckpSMlSP1nrqi%2BCnSeN1f%2BH344mLMDK6fe8YwzypcDs0J9vEo0E0ySlc6JsyLDEyWCQ77g53reKOiowR14NxszBa2yQP15g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99ad673248705690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 525 x 558, 8-bit/color RGBA, non-interlaced","md5":"00c6b15cde98f3ab7b862bd33d96d9ea","sha1":"070369f0ef475e68b86dc6bde6c56a3ca6ec82ad","sha256":"17f3251a7f768b3d2a3385766ce6aa19588c30f5644dd03d443753ecb74fbb4a","sha512":"6a08c511eef565d64d4ac1f1c6b0e395085fa18e761da69f9025e93161419b29bb43d0aef138c9e6986c7b31e5f2297d61bb3fe5dc0ac52f111d1b020e952e78","ssdeep":"12288:M92iEHOPSf+HqGpPjszNx2uF9Pzdy7F56QUj5:M9OHHf+HqEoz1LdU5k5","tlshash":"42b423e5ea913dedd53800b62c1c0462dd3caf917b96d1016a23326f71fde28a1ed35a","first_seen":"2025-10-24T16:47:19.626228Z","last_seen":"2026-07-27T00:55:51.946423Z","times_seen":81,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"1D:8E:3A:85:91:AC:63:71:94:8B:0E:61:45:34:D9:86:AB:A6:E2:CE","sha256":"E6:93:4E:53:89:15:41:28:27:59:AA:84:50:96:96:1E:2A:98:7E:08:60:AE:68:62:AE:DD:86:AB:DB:0F:FE:2B"}}},"request":{"raw":"GET /css2?family=Manrope:wght@300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 07 Nov 2025 14:08:31 GMT\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12864,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"47cabbdecadc902ac84a6d9cee4e5644","sha1":"0cf23e67bb68a8701df2523b103c8614255d50c5","sha256":"6cb6c9324cab91ab024247e2e9d10ec371642dde873cf44af4d7eb455ea3a9a9","sha512":"457609607e66e5747a29792df54244a9b3591770466e4b3f7e03336d705ba78ac1d9fb0d7a4885be1c117a6ffc66e1ac0c4f34283850ef79a1b6a1cb75f0a5c1","ssdeep":"192:SJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJHYV3668hs:UmkwU+ME02EQJ","tlshash":"0842a9900027e804eb470cd677ce7e39ad4e61567451c5ba5bfe1cd8addbd222320b5e","first_seen":"2025-09-11T15:36:38.535296Z","last_seen":"2026-08-04T05:07:33.042535Z","times_seen":1471,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":106,"dns":1,"connect":15,"send":0,"wait":22,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-500-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lofip.cfd/","date":"2025-11-07T14:08:33.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-500-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lofip.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lofip.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 07 Nov 2025 14:08:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14304\r\ncf-ray: 99ad673ebf875ebd-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"37e0-ShYlIsEZ/zNZzN1TOeak6smzDSg\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220119-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 12047\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N3zyQd3FO5lEtQa%2BpzpR%2Bmf9IOTOHJZQHHJIg%2FZT52Q%2Ba33KuJyHVpukxKR%2FnTMEZ6PFM9zz4fQvu%2BfmBtYGYcTPZyYtaCXsXNb1q97XLTPl7gmkh1kYtvjwtJV291PM6zI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14304,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14304, version 1.0","md5":"aa952242481dddcafa4d2fcc03383ae1","sha1":"4a162522c119ff3359ccdd5339e6a4eac9b30d28","sha256":"19bf1984956517c35c2bd35b6cdedac12a21d6fcd3596c614ecdfb88b648909d","sha512":"b2c0d33bcf3442eeb971d73ae23e6e49722a6723ae131e82781df5d64a98c5c42b8963ee1db4932b44599796245574c47540df4f36dde4e4d2448c11f4d5d4a5","ssdeep":"384:jjGOfsqrCZXYdZJ5K40kfXxdjNkyI1OO6sz:jjGObOZodj5prm1J6sz","tlshash":"dd52d1001602bb0e597abdbcb462851703a56aa83c12d749d04a3d22f85fbff228e757","first_seen":"2025-09-17T11:17:44.867625Z","last_seen":"2026-08-04T17:08:45.218458Z","times_seen":948,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lofip.cfd/","date":"2025-11-07T14:08:33.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://lofip.cfd\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lofip.cfd/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 07 Nov 2025 14:08:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14200\r\ncf-ray: 99ad673ebf765ebd-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\nx-served-by: cache-fra-eddf8230124-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 37895\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LlE2rxYNuP1gk52lWed2VmCRzWjgi4rpf8cpRs3%2B%2FP2cO1ZsdImNlfEByxcczns3ZY6t04gBD%2Bfnx9ODaUXsIX9OgpczRXdh9L2%2B22YHV%2FN2bbMi40OiMnjx%2Bq0MaXefI%2FU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-04T17:08:45.160026Z","times_seen":2942,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":12,"receive":3,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-07T14:08:30.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 07 Nov 2025 14:08:30 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 12:07:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D2uynhH9SHhWNR02g6f6XYpi0Ww7IHLGlrC7AoVvWVSVXUIvXRbfGuaYmHKVmSsn4QaO2OeMgW%2BmaFgBmNUJunZ287KIbK4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99ad6730986c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10190,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (306)","md5":"f21d16e8cbaa79eb2acacd76b734dc50","sha1":"1a7c88f1f9f2f352e53e995460951fbbb158f676","sha256":"3190f34373a0e5154f62dc324d65b4657730ed50df3072dba6bedcc21b597c4e","sha512":"b66d0a00aa6355d426dc689f65893cd2d9eb51b5273b2f3e9222e53619d327ffc0362ce4276a576803b8ec188e3bd33af8c4097d184da81b7176f3a82864f7b4","ssdeep":"192:Bjp8Y4WkTxIRVdMkUG2B70cnPgNNu77I3iK7KvjJXOcqOW7Oj:BaCkTxILdMkUG2k3xEjJ6u","tlshash":"ad2296667488353b618343c9f726b32b71d69927e953c02471fc8398a7d2ed7c8762d8","first_seen":"2025-11-07T14:09:00.223627Z","last_seen":"2025-11-07T14:09:00.223627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":27,"dns":8,"connect":1,"send":0,"wait":82,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jupfn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:42:40 GMT\r\nexpires: Fri, 06 Nov 2026 09:42:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102351\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T19:57:50.145881Z","times_seen":36891,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":90,"dns":0,"connect":7,"send":0,"wait":9,"receive":5,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lofip.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 10:55:18 GMT","end":"Thu, 05 Feb 2026 11:54:07 GMT"},"fingerprint":{"sha1":"DC:56:7E:55:9D:AD:E1:0A:D0:B1:D1:A6:26:2B:04:9C:52:B4:70:FA","sha256":"86:AD:B1:3A:9B:AE:2E:36:B3:A4:36:69:71:C4:0A:50:91:9A:AD:9F:75:4B:67:35:88:61:76:06:FC:E8:C9:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lofip.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Nov 2025 15:16:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ZStDPH8CXni9T4FzUq5BajOVTbL79z0AOfhmBiZmtV9FYVq87Pqq4rW67%2BOiSIHUayorsvXELORO%2F1TMMHMb8WkpzwHsR1O2g%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 99ad67371eeb0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1919,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1351)","md5":"e66946e9b59c2c8cc970dbcaa2be4f6d","sha1":"0c3bdd9dca3020177956ed948ee2fcea11f030d5","sha256":"e66de0129348a61c3a35558f7e80ef71766395baa1dbbe32be994e0dd70b561a","sha512":"a5a66455cf59f328763d952ad860fa3d67fcb730bc847c1dab97a10ca99d6159eba464d5a75347852515cbe42090dee216912b501ba068076341e203f82b4a1b","ssdeep":"","tlshash":"3741d7cb6991a8dac712400d7ffa690c8f059946198a8dd8f0de89a15f22bb70460cbe","first_seen":"2025-11-04T15:43:37.709593Z","last_seen":"2025-11-08T08:17:40.29701Z","times_seen":9,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":76,"dns":57,"connect":1,"send":0,"wait":118,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/GsyX.js?xxx=75c090","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /GsyX.js?xxx=75c090 HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Nov 2025 17:00:01 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"690b8291-e05a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e42Ik7meYfNjzFtzMqJpWZmjBNhmjhmt93FjgcFjixOfCfqJ59%2FOGdBsFsA97O2yCWmTUv%2BP7%2F26M1cwbIG7jcgCqtmpqBY%3D\"}]}\r\ncf-ray: 99ad6732386c5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57434,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (57434), with no line terminators","md5":"b41783f7121dad40b2f6363258e80d8d","sha1":"0361f008635f980d3b93c321985a2e66d13c1485","sha256":"56c6a1c2f5eece7a5518686e4fda3a30c1c638b347e21934905dbb1a0855a8a2","sha512":"fdf779e0b793e21c06ba3521efb6696b3e8dda5e7f25b2c97557f5357b7cf88e27fd491ac6977d1d40c7682c25effe92a0c9845297b04d1ad23fd614c1a026df","ssdeep":"768:O3abSA73gULg+0jOwVJuKO+IdfOW5nL2pDcwyRgvUyM2vHCQKz7hqBwEwwmiNMi8:OTIuy3TM7Da4Rqx","tlshash":"9443c48223d0349165df4ff3f72bf0e5d52e1a4f3e64094be218bd916aaa148ead4d30","first_seen":"2025-11-04T15:43:37.716455Z","last_seen":"2025-11-08T08:17:40.302072Z","times_seen":7,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/script.js","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Nov 2025 16:55:15 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"690b8173-1a6a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqiVg1SWgupXKcSEFHRFge7rf678ghxT7rZYNglb6mqKy4e6uySZQ2tH%2FY379jJ3MZdK%2Fei9pQdQfdTGBpz4XIEn7K4ZaPo%3D\"}]}\r\ncf-ray: 99ad673248755690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6762,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"c39bf259e4daf3167ad3d74899e6d27c","sha1":"76bc73b79a071d619f763f89af274486afc61c01","sha256":"388611daa0c17c272dc0be89c030545bdfebad8eee4e985dbbe47c93060ad2bf","sha512":"f43dda6e53f3cccb9bfcb2238122c12b08670d2b68e685cbf19c9332c413dde69a1d4915e036ffa1902f22e2303aafa8b216213068c83ff5cc8f8163083e3f5a","ssdeep":"192:RE1ZB310XoPi01oPB1hPahvlSEdgkTLTAT2MjYjPC9ZBgYT1Th2Mjb:CL10Xoa01op1hyhr6jYbCDjb","tlshash":"21d11a517150303542bbab667bd31159f2bed053ac8bd0663b9d86831fb2d9c98e3ec8","first_seen":"2025-11-07T14:09:00.226323Z","last_seen":"2025-11-09T18:32:38.914806Z","times_seen":6,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jupfn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:42:40 GMT\r\nexpires: Fri, 06 Nov 2026 09:42:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102351\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T19:57:50.145881Z","times_seen":36891,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":102,"dns":1,"connect":20,"send":0,"wait":10,"receive":2,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jupfn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:42:40 GMT\r\nexpires: Fri, 06 Nov 2026 09:42:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102351\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T19:57:50.145881Z","times_seen":36891,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":90,"dns":0,"connect":7,"send":0,"wait":9,"receive":4,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/dist/assets/css/style.css","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /dist/assets/css/style.css HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Nov 2025 16:45:33 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"690b7f2d-98702\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AOPaSODBfHDEFZ1COASdzEYGJjJXC%2FJu9mepy50H6sBNjWZ1QoqassjMVMcHm4SbE5ny0dOjkcXGqqw5KyBrBFFofkxdPpc%3D\"}]}\r\ncf-ray: 99ad6732386e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":624386,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f992f90439bb693570671a58db93c0b3","sha1":"a796958ec41fef92c9645b4f3545ab1a1baa6fe8","sha256":"1cdf5ec759a8ac11cc8149ce25e77d1ccd32afd7bc97995f55c5269c09d10731","sha512":"fb1d80cbbee2fb397a36ad76bd40423ef096ceeb6ca7b98f541e20bec47f870b327a16ae3366b314af33226c461aedc57e68ecd688302f192633b374dbae5955","ssdeep":"12288:LaVHbWem0D2N2uFnKb64tlrGdvHfTPdyCIBmPEw+Z:+V7A5NoGv/RmVw+Z","tlshash":"9bd423607e520cb7cc750577e0fe2a1c3f0316cbcc7bdaa4b683904516ea7a91d6a52e","first_seen":"2025-11-07T14:09:00.227294Z","last_seen":"2026-06-10T13:55:40.969893Z","times_seen":19,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jupfn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:42:40 GMT\r\nexpires: Fri, 06 Nov 2026 09:42:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102351\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T19:57:50.145881Z","times_seen":36891,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":87,"dns":3,"connect":7,"send":0,"wait":10,"receive":4,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/images/banner.png","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /images/banner.png HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 386123\r\nlast-modified: Wed, 05 Nov 2025 16:45:42 GMT\r\npriority: u=4,i=?0\r\netag: \"690b7f36-5e44b\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhMvQdoZ7Ist0%2B3xecwRxNoHPZQBgi5HapNtVDgUHJKrtYilZlZRyUvzkj7sJu9yFrtXXYeFummtPykeDS%2FklpfXtLj3ceA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99ad673248715690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":386123,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1100 x 474, 8-bit/color RGBA, non-interlaced","md5":"0061ddd7271dd1906f85722f32c93717","sha1":"0ae8a28983994ecaa540dffb8d3b6101b00c8d85","sha256":"52227c48df165a1f88fafd30193cb5004b14c6567a07b062b21999848c2b67ed","sha512":"02558b67b9fad1d1191ae4bff0709ef4904818c7c532c797ef5f1a63a1d977f9f40201fd9af920f709a44085eeaa5a0f0c642a4760581bcbfd7fa597e9f4cac2","ssdeep":"6144:YGwB9oVTXdafKVrktZ4CFk3sV409p4lVSFGJUk8tX0YnfxS8uJiDlA9CEJI5:7wCpaftZ4+k8V40yJbiEe5kx9CKI5","tlshash":"078423ff827386cb76c5ed0e534b0b28065a5198a41bd6db8161938fc79f2828d245ff","first_seen":"2025-10-24T16:47:19.62823Z","last_seen":"2026-07-27T00:55:51.967681Z","times_seen":82,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/images/step1.svg","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /images/step1.svg HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Nov 2025 16:45:40 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"690b7f34-1e2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fi%2FOOmPTgKaVCxdlpM8J3BcZ9sIrBtDB7M1pmJTg%2FWU69MCP3EJNOe2y7Nnimbv%2BMmD5byFCK8Uz2LlW1axmGDgp4OoC778%3D\"}]}\r\ncf-ray: 99ad673248725690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":482,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e62d9bc2301c72348d5fe4333fd3a233","sha1":"c7e286967fd0becf06617caeaa83c3f50df638fd","sha256":"5696d6359d4058c65ffd960714d767dc636e1eebe987fa01f42c3dc71807b55e","sha512":"b1080591a14f069ff11baecbeae6869a663892f00b39b851e9be52ffdfa62e679a6810b916b4f22918581393eaf8677d1764c9c95382e885a6f675dce493ddfb","ssdeep":"","tlshash":"baf027dda3480c3cf52a9763ebf83674217111229386a245d8b62038e32859db57b5dc","first_seen":"2025-10-24T16:47:19.63524Z","last_seen":"2026-07-27T00:55:51.973623Z","times_seen":89,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/images/step2.svg","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /images/step2.svg HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Nov 2025 16:45:40 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"690b7f34-2e2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L2vTzyyYud0Dcwj4J0Rj167c7ziCXAaxHj8iZBsnSdaVVqZBZ5u3UV6o%2Bi255PmhFCzMN8eFMX%2Bmg8lxUy8L0Y9dpyllqow%3D\"}]}\r\ncf-ray: 99ad673248735690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b4869c8d2e94c7388dd22b1990b472d","sha1":"c4a8042aa1525089998afbe91390c596d02b6d0a","sha256":"f163875ee4bc85b824c44d65b5100068973d62e789e049c18047ea5ce2baa15b","sha512":"535d278641c4df6b42533b3ec15100f9525589d45dc6e74a223e7230238be8b8191b0ec8a0ccd3dea324a592942947831a405fe32b5392d40041271b140bd14a","ssdeep":"","tlshash":"30019c5827c94c7cbd51c720f3947129981a20e2806bc859cb757032920e83d5f3b8c5","first_seen":"2025-10-24T16:47:19.641483Z","last_seen":"2026-07-27T00:55:51.962117Z","times_seen":89,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jupfn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:42:40 GMT\r\nexpires: Fri, 06 Nov 2026 09:42:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102351\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T19:57:50.145881Z","times_seen":36891,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":88,"dns":3,"connect":10,"send":0,"wait":11,"receive":2,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/geHp.js","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lofip.cfd/","date":"2025-11-07T14:08:32.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lofip.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 10:55:18 GMT","end":"Thu, 05 Feb 2026 11:54:07 GMT"},"fingerprint":{"sha1":"DC:56:7E:55:9D:AD:E1:0A:D0:B1:D1:A6:26:2B:04:9C:52:B4:70:FA","sha256":"86:AD:B1:3A:9B:AE:2E:36:B3:A4:36:69:71:C4:0A:50:91:9A:AD:9F:75:4B:67:35:88:61:76:06:FC:E8:C9:6C"}}},"request":{"raw":"GET /geHp.js HTTP/1.1\r\nHost: lofip.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://lofip.cfd/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:32 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Tue, 04 Nov 2025 01:28:19 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"690956b3-176f77\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B7R2HHyaB2ybd4mKz7Esi2rSg3a3WQBagZ3B4v9989gc%2BNRwIV4iVjhmMzwOsX2Ei93G4OkEaWlhVJ0p2blaJksyNMQRQ5VpBw%3D%3D\"}]}\r\ncf-ray: 99ad67383bef32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1535863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dfbd50b2b8288a9ecbd437f04ca4669a","sha1":"2b36e028bceff13206fb6134486d4b5145872d11","sha256":"3eb327ede554d093ae5266d673945a92e5dd8de671fb75e07a7b9d3b5d25233a","sha512":"b00e856d806692e457d37b5727ae584e6f350ffc60f33a83174edd1443e6a248f9281f387f5501e2121b7224eba7e5a84d3058b761d9feb6dc3215fd4a2c6466","ssdeep":"24576:i/XGAg5gKQBfVHa4xrordSIAaW8PhDQn9GC6sd:qfVH7+d9hQn9GC6sd","tlshash":"4b25d7e1e2d0e73c324bcb616f3ea4c8d2394b4a79c44b9aa184fd5617dd20bd69c934","first_seen":"2025-11-04T15:43:37.71267Z","last_seen":"2025-11-08T08:17:40.303708Z","times_seen":9,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lofip.cfd/assets/a-B5JP7lE3.gif?a=1","fqdn":"lofip.cfd","domain":"lofip.cfd","tld":"cfd"},"ip":{"addr":"172.67.128.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lofip.cfd/","date":"2025-11-07T14:08:32.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lofip.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Nov 2025 10:55:18 GMT","end":"Thu, 05 Feb 2026 11:54:07 GMT"},"fingerprint":{"sha1":"DC:56:7E:55:9D:AD:E1:0A:D0:B1:D1:A6:26:2B:04:9C:52:B4:70:FA","sha256":"86:AD:B1:3A:9B:AE:2E:36:B3:A4:36:69:71:C4:0A:50:91:9A:AD:9F:75:4B:67:35:88:61:76:06:FC:E8:C9:6C"}}},"request":{"raw":"GET /assets/a-B5JP7lE3.gif?a=1 HTTP/1.1\r\nHost: lofip.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:32 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FuovXhDLI0FAMEU0UDND5QUUfa%2FPPlk5eBqxVZXBJZcOCpSmA3G2T4fWSd3%2B2eaPbb853lm9WTyiAQnti2xKuJ0Zcqw5bViSZw%3D%3D\"}]}\r\ncf-ray: 99ad673d6cd332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-08-04T17:46:29.254941Z","times_seen":30056,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/images/step3.svg","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /images/step3.svg HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 05 Nov 2025 16:45:39 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"690b7f33-7fd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xI8Pk6Bc0xGzOW1boILXm97qEmeWcYzFCpzi2aSzoZkBqgRJpKJSx9vY3DDH%2BcTZPQplbyFWQlg%2F%2B2uwxqLyGTr2QLTv%2F2o%3D\"}]}\r\ncf-ray: 99ad673248745690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2045,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa73a35f8bab8d78a684a12eb582f8d5","sha1":"bffdc1878514abe66ddcf80a6e20fc2a695f8307","sha256":"03db2b7b7842ac7d966d6ae4871dc229c182671f686473e48c6b95d8f399d733","sha512":"ab74d9d53060c9ed0989bef7aad7069dce4e29586016efd2ef7d4ddafd2f3e643b4dd0e935b52f5cb4db9d14467e08c3d7bf33633acf98d5243152cae75df889","ssdeep":"","tlshash":"8841f2cf06c469b0fa13977ed669a0a530671ce77676c020c6d51b20d99705c1dbb88f","first_seen":"2025-10-24T16:47:19.630962Z","last_seen":"2026-07-27T00:55:51.949378Z","times_seen":82,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:51 GMT","end":"Mon, 05 Jan 2026 08:38:50 GMT"},"fingerprint":{"sha1":"89:73:B0:EF:F1:BA:6A:DA:6C:2C:87:70:0D:17:11:82:30:E9:13:68","sha256":"96:8D:5D:62:3A:3A:D6:CD:06:9A:CE:52:F4:2D:91:F9:66:13:40:F4:5F:9B:88:3D:55:04:79:E3:14:96:51:FA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://jupfn.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Nov 2025 09:42:40 GMT\r\nexpires: Fri, 06 Nov 2026 09:42:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 102351\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24836,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-08-04T19:57:50.145881Z","times_seen":36891,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":213,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":210},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jupfn.com/images/jupiter-logo.webp","fqdn":"jupfn.com","domain":"jupfn.com","tld":"com"},"ip":{"addr":"104.21.18.227","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jupfn.com/","date":"2025-11-07T14:08:31.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jupfn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Nov 2025 16:02:58 GMT","end":"Wed, 04 Feb 2026 17:01:17 GMT"},"fingerprint":{"sha1":"09:EB:8C:A2:05:C7:9A:5D:41:06:CE:7B:B9:ED:13:03:95:BA:B6:8C","sha256":"A5:4E:7F:AE:3D:16:DB:AF:30:A8:40:83:7F:71:C0:41:27:1F:2E:22:F6:2E:0E:13:98:24:47:0C:32:E5:2F:1D"}}},"request":{"raw":"GET /images/jupiter-logo.webp HTTP/1.1\r\nHost: jupfn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jupfn.com/\r\nCookie: _ga_ZFWBCWZEK1=GS2.1.s1762524511$o1$g0$t1762524511$j60$l0$h0; _ga=GA1.1.704090547.1762524512\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 07 Nov 2025 14:08:31 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2732\r\nlast-modified: Wed, 05 Nov 2025 16:45:38 GMT\r\npriority: u=6,i=?0\r\netag: \"690b7f32-aac\"\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BexZ6kUxw7EpQG7noh7lzWWM8wzYf0h4BinLwXjb8fRbt%2BUEPWxWbHyehbslAFQ%2FMcpC8TGKSJGrDWZR7QEwidBQo2Wlf3U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 99ad6736488e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2732,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"166b8f20ee23f8ccbf1db5ea57cd3aa3","sha1":"602640a96318f1e919be0c5c4318c5341275bfe6","sha256":"17c3e8c91e365a800f297443626309fbaf95340312dc9ef2baa1a8e4e42d415c","sha512":"eb0d94e558399efd2a29b4e61475a8d21ef2621e08a38a0b44e6d018f151d31944cbf16aeab0fa28dfe44eef376fa22156a579fb1c8844bdc8d8083c512cdbfc","ssdeep":"","tlshash":"bd515ceb157681dbc68c7b35c37d9683c247908481da100cb8458094c36b3def8e762a","first_seen":"2025-08-21T00:16:09.986987Z","last_seen":"2026-07-27T00:55:51.966776Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-07","alert":"Sinkholed","trigger":"jupfn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}