{"report_id":"f37779ab-cac2-448c-ada1-9051f4a2af28","version":0,"status":"done","tags":[],"date":"2026-06-12T09:12:08Z","url":{"schema":"http","addr":"orange513.sjmwu.top","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"172.67.188.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"title":"2026 FIFA World Cup : Orange Money offre 10 000 F CFA","dom":{"size":27211,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3275)","md5":"8d60b91c7b6f9a3109c0cc3aa17d70cf","sha1":"ebe103fc5f129b953e88d87a89b076ee484ddd36","sha256":"b59c019f6b6c88df168bd34ebf0bc540b321cf22d29c68e62357afd30e4e3b7b","sha512":"08ec9b0418841d56a7825e722d640b008abc1c86035f9b9fec46b270a75d79e4555af22a4b02ef3b426424ce1a730fa3562fdea84085216989e3b9259c3deb81","ssdeep":"384:D+Nft3b2+SLeeGikw2k50rY0jyJxCxsL14UzaIgU58Zu4DNa2JVAj:Dst3HsjGlVk5000jyJM+L17zaG74Dm","tlshash":"38c29553a5e3112641b7a0e12ebb9b5536b55113f207c8b87eac41c4cf8dc96b2eb72c","dom_hash":"domhash13edd725f8b60c02ac806a39760360cf","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"orange513.sjmwu.top","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"172.67.188.73","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-17T09:12:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"tj.16gift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"599cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"tj.16gift.com","ip":{"addr":"104.21.10.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-30","domain_rank":6031043,"first_seen":"2024-08-21T12:09:18Z","last_seen":"2026-06-08T05:54:26.823797Z","alert_count":2,"request_count":2,"received_data":2978,"sent_data":965,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"orange513.sjmwu.top","ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-09","domain_rank":0,"first_seen":"2026-06-12T09:12:08.592658Z","last_seen":"2026-06-12T09:12:08.592658Z","alert_count":9,"request_count":3,"received_data":31695,"sent_data":3899,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"599cdn.com","ip":{"addr":"104.21.96.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-04","domain_rank":1852756,"first_seen":"2025-07-08T18:42:19.129448Z","last_seen":"2026-06-09T02:48:29.232908Z","alert_count":6,"request_count":6,"received_data":116072,"sent_data":3268,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-07T22:44:32.204356Z","alert_count":0,"request_count":1,"received_data":8488,"sent_data":520,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-06-07T23:49:17.429937Z","alert_count":0,"request_count":1,"received_data":96427,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tj.16gift.com/js/script.js","fqdn":"tj.16gift.com","domain":"16gift.com","tld":"com"},"ip":{"addr":"104.21.10.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad54ef311bf716c1df2941d454d8de96","sha1":"0db1fcc66060a969aa82fb9fae457b6e66d9933a","sha256":"965387ce9489d0167cf33444ab52d064bb3fab35e94b12082ff5eb00a34c070c","sha512":"bd12169fdf87e0ac39a4b3a87f947f2fafb9f524843e7c97fcffe91b756f2a49ca38778ac99d6f14a5f5989d0a33f502658c55b95c1fbd2a0a7025a605138abd","ssdeep":"","tlshash":"38215faba80276758c70e1a7a63f371235272669640894235000d6632824a8fc379ecd","size":1386,"data":"","first_seen":"2024-05-23T20:15:09Z","last_seen":"2026-06-19T22:48:39.185823Z","times_seen":1538,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-latest.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-22T02:47:03.633341Z","times_seen":53047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d80e1ae08e3cea02f9fddfba11480cb","sha1":"d6d828ab22f19733203d7e347e38d19313869578","sha256":"7cba6b2928d36dbaeac5716d7cdc989fa37c56323e85424f3852082637dd495c","sha512":"9665a32f963787f9466ca7f72cefb0037691a6ff8b114aaf93374354a2aa36f6d2d103e33ad326b128d6bba6e87928cf4997501265062ce3e526229f592b8dce","ssdeep":"","tlshash":"e2417c6f726219300bf7a56f576fa74425379243300cd86e396e87c08f9cc4582dae9a","size":1967,"data":"","first_seen":"2026-06-12T01:11:39.945593Z","last_seen":"2026-06-12T09:12:12.797063Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb9795bffc69258a2ba0290f46028787","sha1":"d63ecb53a83182fe4a4dea495e6834d0585d84b6","sha256":"e2b78c8c813218985cabfc3a4d4447cac0404248144af3780358c11737c2da0f","sha512":"a48cdd59c7ee0335cacc3a3bf3973bd91f9b262ea3c63a791c8151bc240cfd14653e3292829b7437a36938afc4b8c993299acf81768d58e7cdf559c84df83b4f","ssdeep":"","tlshash":"98416e09f7975a4a003b70150faf9151aeb5212b6547ce143a5c0cc08fadedad1adfb9","size":2084,"data":"","first_seen":"2026-06-12T01:11:39.947144Z","last_seen":"2026-06-12T09:12:12.797926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0488de7de5c44f01b657a46d153a4a17","sha1":"0a4fd37b79d1fae592d0e2db1c99678268074e79","sha256":"73673e770c62d64d0300f40035f5837b159ce0d5d7e005b748884ae3a704b3f7","sha512":"bfbc2e5c2f7e512febc421b1f95e5951e2242a0287957aa144373faa87b14f8d27953b3123b7c746e568ccc09ac6f46e7441b8cb83162a10fe3e9d19f4ed9909","ssdeep":"","tlshash":"1741375a64f2033d062634aa1e1b610c6a7ac2a7174fde0a3c0ca9c46fcc57b12f8fd4","size":2184,"data":"","first_seen":"2026-06-12T01:11:39.954816Z","last_seen":"2026-06-12T09:12:12.798816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"676f89f5030824cfab46c409d5d70257","sha1":"f751c5225b9b0df7d0df82ead10e7ecb031bd046","sha256":"6f5cf7ada9668a0333642902a100babc9c44d77f25ee0af46a688d0a1f6bc29b","sha512":"15b1a18e2e9d9001127ab4c198d65c5c57755eac43def2e6a5e41586a7417c6411404d19f4682fbbeeb45f04d0913f77d302856206b0dac15f84dc8047143424","ssdeep":"","tlshash":"27e086cbb1055c27c953b13a9e6fb10810b7969f6605685076049c9a9f3739d138ffcc","size":355,"data":"","first_seen":"2026-06-08T08:30:08.011784Z","last_seen":"2026-06-19T22:48:39.191105Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1191666636f4f3d954798e21d37e57b4","sha1":"e122269b787915eee84d05580f97fc69410aa929","sha256":"9b6dac35726c270f42553bcac2db7301ee3038638e432cbd0db5b5754ee51dd7","sha512":"8a0d5a097a11d4e2ceb904a94e75048695959b31fe9f1fa61968eff13df42acdde7af80eb8aee8f48214d2dbce6122b5c5f34bd5db128eb65500356c03f37d8c","ssdeep":"","tlshash":"8be02b0f378300024dde252f0f1f32847616612f1903c80b3d9e0c58cfb9a698084eab","size":315,"data":"","first_seen":"2026-06-08T08:30:08.012701Z","last_seen":"2026-06-19T22:48:39.19165Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d80e1ae08e3cea02f9fddfba11480cb","sha1":"d6d828ab22f19733203d7e347e38d19313869578","sha256":"7cba6b2928d36dbaeac5716d7cdc989fa37c56323e85424f3852082637dd495c","sha512":"9665a32f963787f9466ca7f72cefb0037691a6ff8b114aaf93374354a2aa36f6d2d103e33ad326b128d6bba6e87928cf4997501265062ce3e526229f592b8dce","ssdeep":"","tlshash":"e2417c6f726219300bf7a56f576fa74425379243300cd86e396e87c08f9cc4582dae9a","size":1967,"data":"","first_seen":"2026-06-12T01:11:39.945593Z","last_seen":"2026-06-12T09:12:12.797063Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb9795bffc69258a2ba0290f46028787","sha1":"d63ecb53a83182fe4a4dea495e6834d0585d84b6","sha256":"e2b78c8c813218985cabfc3a4d4447cac0404248144af3780358c11737c2da0f","sha512":"a48cdd59c7ee0335cacc3a3bf3973bd91f9b262ea3c63a791c8151bc240cfd14653e3292829b7437a36938afc4b8c993299acf81768d58e7cdf559c84df83b4f","ssdeep":"","tlshash":"98416e09f7975a4a003b70150faf9151aeb5212b6547ce143a5c0cc08fadedad1adfb9","size":2084,"data":"","first_seen":"2026-06-12T01:11:39.947144Z","last_seen":"2026-06-12T09:12:12.797926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0488de7de5c44f01b657a46d153a4a17","sha1":"0a4fd37b79d1fae592d0e2db1c99678268074e79","sha256":"73673e770c62d64d0300f40035f5837b159ce0d5d7e005b748884ae3a704b3f7","sha512":"bfbc2e5c2f7e512febc421b1f95e5951e2242a0287957aa144373faa87b14f8d27953b3123b7c746e568ccc09ac6f46e7441b8cb83162a10fe3e9d19f4ed9909","ssdeep":"","tlshash":"1741375a64f2033d062634aa1e1b610c6a7ac2a7174fde0a3c0ca9c46fcc57b12f8fd4","size":2184,"data":"","first_seen":"2026-06-12T01:11:39.954816Z","last_seen":"2026-06-12T09:12:12.798816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"676f89f5030824cfab46c409d5d70257","sha1":"f751c5225b9b0df7d0df82ead10e7ecb031bd046","sha256":"6f5cf7ada9668a0333642902a100babc9c44d77f25ee0af46a688d0a1f6bc29b","sha512":"15b1a18e2e9d9001127ab4c198d65c5c57755eac43def2e6a5e41586a7417c6411404d19f4682fbbeeb45f04d0913f77d302856206b0dac15f84dc8047143424","ssdeep":"","tlshash":"27e086cbb1055c27c953b13a9e6fb10810b7969f6605685076049c9a9f3739d138ffcc","size":355,"data":"","first_seen":"2026-06-08T08:30:08.011784Z","last_seen":"2026-06-19T22:48:39.191105Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1191666636f4f3d954798e21d37e57b4","sha1":"e122269b787915eee84d05580f97fc69410aa929","sha256":"9b6dac35726c270f42553bcac2db7301ee3038638e432cbd0db5b5754ee51dd7","sha512":"8a0d5a097a11d4e2ceb904a94e75048695959b31fe9f1fa61968eff13df42acdde7af80eb8aee8f48214d2dbce6122b5c5f34bd5db128eb65500356c03f37d8c","ssdeep":"","tlshash":"8be02b0f378300024dde252f0f1f32847616612f1903c80b3d9e0c58cfb9a698084eab","size":315,"data":"","first_seen":"2026-06-08T08:30:08.012701Z","last_seen":"2026-06-19T22:48:39.19165Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/23a18dbb-93f9-40b9-815b-71a337fa0788","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"5afeb7ba0c4bc8d8a8ae49b5d2d2f8be","sha1":"15862ca80076022871eefeca9087a6048815ca84","sha256":"79e732973971046fcf2920c1fdb4f7a319bb9331108ad64b7ed117d4b803958d","sha512":"b5a8d817dafad3c8e82ca44e4ffe34b2759294941da59f4ade6291fab89a9cbf077ab7ab5ad7cf1e172e0e5e06bf3af15de9fc8243c2be3dda22b9a9b40355d0","ssdeep":"192:toT0Nirnm+PtGadrWm9xK6gZdWyhr6Tw81cEBJcRQF8zGsGAh:ywAnmsGS92ZdWyhr6TPuScR8VFAh","tlshash":"acf1a69dfb61391b0a03227a985f910da139b52b170f4544a2bd96a43ebc82c337ff25","size":7514,"data":"","first_seen":"2026-06-08T08:30:08.01419Z","last_seen":"2026-06-19T22:48:39.18635Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/canvas-confetti@1.3.2/dist/confetti.browser.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19321373ea141f3fe019391b00e1b9cf","sha1":"bb9de280fc674aa40fe1646d0966ce111a7909aa","sha256":"a25e123d8fa3d9dbc39a54f47047df65ae99f1fc8a0d91b63e5782d008d64b8f","sha512":"c81c001bf748b74d53a26fd7328629cf43d5ede14c8ebb9efe4f56e774e528756a01157ae0cecc11101f841ec31f9815138a89ed3dd4022b60de8d239f82237a","ssdeep":"192:7oT0Nirnm+PtGadrWm9xK6gZdWyhr6Tw81cEBJcRYc:8wAnmsGS92ZdWyhr6TPuScRYc","tlshash":"d2e1a59df7513d1b1a13237aa85f910ea238752b160f4484a279d5a82dbc42c333ff79","size":7370,"data":"","first_seen":"2025-07-19T09:51:10.01292Z","last_seen":"2026-06-19T22:48:39.181454Z","times_seen":322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/single.php","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e640ea59e13a828e660036844e9d56e0","sha1":"a1d825d6f9a06d548c4a7c0b81cddd577320717a","sha256":"74048b23bcb94c3ac8cf8ba102c178e29da8281362fb8816e75fa240e7365475","sha512":"f4b9fce9a6726cdaea7f7c52a4df574ce73d02f3a13a8554c4c0e36f0312822497336060ab312455f980db7a5649f523e0d7e6061d251d1e80ecdc763675a4d0","ssdeep":"","tlshash":"73112068bc760048aaba983a5f3fb0243071243a9318c910b87df9405fb0ea59497ee8","size":1085,"data":"","first_seen":"2026-06-12T09:12:12.788054Z","last_seen":"2026-06-12T09:12:12.788054Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d80e1ae08e3cea02f9fddfba11480cb","sha1":"d6d828ab22f19733203d7e347e38d19313869578","sha256":"7cba6b2928d36dbaeac5716d7cdc989fa37c56323e85424f3852082637dd495c","sha512":"9665a32f963787f9466ca7f72cefb0037691a6ff8b114aaf93374354a2aa36f6d2d103e33ad326b128d6bba6e87928cf4997501265062ce3e526229f592b8dce","ssdeep":"","tlshash":"e2417c6f726219300bf7a56f576fa74425379243300cd86e396e87c08f9cc4582dae9a","size":1967,"data":"","first_seen":"2026-06-12T01:11:39.945593Z","last_seen":"2026-06-12T09:12:12.797063Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb9795bffc69258a2ba0290f46028787","sha1":"d63ecb53a83182fe4a4dea495e6834d0585d84b6","sha256":"e2b78c8c813218985cabfc3a4d4447cac0404248144af3780358c11737c2da0f","sha512":"a48cdd59c7ee0335cacc3a3bf3973bd91f9b262ea3c63a791c8151bc240cfd14653e3292829b7437a36938afc4b8c993299acf81768d58e7cdf559c84df83b4f","ssdeep":"","tlshash":"98416e09f7975a4a003b70150faf9151aeb5212b6547ce143a5c0cc08fadedad1adfb9","size":2084,"data":"","first_seen":"2026-06-12T01:11:39.947144Z","last_seen":"2026-06-12T09:12:12.797926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0488de7de5c44f01b657a46d153a4a17","sha1":"0a4fd37b79d1fae592d0e2db1c99678268074e79","sha256":"73673e770c62d64d0300f40035f5837b159ce0d5d7e005b748884ae3a704b3f7","sha512":"bfbc2e5c2f7e512febc421b1f95e5951e2242a0287957aa144373faa87b14f8d27953b3123b7c746e568ccc09ac6f46e7441b8cb83162a10fe3e9d19f4ed9909","ssdeep":"","tlshash":"1741375a64f2033d062634aa1e1b610c6a7ac2a7174fde0a3c0ca9c46fcc57b12f8fd4","size":2184,"data":"","first_seen":"2026-06-12T01:11:39.954816Z","last_seen":"2026-06-12T09:12:12.798816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"676f89f5030824cfab46c409d5d70257","sha1":"f751c5225b9b0df7d0df82ead10e7ecb031bd046","sha256":"6f5cf7ada9668a0333642902a100babc9c44d77f25ee0af46a688d0a1f6bc29b","sha512":"15b1a18e2e9d9001127ab4c198d65c5c57755eac43def2e6a5e41586a7417c6411404d19f4682fbbeeb45f04d0913f77d302856206b0dac15f84dc8047143424","ssdeep":"","tlshash":"27e086cbb1055c27c953b13a9e6fb10810b7969f6605685076049c9a9f3739d138ffcc","size":355,"data":"","first_seen":"2026-06-08T08:30:08.011784Z","last_seen":"2026-06-19T22:48:39.191105Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1191666636f4f3d954798e21d37e57b4","sha1":"e122269b787915eee84d05580f97fc69410aa929","sha256":"9b6dac35726c270f42553bcac2db7301ee3038638e432cbd0db5b5754ee51dd7","sha512":"8a0d5a097a11d4e2ceb904a94e75048695959b31fe9f1fa61968eff13df42acdde7af80eb8aee8f48214d2dbce6122b5c5f34bd5db128eb65500356c03f37d8c","ssdeep":"","tlshash":"8be02b0f378300024dde252f0f1f32847616612f1903c80b3d9e0c58cfb9a698084eab","size":315,"data":"","first_seen":"2026-06-08T08:30:08.012701Z","last_seen":"2026-06-19T22:48:39.19165Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d80e1ae08e3cea02f9fddfba11480cb","sha1":"d6d828ab22f19733203d7e347e38d19313869578","sha256":"7cba6b2928d36dbaeac5716d7cdc989fa37c56323e85424f3852082637dd495c","sha512":"9665a32f963787f9466ca7f72cefb0037691a6ff8b114aaf93374354a2aa36f6d2d103e33ad326b128d6bba6e87928cf4997501265062ce3e526229f592b8dce","ssdeep":"","tlshash":"e2417c6f726219300bf7a56f576fa74425379243300cd86e396e87c08f9cc4582dae9a","size":1967,"data":"","first_seen":"2026-06-12T01:11:39.945593Z","last_seen":"2026-06-12T09:12:12.797063Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb9795bffc69258a2ba0290f46028787","sha1":"d63ecb53a83182fe4a4dea495e6834d0585d84b6","sha256":"e2b78c8c813218985cabfc3a4d4447cac0404248144af3780358c11737c2da0f","sha512":"a48cdd59c7ee0335cacc3a3bf3973bd91f9b262ea3c63a791c8151bc240cfd14653e3292829b7437a36938afc4b8c993299acf81768d58e7cdf559c84df83b4f","ssdeep":"","tlshash":"98416e09f7975a4a003b70150faf9151aeb5212b6547ce143a5c0cc08fadedad1adfb9","size":2084,"data":"","first_seen":"2026-06-12T01:11:39.947144Z","last_seen":"2026-06-12T09:12:12.797926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0488de7de5c44f01b657a46d153a4a17","sha1":"0a4fd37b79d1fae592d0e2db1c99678268074e79","sha256":"73673e770c62d64d0300f40035f5837b159ce0d5d7e005b748884ae3a704b3f7","sha512":"bfbc2e5c2f7e512febc421b1f95e5951e2242a0287957aa144373faa87b14f8d27953b3123b7c746e568ccc09ac6f46e7441b8cb83162a10fe3e9d19f4ed9909","ssdeep":"","tlshash":"1741375a64f2033d062634aa1e1b610c6a7ac2a7174fde0a3c0ca9c46fcc57b12f8fd4","size":2184,"data":"","first_seen":"2026-06-12T01:11:39.954816Z","last_seen":"2026-06-12T09:12:12.798816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"676f89f5030824cfab46c409d5d70257","sha1":"f751c5225b9b0df7d0df82ead10e7ecb031bd046","sha256":"6f5cf7ada9668a0333642902a100babc9c44d77f25ee0af46a688d0a1f6bc29b","sha512":"15b1a18e2e9d9001127ab4c198d65c5c57755eac43def2e6a5e41586a7417c6411404d19f4682fbbeeb45f04d0913f77d302856206b0dac15f84dc8047143424","ssdeep":"","tlshash":"27e086cbb1055c27c953b13a9e6fb10810b7969f6605685076049c9a9f3739d138ffcc","size":355,"data":"","first_seen":"2026-06-08T08:30:08.011784Z","last_seen":"2026-06-19T22:48:39.191105Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1191666636f4f3d954798e21d37e57b4","sha1":"e122269b787915eee84d05580f97fc69410aa929","sha256":"9b6dac35726c270f42553bcac2db7301ee3038638e432cbd0db5b5754ee51dd7","sha512":"8a0d5a097a11d4e2ceb904a94e75048695959b31fe9f1fa61968eff13df42acdde7af80eb8aee8f48214d2dbce6122b5c5f34bd5db128eb65500356c03f37d8c","ssdeep":"","tlshash":"8be02b0f378300024dde252f0f1f32847616612f1903c80b3d9e0c58cfb9a698084eab","size":315,"data":"","first_seen":"2026-06-08T08:30:08.012701Z","last_seen":"2026-06-19T22:48:39.19165Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d80e1ae08e3cea02f9fddfba11480cb","sha1":"d6d828ab22f19733203d7e347e38d19313869578","sha256":"7cba6b2928d36dbaeac5716d7cdc989fa37c56323e85424f3852082637dd495c","sha512":"9665a32f963787f9466ca7f72cefb0037691a6ff8b114aaf93374354a2aa36f6d2d103e33ad326b128d6bba6e87928cf4997501265062ce3e526229f592b8dce","ssdeep":"","tlshash":"e2417c6f726219300bf7a56f576fa74425379243300cd86e396e87c08f9cc4582dae9a","size":1967,"data":"","first_seen":"2026-06-12T01:11:39.945593Z","last_seen":"2026-06-12T09:12:12.797063Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb9795bffc69258a2ba0290f46028787","sha1":"d63ecb53a83182fe4a4dea495e6834d0585d84b6","sha256":"e2b78c8c813218985cabfc3a4d4447cac0404248144af3780358c11737c2da0f","sha512":"a48cdd59c7ee0335cacc3a3bf3973bd91f9b262ea3c63a791c8151bc240cfd14653e3292829b7437a36938afc4b8c993299acf81768d58e7cdf559c84df83b4f","ssdeep":"","tlshash":"98416e09f7975a4a003b70150faf9151aeb5212b6547ce143a5c0cc08fadedad1adfb9","size":2084,"data":"","first_seen":"2026-06-12T01:11:39.947144Z","last_seen":"2026-06-12T09:12:12.797926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0488de7de5c44f01b657a46d153a4a17","sha1":"0a4fd37b79d1fae592d0e2db1c99678268074e79","sha256":"73673e770c62d64d0300f40035f5837b159ce0d5d7e005b748884ae3a704b3f7","sha512":"bfbc2e5c2f7e512febc421b1f95e5951e2242a0287957aa144373faa87b14f8d27953b3123b7c746e568ccc09ac6f46e7441b8cb83162a10fe3e9d19f4ed9909","ssdeep":"","tlshash":"1741375a64f2033d062634aa1e1b610c6a7ac2a7174fde0a3c0ca9c46fcc57b12f8fd4","size":2184,"data":"","first_seen":"2026-06-12T01:11:39.954816Z","last_seen":"2026-06-12T09:12:12.798816Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"676f89f5030824cfab46c409d5d70257","sha1":"f751c5225b9b0df7d0df82ead10e7ecb031bd046","sha256":"6f5cf7ada9668a0333642902a100babc9c44d77f25ee0af46a688d0a1f6bc29b","sha512":"15b1a18e2e9d9001127ab4c198d65c5c57755eac43def2e6a5e41586a7417c6411404d19f4682fbbeeb45f04d0913f77d302856206b0dac15f84dc8047143424","ssdeep":"","tlshash":"27e086cbb1055c27c953b13a9e6fb10810b7969f6605685076049c9a9f3739d138ffcc","size":355,"data":"","first_seen":"2026-06-08T08:30:08.011784Z","last_seen":"2026-06-19T22:48:39.191105Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1191666636f4f3d954798e21d37e57b4","sha1":"e122269b787915eee84d05580f97fc69410aa929","sha256":"9b6dac35726c270f42553bcac2db7301ee3038638e432cbd0db5b5754ee51dd7","sha512":"8a0d5a097a11d4e2ceb904a94e75048695959b31fe9f1fa61968eff13df42acdde7af80eb8aee8f48214d2dbce6122b5c5f34bd5db128eb65500356c03f37d8c","ssdeep":"","tlshash":"8be02b0f378300024dde252f0f1f32847616612f1903c80b3d9e0c58cfb9a698084eab","size":315,"data":"","first_seen":"2026-06-08T08:30:08.012701Z","last_seen":"2026-06-19T22:48:39.19165Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"8effcc37b77edb6362647e887dbf26b1","sha1":"91543a56ff83a113d2d03f32e239914db2c27e18","sha256":"5b76e2725e262ddb94d35a4a85aaa6054c280aef9ff01f458b3fe6d0edf65048","sha512":"1eb683b5601c13ce9c2f81867d7d09d9907cb1d89ac68cb661ca5e848de5965848b862602a2b56433bc2197a4175233268ad085e686929cdaedf57268d710cc5","ssdeep":"","tlshash":"e870000cc000000300000030f000c00000003c0cc000000000330000c0000300030cf0","size":18,"data":"","first_seen":"2025-06-27T18:49:00.111184Z","last_seen":"2026-06-19T22:48:39.19208Z","times_seen":360,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tj.16gift.com/api/event","fqdn":"tj.16gift.com","domain":"16gift.com","tld":"com"},"ip":{"addr":"104.21.10.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.765Z","timestamp":1781255505765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16gift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 01:39:16 GMT","end":"Tue, 01 Sep 2026 02:39:12 GMT"},"fingerprint":{"sha1":"96:3E:F4:56:92:14:F1:6D:CC:5D:1B:07:00:A6:47:80:5E:F6:7D:EB","sha256":"22:E0:90:AF:47:7F:3E:AF:AE:CE:3D:82:67:B1:E8:A8:5B:83:65:EB:EE:23:6B:9F:62:5B:77:9B:15:31:6F:DB"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: tj.16gift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nContent-Length: 76\r\nOrigin: https://orange513.sjmwu.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 202 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 09:11:46 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: \r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: GLhKcgaYkYOlpaQAbHdR\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFqHRt%2B3yAqjH26vSGTPdJm52GiIZ5ws5IN6IHaugHsLhttkoCciuswjJPyguCLGS9qPj5Csg2O3U4mkt5oq0L443l743iVPUS0DOKVTcNrYALywknu7ZONk88dhg93%2F\"}]}\r\ncontent-length: 2\r\ncf-ray: a0a7badf1ed25685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":773,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-22T02:29:47.263922Z","times_seen":428230,"resource_available":true,"data":null}},"time_used":645,"timings":{"blocked":0,"dns":0,"connect":8,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"tj.16gift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/single.php","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.062Z","timestamp":1781255505062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sjmwu.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 17:09:46 GMT","end":"Wed, 22 Jul 2026 18:08:18 GMT"},"fingerprint":{"sha1":"F7:44:EE:C2:5D:34:D3:DA:BB:53:C6:2A:45:0E:E2:D7:F5:A2:A2:FF","sha256":"AD:E7:95:3E:96:91:2F:1B:B3:03:58:73:F2:F0:51:AA:80:CA:C5:D9:7C:7C:8B:13:24:CD:A4:5D:5E:67:F8:CF"}}},"request":{"raw":"GET /single.php HTTP/1.1\r\nHost: orange513.sjmwu.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nCookie: pics=%5B%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx09.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx07.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx08.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx06.jpg%22%5D; comments=%5B%22Quelques%20minutes%20apr%5Cu00e8s%2C%20notif%20re%5Cu00e7ue%20%3A%2010%20000%20F%20CFA%20Orange%20Money%202026%20FIFA%20World%20Cup%20%5Cud83d%5Cude0a%22%2C%22J%27y%20croyais%20pas%5Cu2026%20mais%20les%2010%20000%20F%20CFA%202026%20FIFA%20World%20Cup%20sont%20bien%20sur%20mon%20Orange%20Money%20%5Cu2705%22%2C%22Partage%20fait%2C%20j%27ai%20bien%20re%5Cu00e7u%20mes%2010%20000%20F%20CFA%20Orange%20Money%20pour%20le%202026%20FIFA%20World%20Cup%20%5Cud83d%5Cudc9a%22%2C%22Re%5Cu00e7u%20%5Cud83d%5Cudc4d%20SMS%20Orange%2C%20compte%20cr%5Cu00e9dit%5Cu00e9%20direct%20pour%20le%202026%20FIFA%20World%20Cup%22%5D; names=%5B%22Mariama%20Ciss%5Cu00e9%22%2C%22Fatou%20Sow%22%2C%22Kadiatou%20Diarra%22%2C%22S%5Cu00e9kou%20Camara%22%2C%22Ibrahim%20Traor%5Cu00e9%22%2C%22Ousmane%20Ndiaye%22%2C%22Cheikh%20Fall%22%2C%22A%5Cu00efssata%20Kon%5Cu00e9%22%2C%22Aminata%20Tour%5Cu00e9%22%2C%22Moussa%20Ba%22%2C%22Amadou%20Diallo%22%5D; loclang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qj6YpLbbBDU69bdBuLEodnPVaav5tWJAaQupc0iZZdLRREwgybQXHLJP6GWM%2BJmYXQbfIEzl1mvrEcf%2FeBA%2FNwJ7oagRn%2BxAwhc5Z3mFnbmviayXHbnda0XrTxW2GlDAEyzmKZIH\"}]}\r\ncf-ray: a0a7badaa9e11ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1085,"size_decoded":1249,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e640ea59e13a828e660036844e9d56e0","sha1":"a1d825d6f9a06d548c4a7c0b81cddd577320717a","sha256":"74048b23bcb94c3ac8cf8ba102c178e29da8281362fb8816e75fa240e7365475","sha512":"f4b9fce9a6726cdaea7f7c52a4df574ce73d02f3a13a8554c4c0e36f0312822497336060ab312455f980db7a5649f523e0d7e6061d251d1e80ecdc763675a4d0","ssdeep":"","tlshash":"73112068bc760048aaba983a5f3fb0243071243a9318c910b87df9405fb0ea59497ee8","first_seen":"2026-06-12T09:12:12.788054Z","last_seen":"2026-06-12T09:12:12.788054Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"599cdn.com/cameroon/tx05.jpg","fqdn":"599cdn.com","domain":"599cdn.com","tld":"com"},"ip":{"addr":"104.21.96.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.068Z","timestamp":1781255505068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53116b70.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 18:40:39 GMT","end":"Fri, 24 Jul 2026 19:40:37 GMT"},"fingerprint":{"sha1":"FB:CB:84:81:31:E9:0B:3E:A3:AC:83:23:EA:D1:37:7E:34:C0:08:FA","sha256":"9C:30:16:A4:68:E5:CD:A9:4D:5F:D0:17:CC:48:FA:B6:61:08:A5:FD:98:9D:84:A9:B9:23:D1:EE:0E:4D:13:B5"}}},"request":{"raw":"GET /cameroon/tx05.jpg HTTP/1.1\r\nHost: 599cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1688\r\naccept-ranges: bytes\r\netag: \"84e16603cf128e539308fad4c0f5b722\"\r\nlast-modified: Tue, 19 Aug 2025 11:32:19 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLT%2Fyw8TcCTuZdJEI2Uaz0d9sOHl%2FsKI%2FGm%2F2947QtUBnq30%2Bt6CISIJpP%2B97nXIzao3sGw5NbY5HUVr3sOKLY1KJ0vKi4uyvB3yo%2FRWy2WEd25K%2FwsTuLkbr9%2FS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0a7badb2c951a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":2375,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 64x64, components 3","md5":"84e16603cf128e539308fad4c0f5b722","sha1":"dfa6fd1a54ba783fa31ee01750bcfd5d94debf82","sha256":"a557c8cdcbf5df924471abf6c862597b54b1d867991896f7ca8c18d51f930786","sha512":"7aaa75151cbc5ccfd185a8740221dc383c7ce986fdc570513cd0a351087f4590740288b1c112429916cd93ad714b331cd55c4162ad387386ca0a24d5650eefc3","ssdeep":"","tlshash":"f831d8124ed20e23c8a3507314ef74eea9753d33a6c2a88ef9c40f1ce86c09c09e5b91","first_seen":"2026-06-02T12:54:42.078467Z","last_seen":"2026-06-19T22:48:39.173137Z","times_seen":6,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"599cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"599cdn.com/cameroon/tx06.jpg","fqdn":"599cdn.com","domain":"599cdn.com","tld":"com"},"ip":{"addr":"104.21.96.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.070Z","timestamp":1781255505070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53116b70.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 18:40:39 GMT","end":"Fri, 24 Jul 2026 19:40:37 GMT"},"fingerprint":{"sha1":"FB:CB:84:81:31:E9:0B:3E:A3:AC:83:23:EA:D1:37:7E:34:C0:08:FA","sha256":"9C:30:16:A4:68:E5:CD:A9:4D:5F:D0:17:CC:48:FA:B6:61:08:A5:FD:98:9D:84:A9:B9:23:D1:EE:0E:4D:13:B5"}}},"request":{"raw":"GET /cameroon/tx06.jpg HTTP/1.1\r\nHost: 599cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1924\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ObJiTZqjowFTrlQxXIhGPQWqZ7EHSoq1BLSeSfORPzWoH6eZ43haEnIzlViCkAAvccOch32heKQX77YBFF%2B67T8hMVJFAUABCt8yxcxENQCWdnLvdTSmhhagpiLm\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"fb0b8cacdaa3c99784302f404c81c0f4\"\r\nlast-modified: Tue, 19 Aug 2025 11:32:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0a7badb1c7d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1924,"size_decoded":2618,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 64x64, components 3","md5":"fb0b8cacdaa3c99784302f404c81c0f4","sha1":"3bf8aef5c9a213521b2adfb8df4c96057bf56c11","sha256":"4951a0b52d7a09708e18d7045340beb8061c16add710811ceb114b2b5a0454db","sha512":"55f23299e6aeb5d99746a586303f37b728a27d4bd7f9071116e74bb13af685e10d52e416852c5c99198b196fd723d046c01094c62924c150686183448181ad97","ssdeep":"","tlshash":"31411b8a67fa8853e04150b325b474e3a720fa43afd397d1226d4999b9583c11ac0f70","first_seen":"2026-06-02T12:54:42.079518Z","last_seen":"2026-06-19T22:48:39.173873Z","times_seen":6,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"599cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"599cdn.com/cameroon/tx07.jpg","fqdn":"599cdn.com","domain":"599cdn.com","tld":"com"},"ip":{"addr":"104.21.96.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.071Z","timestamp":1781255505071,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53116b70.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 18:40:39 GMT","end":"Fri, 24 Jul 2026 19:40:37 GMT"},"fingerprint":{"sha1":"FB:CB:84:81:31:E9:0B:3E:A3:AC:83:23:EA:D1:37:7E:34:C0:08:FA","sha256":"9C:30:16:A4:68:E5:CD:A9:4D:5F:D0:17:CC:48:FA:B6:61:08:A5:FD:98:9D:84:A9:B9:23:D1:EE:0E:4D:13:B5"}}},"request":{"raw":"GET /cameroon/tx07.jpg HTTP/1.1\r\nHost: 599cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1458\r\naccept-ranges: bytes\r\netag: \"624e0b111e67b7373b15aa7809e19534\"\r\nlast-modified: Tue, 19 Aug 2025 11:32:20 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2QmarqtVXv4uREveHJiOd9HNWqxa673AImVfUbO8jHFaaLP9hO41Hco4HAyiHotS%2Bb2PNPXbyajwRmOQO3v9sfOxV4QwKY2mkPpVKoOQyiIsigcoo2FwT8gUxwW5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0a7badb1c791a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1458,"size_decoded":2129,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 64x64, components 3","md5":"624e0b111e67b7373b15aa7809e19534","sha1":"cb34e44c439e8802d3a1e9880593864abc042b3b","sha256":"bb7c361a80b87766db753011da20884074e4ea5d13a5c2b10a0203d9b423c569","sha512":"efae734b8f4bf07c55ad5399e826cd4075458aaf067997c737a7300e28f96ffb072ce673a269858cc9a6d3f281c881c5478825f1cabd53b35debbed1a1ca2f18","ssdeep":"","tlshash":"4631c636e3890853ec63306309e653d22872b70bccca458826d41f24b9cd1e689983d1","first_seen":"2026-06-02T12:54:42.080346Z","last_seen":"2026-06-19T22:48:39.174553Z","times_seen":6,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"599cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"599cdn.com/cameroon/tx09.jpg","fqdn":"599cdn.com","domain":"599cdn.com","tld":"com"},"ip":{"addr":"104.21.96.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.074Z","timestamp":1781255505074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53116b70.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 18:40:39 GMT","end":"Fri, 24 Jul 2026 19:40:37 GMT"},"fingerprint":{"sha1":"FB:CB:84:81:31:E9:0B:3E:A3:AC:83:23:EA:D1:37:7E:34:C0:08:FA","sha256":"9C:30:16:A4:68:E5:CD:A9:4D:5F:D0:17:CC:48:FA:B6:61:08:A5:FD:98:9D:84:A9:B9:23:D1:EE:0E:4D:13:B5"}}},"request":{"raw":"GET /cameroon/tx09.jpg HTTP/1.1\r\nHost: 599cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1578\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DoAHMChLpJf6w70YQHJi7llpUU4cDtm1i5alCywQx0UnSbx4XrNJiGyB427ZRw4%2BJofNMhM5w7kGcV%2BMBKO%2FvWOcNSiYsGSAiRfuqmJ26YLQOOC5pShOx9ui1VeR\"}]}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\netag: \"2465ea8a1a4ab915cde8a4739a05fe02\"\r\nlast-modified: Tue, 19 Aug 2025 11:32:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0a7badb1c731a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1578,"size_decoded":2276,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 64x64, components 3","md5":"2465ea8a1a4ab915cde8a4739a05fe02","sha1":"7d6179d6e7d9f0ec8af04e5fd9ae51f13bbdcb91","sha256":"6cf82b95bc461b69bca7da60cf4306b84b96f0f8f8ce1b907da5e295605ff11e","sha512":"69416606ad47f3861a030f863d67ed5d57ce6d66281819af39de017f52fdbbbda61981c523d3a25be7dd73d4e90e165c45f77d1f2f2bfda4a5e0498e7d115ea5","ssdeep":"","tlshash":"9a318654d7d91803ead64030b175b528ba68be86a8d3824a669d6e784f5c14007b8578","first_seen":"2026-06-02T12:54:42.073584Z","last_seen":"2026-06-12T09:12:12.79127Z","times_seen":5,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":58,"dns":2,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"599cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tj.16gift.com/js/script.js","fqdn":"tj.16gift.com","domain":"16gift.com","tld":"com"},"ip":{"addr":"104.21.10.63","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.699Z","timestamp":1781255505699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16gift.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Jun 2026 01:39:16 GMT","end":"Tue, 01 Sep 2026 02:39:12 GMT"},"fingerprint":{"sha1":"96:3E:F4:56:92:14:F1:6D:CC:5D:1B:07:00:A6:47:80:5E:F6:7D:EB","sha256":"22:E0:90:AF:47:7F:3E:AF:AE:CE:3D:82:67:B1:E8:A8:5B:83:65:EB:EE:23:6B:9F:62:5B:77:9B:15:31:6F:DB"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: tj.16gift.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: application/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nage: 11051\r\nlast-modified: Fri, 12 Jun 2026 06:07:34 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GbaTI2gf5lsE0HbQqhjKYt1JkTzYWnJJzHJ9Tn6yYTxduJhiXN5WMYXGyeB7%2BK8DMS2PCZhAna2Zt3bY0iTkHi7idMhB3HgEu79tsAE4SlqwE9iKa3Obhxm5zJT7fbc\"}]}\r\ncf-ray: a0a7badecdcf56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1386,"size_decoded":1592,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1386), with no line terminators","md5":"ad54ef311bf716c1df2941d454d8de96","sha1":"0db1fcc66060a969aa82fb9fae457b6e66d9933a","sha256":"965387ce9489d0167cf33444ab52d064bb3fab35e94b12082ff5eb00a34c070c","sha512":"bd12169fdf87e0ac39a4b3a87f947f2fafb9f524843e7c97fcffe91b756f2a49ca38778ac99d6f14a5f5989d0a33f502658c55b95c1fbd2a0a7025a605138abd","ssdeep":"","tlshash":"38215faba80276758c70e1a7a63f371235272669640894235000d6632824a8fc379ecd","first_seen":"2024-05-23T20:15:09Z","last_seen":"2026-06-19T22:48:39.185823Z","times_seen":1538,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"tj.16gift.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-12T09:11:44.377Z","timestamp":1781255504377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sjmwu.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 17:09:46 GMT","end":"Wed, 22 Jul 2026 18:08:18 GMT"},"fingerprint":{"sha1":"F7:44:EE:C2:5D:34:D3:DA:BB:53:C6:2A:45:0E:E2:D7:F5:A2:A2:FF","sha256":"AD:E7:95:3E:96:91:2F:1B:B3:03:58:73:F2:F0:51:AA:80:CA:C5:D9:7C:7C:8B:13:24:CD:A4:5D:5E:67:F8:CF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: orange513.sjmwu.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 09:11:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nset-cookie: pics=%5B%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx09.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx07.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx08.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx06.jpg%22%5D; expires=Fri, 12-Jun-2026 10:11:44 GMT; Max-Age=3600\ncomments=%5B%22Quelques%20minutes%20apr%5Cu00e8s%2C%20notif%20re%5Cu00e7ue%20%3A%2010%20000%20F%20CFA%20Orange%20Money%202026%20FIFA%20World%20Cup%20%5Cud83d%5Cude0a%22%2C%22J%27y%20croyais%20pas%5Cu2026%20mais%20les%2010%20000%20F%20CFA%202026%20FIFA%20World%20Cup%20sont%20bien%20sur%20mon%20Orange%20Money%20%5Cu2705%22%2C%22Partage%20fait%2C%20j%27ai%20bien%20re%5Cu00e7u%20mes%2010%20000%20F%20CFA%20Orange%20Money%20pour%20le%202026%20FIFA%20World%20Cup%20%5Cud83d%5Cudc9a%22%2C%22Re%5Cu00e7u%20%5Cud83d%5Cudc4d%20SMS%20Orange%2C%20compte%20cr%5Cu00e9dit%5Cu00e9%20direct%20pour%20le%202026%20FIFA%20World%20Cup%22%5D; expires=Fri, 12-Jun-2026 10:11:44 GMT; Max-Age=3600\nnames=%5B%22Mariama%20Ciss%5Cu00e9%22%2C%22Fatou%20Sow%22%2C%22Kadiatou%20Diarra%22%2C%22S%5Cu00e9kou%20Camara%22%2C%22Ibrahim%20Traor%5Cu00e9%22%2C%22Ousmane%20Ndiaye%22%2C%22Cheikh%20Fall%22%2C%22A%5Cu00efssata%20Kon%5Cu00e9%22%2C%22Aminata%20Tour%5Cu00e9%22%2C%22Moussa%20Ba%22%2C%22Amadou%20Diallo%22%5D; expires=Fri, 12-Jun-2026 10:11:44 GMT; Max-Age=3600\nloclang=en; expires=Mon, 15-Jun-2026 09:11:44 GMT; Max-Age=259200; path=/\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4cywLTrTjjs%2Fw9uabSdw2pWsQ9W9P82jQfuyUewAxEn7W2viNX3anVWVEmqOEn%2FrHi8cxIqL%2B2F8sssx8U3%2BcDaiv0Lc1Dnnh%2BquAxZFLiu%2FJrAmYq8XbKcw49B32IkbaEx4hhDX\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a0a7bad6a9af1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":27158,"size_decoded":9280,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3275)","md5":"890b01030552e579789e35704e12efaf","sha1":"cc930eb9f38b4c944e22d93ebbd53896921d1e7f","sha256":"cf5c4c3ba34b371a90c40c9d31f6cd0b6331a40d5a8bf65c3df6bdc272489fab","sha512":"9cd7424b80c1cc5b01bda4737c64649257004864be369b8fda48b8dd5dd59327407772d23218d1a5be449da7e5571f22ae07679f4bcc9ac141b7e06b48d8f047","ssdeep":"384:/k2It3b2+SLeeGikw2k50rp0jyJnxshI3UIaIgU58Zu4DNa2JV/F:/Et3HsjGlVk50F0jyJn+hIEIaG74DN","tlshash":"b0c2a453a5e3142641b7a0f12ebb9b4536b54153f207c8b87eac41c4cf8dc96b2eb728","first_seen":"2026-06-12T01:11:39.939458Z","last_seen":"2026-06-12T09:12:12.792425Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":32,"connect":15,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/canvas-confetti@1.3.2/dist/confetti.browser.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.054Z","timestamp":1781255505054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/canvas-confetti@1.3.2/dist/confetti.browser.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3156\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.3.2\r\nx-jsd-version-type: version\r\netag: W/\"1cca-u53igPxnSqQP4WRtCWbOERp5Cao\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230161-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2137580\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1gDhRDZ5D0TF341c54Kh%2FSt%2B5%2Fg2yOngH%2Bdnius0iN7cHNlgDb5K4nbpWWab4oFSsKticjzkOxdUi7F0WsDTywv%2FMQQWdTs6qpso05mzsTem5s2Mr7dpAX5wV3110Mf6YQ%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a0a7badabde95690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7370,"size_decoded":4274,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7022)","md5":"19321373ea141f3fe019391b00e1b9cf","sha1":"bb9de280fc674aa40fe1646d0966ce111a7909aa","sha256":"a25e123d8fa3d9dbc39a54f47047df65ae99f1fc8a0d91b63e5782d008d64b8f","sha512":"c81c001bf748b74d53a26fd7328629cf43d5ede14c8ebb9efe4f56e774e528756a01157ae0cecc11101f841ec31f9815138a89ed3dd4022b60de8d239f82237a","ssdeep":"192:7oT0Nirnm+PtGadrWm9xK6gZdWyhr6Tw81cEBJcRYc:8wAnmsGS92ZdWyhr6TPuScRYc","tlshash":"d2e1a59df7513d1b1a13237aa85f910ea238752b160f4484a279d5a82dbc42c333ff79","first_seen":"2025-07-19T09:51:10.01292Z","last_seen":"2026-06-19T22:48:39.181454Z","times_seen":322,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":8,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-latest.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.059Z","timestamp":1781255505059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-latest.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1762a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\nage: 1275063\r\nx-served-by: cache-lga21983-LGA, cache-bma-essb1270022-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 43985, 23530\r\nx-timer: S1781255505.100675,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95786,"size_decoded":33843,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-06-22T02:47:03.633341Z","times_seen":53047,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":10,"receive":3,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"599cdn.com/2026/565656.png","fqdn":"599cdn.com","domain":"599cdn.com","tld":"com"},"ip":{"addr":"104.21.96.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.067Z","timestamp":1781255505067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53116b70.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 18:40:39 GMT","end":"Fri, 24 Jul 2026 19:40:37 GMT"},"fingerprint":{"sha1":"FB:CB:84:81:31:E9:0B:3E:A3:AC:83:23:EA:D1:37:7E:34:C0:08:FA","sha256":"9C:30:16:A4:68:E5:CD:A9:4D:5F:D0:17:CC:48:FA:B6:61:08:A5:FD:98:9D:84:A9:B9:23:D1:EE:0E:4D:13:B5"}}},"request":{"raw":"GET /2026/565656.png HTTP/1.1\r\nHost: 599cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 103451\r\naccept-ranges: bytes\r\netag: \"f784e1853b3d2e8618153a7001cb0bf4\"\r\nlast-modified: Wed, 03 Jun 2026 16:31:23 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qd%2BjfWNbjF0Mo6YozHihpn%2F7SLNrs4%2FBZgGe3aoW%2BXG88YKPjlNtbU%2BLwkxj%2BaSrfGX7enDlQrLZwq13AxZnDWq%2BnyU7fZRZd7WCIwQNkRLDeKUGeQ9BK%2FQ0gLKD\"}]}\r\ncf-ray: a0a7badaebd51a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103451,"size_decoded":104137,"mime_type":"image/png","magic":"PNG image data, 613 x 358, 8-bit colormap, non-interlaced","md5":"f784e1853b3d2e8618153a7001cb0bf4","sha1":"b655edc19fdb52bc73b890e945859516fc3ab817","sha256":"a7e6adda6c55e870a996bc0b95486cdb2d1ac11306c2e6f8b6eddbb76b8e911d","sha512":"e2691ae0992086e6828010451004581c079c2b7fb168366a55727865021f94da3e1300a1f1e652c5bc6d1bd5f3e2a35f72d09177f79f41e89cdd1abb1c24fdac","ssdeep":"1536:7+2v74QIMPNbPQkApOS3C74XE885BHAAxKE+Q9uTvHQ3BVYgMrgp3VNA9DHQZJxz:Kq4QpPWn3tXoWAIydaHro2QLa50","tlshash":"c1a312e80b1a021cec9e7df6e147c9b2c4b49d0557b114576a2d3e4e589eee9ec103e8","first_seen":"2026-06-12T01:11:39.941502Z","last_seen":"2026-06-12T09:12:12.794552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":5,"dns":12,"connect":11,"send":0,"wait":208,"receive":3,"ssl":8},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"599cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"599cdn.com/cameroon/tx08.jpg","fqdn":"599cdn.com","domain":"599cdn.com","tld":"com"},"ip":{"addr":"104.21.96.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.072Z","timestamp":1781255505072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"53116b70.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 18:40:39 GMT","end":"Fri, 24 Jul 2026 19:40:37 GMT"},"fingerprint":{"sha1":"FB:CB:84:81:31:E9:0B:3E:A3:AC:83:23:EA:D1:37:7E:34:C0:08:FA","sha256":"9C:30:16:A4:68:E5:CD:A9:4D:5F:D0:17:CC:48:FA:B6:61:08:A5:FD:98:9D:84:A9:B9:23:D1:EE:0E:4D:13:B5"}}},"request":{"raw":"GET /cameroon/tx08.jpg HTTP/1.1\r\nHost: 599cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1862\r\naccept-ranges: bytes\r\netag: \"8d8ad2a5b502ee384908fe11fdcb6278\"\r\nlast-modified: Tue, 19 Aug 2025 11:32:21 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rKvG7Lhvo7W0pxLHnquA7T9CCRXTe4cuajbfaROCW71cAf1IiE5vQHCo0IgNjvmonVbaOkkUVW0H3zaOn5a89AvqoxZsf8OLkd83sl1nG%2B8mY1Di9%2F8CRlqBOCt%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a0a7badb1c781a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1862,"size_decoded":2537,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 64x64, components 3","md5":"8d8ad2a5b502ee384908fe11fdcb6278","sha1":"c0cad5455a22ab7658da708809a1f99892e735fb","sha256":"278a5e06d6837641a66ae53d869c1f763408bb5151e56e5792e46266db5778fe","sha512":"a5fb51d00519daca5648cf95a5c06e1afc1d5860205975593c9fbc144cdd7c6848cdbd93687b2ddcd1ed9e5f5cece107ee5d4f37f23d98c70b2b85b61a02f23e","ssdeep":"","tlshash":"c431f7ae2b37a823fc8112711af335795189bd6fe2c3034b20480e81a5441c79fa06b4","first_seen":"2026-06-02T12:54:42.072608Z","last_seen":"2026-06-12T09:12:12.795537Z","times_seen":5,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":59,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"599cdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"orange513.sjmwu.top/favicon.ico","fqdn":"orange513.sjmwu.top","domain":"sjmwu.top","tld":"top"},"ip":{"addr":"104.21.32.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://orange513.sjmwu.top/","date":"2026-06-12T09:11:45.418Z","timestamp":1781255505418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sjmwu.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 17:09:46 GMT","end":"Wed, 22 Jul 2026 18:08:18 GMT"},"fingerprint":{"sha1":"F7:44:EE:C2:5D:34:D3:DA:BB:53:C6:2A:45:0E:E2:D7:F5:A2:A2:FF","sha256":"AD:E7:95:3E:96:91:2F:1B:B3:03:58:73:F2:F0:51:AA:80:CA:C5:D9:7C:7C:8B:13:24:CD:A4:5D:5E:67:F8:CF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: orange513.sjmwu.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://orange513.sjmwu.top/\r\nCookie: pics=%5B%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx09.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx07.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx08.jpg%22%2C%22https%3A%5C%2F%5C%2F599cdn.com%5C%2Fcameroon%5C%2Ftx06.jpg%22%5D; comments=%5B%22Quelques%20minutes%20apr%5Cu00e8s%2C%20notif%20re%5Cu00e7ue%20%3A%2010%20000%20F%20CFA%20Orange%20Money%202026%20FIFA%20World%20Cup%20%5Cud83d%5Cude0a%22%2C%22J%27y%20croyais%20pas%5Cu2026%20mais%20les%2010%20000%20F%20CFA%202026%20FIFA%20World%20Cup%20sont%20bien%20sur%20mon%20Orange%20Money%20%5Cu2705%22%2C%22Partage%20fait%2C%20j%27ai%20bien%20re%5Cu00e7u%20mes%2010%20000%20F%20CFA%20Orange%20Money%20pour%20le%202026%20FIFA%20World%20Cup%20%5Cud83d%5Cudc9a%22%2C%22Re%5Cu00e7u%20%5Cud83d%5Cudc4d%20SMS%20Orange%2C%20compte%20cr%5Cu00e9dit%5Cu00e9%20direct%20pour%20le%202026%20FIFA%20World%20Cup%22%5D; names=%5B%22Mariama%20Ciss%5Cu00e9%22%2C%22Fatou%20Sow%22%2C%22Kadiatou%20Diarra%22%2C%22S%5Cu00e9kou%20Camara%22%2C%22Ibrahim%20Traor%5Cu00e9%22%2C%22Ousmane%20Ndiaye%22%2C%22Cheikh%20Fall%22%2C%22A%5Cu00efssata%20Kon%5Cu00e9%22%2C%22Aminata%20Tour%5Cu00e9%22%2C%22Moussa%20Ba%22%2C%22Amadou%20Diallo%22%5D; loclang=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 12 Jun 2026 09:11:45 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2B7daRR7Vt%2FWmhYLep4MHViSRS3S87GErtMq06SQMrO59AEhbis4kxZrR2cFIyKrfWXSkxXE%2FlVRbJDeyURZXxpT9L5BKdRRDmRfpXSvFU%2F2VMe506zT2Tb1DzuwUxvkYCVIv%2Fdn\"}]}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a0a7badce9f81ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":715,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-06-22T02:26:10.989284Z","times_seen":529628,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-12","alert":"Sinkholed","trigger":"orange513.sjmwu.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}