{"report_id":"f921f506-430e-4f43-ad6f-daf8a2e929f2","version":6,"status":"done","tags":[],"date":"2025-10-26T00:53:09Z","url":{"schema":"http","addr":"jiliccbe.com/","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"172.67.178.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"jiliccbe.com/","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"title":"jilicc - Official - Best Online Casino in the Philippines"},"submit":{"url":{"schema":"http","addr":"jiliccbe.com/","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"172.67.178.106","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-30T00:53:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"jiliccbe.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-15","domain_rank":0,"first_seen":"2025-10-26T00:53:09.633406Z","last_seen":"2025-10-26T00:53:09.633407Z","alert_count":8,"request_count":8,"received_data":329071,"sent_data":3765,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"ph-888casino.com","ip":{"addr":"104.21.2.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-22","domain_rank":0,"first_seen":"2025-10-20T00:09:30.383605Z","last_seen":"2025-10-20T00:09:30.383605Z","alert_count":0,"request_count":1,"received_data":11872,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-19T22:13:58.096008Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"jiliccbe.com/wp-includes/js/jquery/jquery.min.js","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-19T02:24:21.323007Z","times_seen":724978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-19T02:25:35.584565Z","times_seen":332929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ph-888casino.com/bottom-banner.js?11","fqdn":"ph-888casino.com","domain":"ph-888casino.com","tld":"com"},"ip":{"addr":"104.21.2.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98c07d1d68c3c049c07d5affbc3e9a53","sha1":"55e7adc5a112dbe231b28ca8a86a31187e1419d9","sha256":"a984af9fa2dee1b1d5af8c82ea9a97801daef7633e53dc4c4c64ebb2f765e579","sha512":"649afeac9949e98867a5a482829f84fd30c6d2d5898211218a95ed474ae79c17ac03c89518ab184b2878b1dd7b7e752fd77c24090c4b628788dfa3725448094f","ssdeep":"192:+G0qqsAEqaNQ1xbImfjUqwUVKb7Y9A2Al1FyYciB+JqaVXEbv/hljbDTemSRbMl1:SsgeFaKF3F8v50","tlshash":"3e32324abda33571a95764bc2feb9f463331a403d00adca83f8c62588f5d6a448a1788","size":11117,"data":"","first_seen":"2025-10-26T00:53:13.505326Z","last_seen":"2025-10-30T08:47:15.890395Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc0923c33f2f758c84c52fbb61c834a3","sha1":"b058be2d1733bff3d424d94ace699f13151e3df7","sha256":"d37ef4938c8ae1d3621058c0b807b594bdff045977dab405590883e514289ac3","sha512":"428f2cdc01d9aa9d3dc8ed5a91cbbc7bc7f1e0e05118f0d8a5e817f78b4348022cc0f7219d8362cd7295faca28e22392b2766cbeabb3b65d2387366e142294eb","ssdeep":"","tlshash":"f4d0c77df0585e5020c2607fb471a016521791b9bd941130d75ebc49ff08be546afeeb","size":215,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-04-19T01:58:29.894722Z","times_seen":21370,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d72b80690ba108f701c1b1a5e697720","sha1":"befbf4e1dec83cfd6b3a327a909be07a4f8ab490","sha256":"0d8bef99a34b9446ad386668c9742d804417dad6f930213a1dd1cbb8dacbd6e3","sha512":"7cc76f2ee11c4395caa4a50a63bbd1668733e4f8ba3d89189a8014364a7e93873434b7b7b7c7ab37f624d4558e064d913657c064dcc9b35f892a0f05e0991130","ssdeep":"192:q6e4j3qVXlu798fbuEO4C5/hsNs35PhSkzISM8Z:bel29YFts/Swau","tlshash":"62f153497542b57f393b7071d0af220b313970a3a84b4861e9b8f6d87c789792a23d7d","size":8109,"data":"","first_seen":"2025-07-25T05:28:04.240916Z","last_seen":"2026-04-19T02:53:18.977044Z","times_seen":17743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad81beb0a28e87fe3ce3742823d264a8","sha1":"f0aa1a71cc5d0b2b40e1b009486fc627f7703878","sha256":"10531cb9ccd59383133c85843a19c55ba0a27d1a2eb912628e9bd7f68b479aa5","sha512":"ed7834311ae7828b03aa5a7411e9f4bbf5066879ee89fe01f83fa28d1a299733d0a81eea1cc4ab97477bf80c13c5ecf94e398d95c3bd3a2911d480b651c6fb78","ssdeep":"","tlshash":"9131ee7df5291636095661fde399e341a030f0dadc428424efb5cc5ea8cce9548abdf2","size":1717,"data":"","first_seen":"2025-07-25T05:28:04.194173Z","last_seen":"2026-04-19T01:58:29.897048Z","times_seen":12025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"jiliccbe.com/wp-content/uploads/2025/10/image-jilicc.webp","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:47.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jiliccbe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 07:28:58 GMT","end":"Tue, 13 Jan 2026 08:27:23 GMT"},"fingerprint":{"sha1":"99:EC:1A:19:AE:CF:F9:67:3E:40:F4:7E:B3:2A:6E:76:FE:94:34:A0","sha256":"37:2F:6C:AE:D5:C9:E9:EF:A9:94:7D:16:24:19:79:8F:EA:CE:7E:90:C3:04:01:F2:03:BB:A8:D0:FA:8F:20:74"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/image-jilicc.webp HTTP/1.1\r\nHost: jiliccbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"watermarked_image.png\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 26 Oct 2025 00:52:47 GMT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFA0igTNS7j4qeZPdgCIBe13PULLiep7Ov7KX1ILALqyuzG2d7Z9uIpSTKYD2UOLjUwqtrLqqdqMQGVbrgBtqKXh5tneDZlJdYtOaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9945f91389851525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7507,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"68ea8da7e92e78e48ee8049710124953","sha1":"dd55eea4d6b2f38cb20d67c4a0996b3819948312","sha256":"bc26c91bfdac75f3d5bc60c079bcaba20da10d28a348e152c9887669acd36f38","sha512":"7b4e9012b525f23af337c0a2d22d78fb73e68a281d509c408bd3965086c49257349cd8f7accd0caa31e8c269e35515e9e9dcd8b34cff33c746f856ef43bcb0b8","ssdeep":"192:xDyb30Mg8WF6Hisd/Ys2aaED94blAxYJHgC6vA8Wek:xmbkr8hCTspa64blAiAJLi","tlshash":"78f19f8a466de6aa7b39e1064c433467d042a23706392596f2ef20df441527638bde24","first_seen":"2025-10-26T00:53:13.502961Z","last_seen":"2025-10-26T00:53:13.502961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/wp-content/litespeed/css/4cd59b7201aaef327a4e9dc7156afbff.css?ver=da096","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:46.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jiliccbe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 07:28:58 GMT","end":"Tue, 13 Jan 2026 08:27:23 GMT"},"fingerprint":{"sha1":"99:EC:1A:19:AE:CF:F9:67:3E:40:F4:7E:B3:2A:6E:76:FE:94:34:A0","sha256":"37:2F:6C:AE:D5:C9:E9:EF:A9:94:7D:16:24:19:79:8F:EA:CE:7E:90:C3:04:01:F2:03:BB:A8:D0:FA:8F:20:74"}}},"request":{"raw":"GET /wp-content/litespeed/css/4cd59b7201aaef327a4e9dc7156afbff.css?ver=da096 HTTP/1.1\r\nHost: jiliccbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:46 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 26 Oct 2025 00:52:46 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2VClbDAYlCCyHUwITI0TH91px0l0AktF6Yz%2FnxrNPWc3ZCW542mI2IdxosRtBSFAL6b0Nacoafei21mh9KHGrVPMRcIMkBkoSM1NVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9945f9101e5d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137296,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (52961)","md5":"4cd59b7201aaef327a4e9dc7156afbff","sha1":"8a68ce3077e6977ba480ca9de820811f0d7704f8","sha256":"4a92c7fe22078dc746e6989a52f895b4e5a295546d19c16829bdbfe6b912413f","sha512":"5987393373e9d9c277391088eb0a9ac163bf6136a8284dfb28ac199809b35f4ecc04da554201a60747d8503af2730e8f33d8f1aac9473993218b9ebc65618641","ssdeep":"768:USPJdyPZRRn7Tn5z3nLRdL2t7RllNX7sv2rPoScoKjcUlwvGQzKVwGz42lvQz0Ap:UOAP3e/BoVjyZLBGBI2MG6","tlshash":"d7d375927e53e23d223f002f82c3b54c162488cae51665daf954d107e5ffeea3775a0a","first_seen":"2025-10-14T04:05:48.583476Z","last_seen":"2026-04-17T12:55:37.385309Z","times_seen":7,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":256,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ph-888casino.com/bottom-banner.js?11","fqdn":"ph-888casino.com","domain":"ph-888casino.com","tld":"com"},"ip":{"addr":"104.21.2.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:46.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ph-888casino.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Oct 2025 08:25:31 GMT","end":"Wed, 14 Jan 2026 09:23:16 GMT"},"fingerprint":{"sha1":"D8:EF:BE:37:07:C2:74:7B:FF:5A:A4:EC:6D:5B:7F:60:85:A6:BE:BB","sha256":"90:7E:1F:E8:5B:C3:AF:8D:B5:45:BF:84:B8:16:D9:75:46:80:7C:F5:F8:34:AC:88:3D:A2:0C:3E:9E:A1:8F:FF"}}},"request":{"raw":"GET /bottom-banner.js?11 HTTP/1.1\r\nHost: ph-888casino.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sat, 25 Oct 2025 08:51:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: \"68fc8faf-2bc7\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RAry396XezzWCvXWzx6SWIwKAwY4uouohFAZnN2uZCDHqpo%2BfVGG8FKM7ukiz1kkl3mokjqFT6qROtL%2BNq3h3SnG6NgZQBWThrCuelWw5QY%3D\"}]}\r\ncf-ray: 9945f9107b9d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11207,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"98c07d1d68c3c049c07d5affbc3e9a53","sha1":"55e7adc5a112dbe231b28ca8a86a31187e1419d9","sha256":"a984af9fa2dee1b1d5af8c82ea9a97801daef7633e53dc4c4c64ebb2f765e579","sha512":"649afeac9949e98867a5a482829f84fd30c6d2d5898211218a95ed474ae79c17ac03c89518ab184b2878b1dd7b7e752fd77c24090c4b628788dfa3725448094f","ssdeep":"192:+G0qqsAEqaNQ1xbImfjUqwUVKb7Y9A2Al1FyYciB+JqaVXEbv/hljbDTemSRbMl1:SsgeFaKF3F8v50","tlshash":"3e32324abda33571a95764bc2feb9f463331a403d00adca83f8c62588f5d6a448a1788","first_seen":"2025-10-26T00:53:13.505326Z","last_seen":"2025-10-30T08:47:15.890395Z","times_seen":6,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":51,"dns":28,"connect":1,"send":0,"wait":236,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/cdn-cgi/rum?","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:47.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jiliccbe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 07:28:58 GMT","end":"Tue, 13 Jan 2026 08:27:23 GMT"},"fingerprint":{"sha1":"99:EC:1A:19:AE:CF:F9:67:3E:40:F4:7E:B3:2A:6E:76:FE:94:34:A0","sha256":"37:2F:6C:AE:D5:C9:E9:EF:A9:94:7D:16:24:19:79:8F:EA:CE:7E:90:C3:04:01:F2:03:BB:A8:D0:FA:8F:20:74"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: jiliccbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1010\r\nOrigin: https://jiliccbe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sun, 26 Oct 2025 00:52:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\npriority: u=3,i=?0\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvgJIR%2F8tYN90ybKMmVV7BPC8GvqTVKlwsrvAWL5qD2mYmzmoWU%2FUd%2F6wuvZNMyCxaQ795bxqFrihH00OLnK8v0NNuCPcb5bzEIymQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9945f91389821525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-04-19T02:03:56.213321Z","times_seen":13920,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-26T00:52:46.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jiliccbe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 07:28:58 GMT","end":"Tue, 13 Jan 2026 08:27:23 GMT"},"fingerprint":{"sha1":"99:EC:1A:19:AE:CF:F9:67:3E:40:F4:7E:B3:2A:6E:76:FE:94:34:A0","sha256":"37:2F:6C:AE:D5:C9:E9:EF:A9:94:7D:16:24:19:79:8F:EA:CE:7E:90:C3:04:01:F2:03:BB:A8:D0:FA:8F:20:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jiliccbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:46 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RER38UzD2I15w7gQb9m9ppaapfEf9IDxlwsQe9%2BaduO86eAqPFWN4pMiXaU6gAWXsNm9bzwRMarxs99FZcM9n44J8E1UMy1NtrLWFw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9945f90d8b2476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":68631,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9405), with CRLF line terminators","md5":"328d575f1e107b726d30e92ff9d285a8","sha1":"f314be3e9256b98e791084400b2877919e6cc7e3","sha256":"281a441e98b2b99ca325377fa59ed70b803541c8edac2abaeebc44d9cf643a1b","sha512":"04ac12b4237a444a74d4e16fc2d08b53cdfd2ffd6a9c2b785e27305ed1559efee94bf70e76bc10c4a4956ac341c402899515dc81b54750db8db901474d4ec7d4","ssdeep":"768:Crc9gze737wzJQdZUkyFsP8l6u6wCKcHHcZFVJB+X6v29YFts/Sn1p7EPR:toe737wzJQYskx6wCKcHH0FZ+A2otrsR","tlshash":"7663c863be012936325f11dfe11f220c61a2e6ced5025ad0d5fc9169f2b4eb4b7f6298","first_seen":"2025-10-26T00:53:13.507553Z","last_seen":"2025-10-26T00:53:13.507553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":51,"dns":32,"connect":1,"send":0,"wait":243,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/wp-includes/js/jquery/jquery.min.js","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:46.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jiliccbe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 07:28:58 GMT","end":"Tue, 13 Jan 2026 08:27:23 GMT"},"fingerprint":{"sha1":"99:EC:1A:19:AE:CF:F9:67:3E:40:F4:7E:B3:2A:6E:76:FE:94:34:A0","sha256":"37:2F:6C:AE:D5:C9:E9:EF:A9:94:7D:16:24:19:79:8F:EA:CE:7E:90:C3:04:01:F2:03:BB:A8:D0:FA:8F:20:74"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: jiliccbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:46 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 26 Oct 2025 00:52:46 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2t2RN8iBCgGOK3GqtK84tZBJ4qmCZnow8yUa83bUaspV9JjsSXOjs8hN5joMGuk18CFdAbFZogE2ef7I9tKGD6wy2z1eC0%2F7LjYM4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9945f9101e5e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-19T02:24:21.323007Z","times_seen":724978,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:46.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://jiliccbe.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:46 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9945f9108acbb518-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-04-19T02:25:35.584565Z","times_seen":332929,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":54,"dns":32,"connect":7,"send":0,"wait":12,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/wp-content/uploads/2025/09/cropped-jilicc-icon.jpg","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:47.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jiliccbe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 07:28:58 GMT","end":"Tue, 13 Jan 2026 08:27:23 GMT"},"fingerprint":{"sha1":"99:EC:1A:19:AE:CF:F9:67:3E:40:F4:7E:B3:2A:6E:76:FE:94:34:A0","sha256":"37:2F:6C:AE:D5:C9:E9:EF:A9:94:7D:16:24:19:79:8F:EA:CE:7E:90:C3:04:01:F2:03:BB:A8:D0:FA:8F:20:74"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-jilicc-icon.jpg HTTP/1.1\r\nHost: jiliccbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"watermarked_image.png\"\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 26 Oct 2025 00:52:47 GMT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5og3YJeE0dhRUIo9NiprgqUwBUDTm6ThoKJC2Q5obyYZ8WOy%2BslrcxrT2JpP4ZeFI4Day4w6WjW1Mr0PhqFwbfWFV34O%2Fz4QznJVvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9945f913594b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"70d623701b6d109a717b021755b05724","sha1":"8e1893a476e022652af0d1768e3898aff6eeefd5","sha256":"d3ba00827d9ff147dfb3f1572d3818a24c3f3e6dcde4c0256e460732a8431603","sha512":"765c9d400cc46fece45b062856c82ddab411188a668637d820ee22f378a3efb264b6df948e39caf742e6309771df6e5e43c3521e1076e464458ad1d7409c4395","ssdeep":"192:zDybr5Tr6Nf88elCuCPYYcz+JStQqpMW4k3PO:zmbr5Tqk8elFCQYouqpMWHPO","tlshash":"c4f18ef2b0da1bb19cddb1a974d1324b871750a82abb30be8ba0c7865526d5b5b110b3","first_seen":"2025-10-26T00:53:13.509966Z","last_seen":"2025-10-26T00:53:13.509966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/wp-content/uploads/2025/09/cropped-jilicc-icon.jpg","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:47.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jiliccbe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 07:28:58 GMT","end":"Tue, 13 Jan 2026 08:27:23 GMT"},"fingerprint":{"sha1":"99:EC:1A:19:AE:CF:F9:67:3E:40:F4:7E:B3:2A:6E:76:FE:94:34:A0","sha256":"37:2F:6C:AE:D5:C9:E9:EF:A9:94:7D:16:24:19:79:8F:EA:CE:7E:90:C3:04:01:F2:03:BB:A8:D0:FA:8F:20:74"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-jilicc-icon.jpg HTTP/1.1\r\nHost: jiliccbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"watermarked_image.png\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 26 Oct 2025 00:52:47 GMT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghvTteXMq4oBqBAmlsI62HP%2B2xDv0WjSlE7v6PpQCNDuRMPt%2Bjd3lyNtA%2BBHBgz%2FnxNOrFG%2F%2FljLHOlskJPpwUSz%2BTX1BF0YsL7R4Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9945f913594e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"70d623701b6d109a717b021755b05724","sha1":"8e1893a476e022652af0d1768e3898aff6eeefd5","sha256":"d3ba00827d9ff147dfb3f1572d3818a24c3f3e6dcde4c0256e460732a8431603","sha512":"765c9d400cc46fece45b062856c82ddab411188a668637d820ee22f378a3efb264b6df948e39caf742e6309771df6e5e43c3521e1076e464458ad1d7409c4395","ssdeep":"192:zDybr5Tr6Nf88elCuCPYYcz+JStQqpMW4k3PO:zmbr5Tqk8elFCQYouqpMWHPO","tlshash":"c4f18ef2b0da1bb19cddb1a974d1324b871750a82abb30be8ba0c7865526d5b5b110b3","first_seen":"2025-10-26T00:53:13.509966Z","last_seen":"2025-10-26T00:53:13.509966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jiliccbe.com/wp-content/uploads/2025/10/jilicc-casino-logo.webp","fqdn":"jiliccbe.com","domain":"jiliccbe.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://jiliccbe.com/","date":"2025-10-26T00:52:47.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jiliccbe.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Oct 2025 07:28:58 GMT","end":"Tue, 13 Jan 2026 08:27:23 GMT"},"fingerprint":{"sha1":"99:EC:1A:19:AE:CF:F9:67:3E:40:F4:7E:B3:2A:6E:76:FE:94:34:A0","sha256":"37:2F:6C:AE:D5:C9:E9:EF:A9:94:7D:16:24:19:79:8F:EA:CE:7E:90:C3:04:01:F2:03:BB:A8:D0:FA:8F:20:74"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/jilicc-casino-logo.webp HTTP/1.1\r\nHost: jiliccbe.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://jiliccbe.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 26 Oct 2025 00:52:47 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncontent-disposition: inline; filename=\"watermarked_image.png\"\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 26 Oct 2025 00:52:47 GMT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yz%2FedZBPiFdOn9rOP1nIYrAfjm4OVkl6VAVezyWO%2BFSr%2FNfynQ9sOrAu2SHKGWnSSP0OPX2JnX0KH2tjB%2FSTadpHzymBdG9YhWsRfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9945f91389841525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7479,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"086315a0d4f18876f208ce25119a7b60","sha1":"be8996baf360e587628e018173373d5db18234e4","sha256":"21761cbdd19406b3e047dd3b02bef420cd2028bbe6e7302195dd16462797a776","sha512":"c747d9719ecd6f085883e381dcb028b4aea071306de9906515ddaf1719a648728ce14986cc89cbf24c20f546730e231ee056a3ffbf06e2baaef4bb5d68d4091c","ssdeep":"192:xDyb/RgLUCgD38mQWnjsoxVC7Lj6O8w4iuwsk:xmb6LUCffWnjmTTT4if","tlshash":"1ef19fabdb21f1ac6ea1751680425c1fe8b098f0967b1659a53f0cdf8041e7357f990c","first_seen":"2025-10-26T00:53:13.511066Z","last_seen":"2025-10-26T00:53:13.511066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-26","alert":"Sinkholed","trigger":"jiliccbe.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}