{"report_id":"0826b838-f56f-475d-b39e-a137164af56a","version":0,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-07-13T05:36:46Z","url":{"schema":"http","addr":"meridianyield.top","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"title":"Meridian — Yield Opportunities","dom":{"size":157740,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13210)","md5":"d1f215a0f746c5ca929b044d95ad3809","sha1":"521218afee59c4b000afc7c9f97bc329946eb33d","sha256":"ed5d2475b44990b2140f094ee36cbe7d09ee2c58133836e4618d776afd0b18e3","sha512":"ba3eb8a27d997356552365e40a47cae856cfce5e42873b92ddfd1fbc2dc20c04c47c83f6145779790eeb536003e283f006e63d4bb01c44c1dd2fb60ac7f502a9","ssdeep":"1536:sJrlwac8gdN5ThEk7+Um39k/XGJIIyuBwIkiYLgbNDGhIbBLp46YsyDGBvZeikfy:sJr39H8g0hqD46YseGBvZbb","tlshash":"68f32b2126a0113ab43b97d2b7c7fb1973949003d9265725b9fcc058cfc9ee96b23b58","dom_hash":"domhash6972d24cfd91dafecf2e80cbef0dafde","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"meridianyield.top","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-17T05:36:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"meridianyield.top","ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-07","domain_rank":0,"first_seen":"2026-07-13T05:34:13.504918Z","last_seen":"2026-07-13T05:34:13.504918Z","alert_count":7,"request_count":7,"received_data":6706749,"sent_data":3090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-12T22:19:35.511658Z","alert_count":0,"request_count":7,"received_data":179181,"sent_data":3932,"comment":"","tags":null,"fingerprints":null},{"fqdn":"serverok.xyz","ip":{"addr":"172.67.191.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-25","domain_rank":0,"first_seen":"2026-05-14T15:18:33.899322Z","last_seen":"2026-07-13T05:34:14.147926Z","alert_count":0,"request_count":4,"received_data":113506,"sent_data":2148,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-12T22:22:25.184057Z","alert_count":0,"request_count":2,"received_data":38597,"sent_data":1177,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2026-07-07T01:27:15.35768Z","alert_count":0,"request_count":1,"received_data":646,"sent_data":546,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"78c1216245faa9d1ec6b4576911f5a31","sha1":"c64d9e6c9e4e53bed4884086750752de76401fa2","sha256":"329aaf25f0413c008486ee59a068ea5b3efc90e4e8152443faeae26180684431","sha512":"9d8943430d50d581b0911138b5dc5e7f37c1ed2d503572cafd7a93cd1037299480993e00cb96b99d452b838293c7e4aa51e814bd642729207bf6d7ab163e5681","ssdeep":"192:R6JLQganqcilR9RuVrHmYjvc9w7ie3oE0PYdo+qz+eAfhY84EIVFDElJjXndxVr5:R4L2qBjm3/1kE73S0","tlshash":"6152d5ba3ae3347a743391ea514fa754397960134209e8007dacd481afd4c36ab79ff8","size":13994,"data":"","first_seen":"2026-07-13T05:34:17.739663Z","last_seen":"2026-07-13T05:36:53.091747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"db0a3a687cbbfd2b390edbaca7d99eb4","sha1":"c0072bc007fdd0c23cfa949a826f17b1dfcc76b2","sha256":"9ea66396dfe895ca76608683b53909d4d03cd03bac2bcde7a468933393f035de","sha512":"622954443f03c7f622b2e8f000e4acfcffc35a5321ab68dcfd45f83cb7965ed8a28a161b1ab8c10275fbc958b66db6660188780cb89fda73f0882d9c0769926b","ssdeep":"","tlshash":"23e0683e88512836a03b31c982cf42a4295000036703d502725cc3402f51e722d36ce4","size":366,"data":"","first_seen":"2026-07-13T05:34:17.745481Z","last_seen":"2026-07-13T05:36:53.09326Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f5b1824515c32a884c15d448dee441e","sha1":"a164bd4a783043a92022b1c8e52d0757d608ff1b","sha256":"ba8fc7e636f792acaf919e81754eff30a8b7a5248490b11960b087da93bd987a","sha512":"7b5fc7c531f19f4959f33b7daf157507d8a4e751729fb13a77ae3a8ee1f95ab0679d483477c00de80aca4ce21de897f8b41b41131839a741e508a9769f7dceb5","ssdeep":"","tlshash":"cbe0c26293d504b641b7a06acb1b7318213359763388971586a457b0396492e8726adc","size":295,"data":"","first_seen":"2026-07-13T05:34:17.747428Z","last_seen":"2026-07-13T05:36:53.09477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"06148d0facc273a1b895b54c392d14cb","sha1":"5062806b453c3d87289802842c068d2f9f8e27bd","sha256":"84f24f6e0609d15da0c1e3da1f84ac6a6168f81f37bee306fc3cf9d5de129abd","sha512":"692f70493242272e99636cd349323a6e032954e742dbc12c59e39624ecfb1fcb501166d808d8325823b72ace2819ea7edcde1409865272d120afd2b05019a12f","ssdeep":"","tlshash":"f321eec87897a128352321b99aff4a2831bc50039405ce24785cf1a01fa1e1422fadfa","size":1276,"data":"","first_seen":"2026-07-13T05:34:17.750053Z","last_seen":"2026-07-13T05:36:53.096642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"125778cd057b46b61e03fa0a48c10548","sha1":"3041d988f711739827ab412b98dd85107233b721","sha256":"06f861198ae2db23056d7329a94bd9d9ae812690a5a6c0e8946cd90b44ea477c","sha512":"2a745941d46461269ad6d7ee53c079906e0ed6ea719ce03571e48d39c1d9107068df8763dde729cddebac56d3e0d0d0c54c926703ae589be00be18da7d7ee8b3","ssdeep":"","tlshash":"92f049817982652d355370679ec78408256cde025911df07a40ce0253e72d2a96fa9b9","size":609,"data":"","first_seen":"2026-07-13T05:34:17.752677Z","last_seen":"2026-07-13T05:36:53.111432Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3dd801570428f9ddad2a877e7f0bc8b7","sha1":"c76adea1833adbe792a67f1266dbd1f2d3636c01","sha256":"279d50014a3fac5f632d39c41027dbb6966bc4bc644a676e232485240d6895ee","sha512":"ae4cf5dee006a56e03d22e05af5b23c54526b1fae09103f41224e433f33a663a538a155b535fe97ab74b1efde64289c802ac2cf64fe7a3e665f13bf26128df56","ssdeep":"96:MKVvRmB143XWqXf14s1GwhiZ3JPXkxNvlXsnbBRWRbtEDRrHLiCjP0hExbMS8Xl:weNiZyvlXsnbBRWRKySMSOl","tlshash":"b0b1b5f954fa30ba0c53a1e6836f2b472535608f4642ce00794dc2616fc5a9e7a36de5","size":5292,"data":"","first_seen":"2026-07-13T05:34:17.754501Z","last_seen":"2026-07-13T05:36:53.113722Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"167d606c16261b971b85279edf7197f4","sha1":"6f25287cc9562e6b8ec686eae50e3e813fefb76f","sha256":"f99f3abc893755755cfbd7763486059a6f5916fe4b787cbe15958f38dadcf096","sha512":"5537299d7583742094bad44e8530c8045e455faf7b9f3b178de0e8a7daaedadc76e7e66e78160a534e60201c8c9639525a773afe414e8ed219a821a61461a085","ssdeep":"96:r3gqXVLYCSwYwGuT+EAdJpqFVbIzgxuxk9Bxv0pqJs5NZSJkiE:rwgVLYCSwKtExLbs5mTE","tlshash":"b991755b7be620755dbfa27aa7af7b6039210063004acb4039ded6946fe0c65093b9cd","size":4221,"data":"","first_seen":"2026-07-13T05:34:17.756367Z","last_seen":"2026-07-13T05:36:53.116489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/shared/i18n.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14b5d8fca3b7ddf4ef918071ee6ded1d","sha1":"13d7d38c041c6fcc967c134eeb41df76a440b7fd","sha256":"00e324fd0e9d7dc25467b9ae74ae7bb8c84295cb60486053580fdfffaf3a7585","sha512":"be50413e87dab555d3f08ca79d8a5eb7c9c9de2bcf2f0b634f0cce6d3b12fce1e019c24f13032eb7cff66e0575a086b01d9d49f053a3312c6d37ce4e2da72be7","ssdeep":"96:UxkrNAzDSybNZ7D42P8HepYvCd1uEkk+GS3VCw:AvhVs2P8+ivCa7ZGSQw","tlshash":"61a1402e7af76076403360beabaf6a457035301b1449e9043f5c86501fc1c726bb2eee","size":4656,"data":"","first_seen":"2026-05-14T15:18:39.113843Z","last_seen":"2026-07-13T05:36:53.080297Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/locales.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"901c27fa93b188773cd9fac801ef1060","sha1":"f94e0d508503c3bdf7416acd044cb54d539d6ed6","sha256":"704e854432bc867ea259e00edecf33cefb3ab3dc87d8fa83acf06c2187f7e6b5","sha512":"2eda285edfaf6b76b408468fd8c3c1422ee2255dec5b3fe2d0f6f7fa01d1f8057ed60c36ee7100195f84341ec538344f33a9bf66f1cf2ea866d4f8cfa1d8db79","ssdeep":"3072:qYYIv1v+O4ik747+pGrY4zIrDII9mwBsEWofM2:qY/p+U73sAArBE2","tlshash":"a1c3fa1a58c1239545865392b2864553f32d8087ab48722cf7acc1295f8f4afd2bfbfd","size":123075,"data":"","first_seen":"2026-05-14T15:18:39.100122Z","last_seen":"2026-07-13T05:36:53.090182Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/assets/w-modal.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-13T05:36:53.081156Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/assets/w-loader.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-13T05:36:53.076235Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/assets/modules.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd7888c17d986b6122e6a9397cf907d6","sha1":"b4d8de352083413f9352fdb221525c81540a6a0a","sha256":"e531262f2af00276370279551348f4949a9d28b26af6be5f9a64cc496ac0b78a","sha512":"79f4a147849ba685e56a07f91c574d9970c5cb743ef6081fd2b4760e8656f760b92ead577d55004ab46158599d8c7cf554c3d53304070bf47b2ae97a2c944854","ssdeep":"49152:BC0EJoL7vMPaypp3JZ4CQmB0Rcj206bYF2Xi/Mf4hPGnN9EYtwkak9CGglx:Mmy3zQkA6mEwtwyjax","tlshash":"ff567dd073a0b0a5439752d0442bd005f339a82a644c449ff6efe8e76fa9e899537f39","size":6101525,"data":"","first_seen":"2025-05-16T16:12:44.565992Z","last_seen":"2026-07-13T05:36:53.122386Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/assets/main.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17bd26a163770106ab0dc369c2ab49de","sha1":"0dce8b5d1fceac8242b2e3423b62c0b851d05a9b","sha256":"5b832c64acd656155783e13584489a3a6b4ce2d8f1adbafca4e4f036f32962b0","sha512":"dbcdb455d109d0753a3a9d7798991d5d4a04f356e8d8231e2c32b195db84dc7909382f4c7d6220315feb511530ba5c78e8bd7b4cfe14318bb199cd3a5fad8498","ssdeep":"3072:agML5f5bcOu22w3gCIoY9oebyB2IXltjgu7M8qM43cIeOSmmz6yDQ5:agML5f587Ozjgu7Miea6yDQ5","tlshash":"0544a6905aa5a99c930f1ebe7907bde0d506369d29808edfe3087c25d1ea743f6f1234","size":277740,"data":"","first_seen":"2026-07-13T05:34:17.707643Z","last_seen":"2026-07-13T05:36:53.071566Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"NetworkError when attempting to fetch resource.","filename":"https://meridianyield.top/assets/main.js","line_number":1,"column_number":28976}]},"http":[{"url":{"schema":"https","addr":"meridianyield.top/assets/main.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.610Z","timestamp":1783920977610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:52 GMT","end":"Sat, 03 Oct 2026 15:01:51 GMT"},"fingerprint":{"sha1":"71:84:AE:32:D8:4C:5C:4A:5C:15:92:CB:0B:32:81:24:6B:4F:6F:C5","sha256":"C1:77:1B:2C:C0:DC:EC:2A:F4:6F:C4:3F:02:51:27:54:BC:9B:A6:82:9F:F0:3B:66:58:6D:61:7B:0B:66:0D:58"}}},"request":{"raw":"GET /assets/main.js HTTP/1.1\r\nHost: meridianyield.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 05:36:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 02 Jun 2026 19:32:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a1f2fc6-43cec\"\r\nexpires: Wed, 12 Aug 2026 05:33:35 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 162\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0ruzXly47BlKckAoWUK9Ndk4RodcFcBvv3nBa6Q0e1HWGyU6uVLqpEKzZJJS0E0iQeoL6qnlj6h10XBYCFwem9vTXLwj3jtT8AuA4OdbMtOxw59W4fuh5%2B0r9HlySLa2hne0w%3D%3D\"}]}\r\ncf-ray: a1a5edde1e77712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277740,"size_decoded":60626,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64810), with no line terminators","md5":"17bd26a163770106ab0dc369c2ab49de","sha1":"0dce8b5d1fceac8242b2e3423b62c0b851d05a9b","sha256":"5b832c64acd656155783e13584489a3a6b4ce2d8f1adbafca4e4f036f32962b0","sha512":"dbcdb455d109d0753a3a9d7798991d5d4a04f356e8d8231e2c32b195db84dc7909382f4c7d6220315feb511530ba5c78e8bd7b4cfe14318bb199cd3a5fad8498","ssdeep":"3072:agML5f5bcOu22w3gCIoY9oebyB2IXltjgu7M8qM43cIeOSmmz6yDQ5:agML5f587Ozjgu7Miea6yDQ5","tlshash":"0544a6905aa5a99c930f1ebe7907bde0d506369d29808edfe3087c25d1ea743f6f1234","first_seen":"2026-07-13T05:34:17.707643Z","last_seen":"2026-07-13T05:36:53.071566Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.780Z","timestamp":1783920977780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 69745\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-14T13:14:04.379377Z","times_seen":32525,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":33,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverok.xyz/","fqdn":"serverok.xyz","domain":"serverok.xyz","tld":"xyz"},"ip":{"addr":"172.67.191.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:18.672Z","timestamp":1783920978672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverok.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 03:07:40 GMT","end":"Tue, 22 Sep 2026 03:07:39 GMT"},"fingerprint":{"sha1":"5A:ED:DA:1C:D9:40:92:17:FD:A0:B1:5A:68:B6:D4:04:64:11:DE:D4","sha256":"2E:1F:C0:65:26:9F:AA:8D:F7:13:D9:BA:E7:AE:63:6C:9C:73:64:DC:A6:56:94:CE:62:65:20:C5:2B:B4:0D:F6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: serverok.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 489\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":489,"data":"v=20012026\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e7138120b013b01251a3e2a1f0e382a21017e012579242b252423291f0e3d2d1f24242a0f193d2c0f713f01213f212c7a7131297a1e31107a24230122383d2c1f303b040b02792b7a1e31107a24230122383d2c1f303b040b023c12100632111f2c24107b1a320122273006322f32071c013f071c2b7c0622117d040b0222290f0e78107a1a202c0f0d21072512202a000624040b027b111f303b12101a2e111f1a232b251e322b31017e2a261e3b2a0b3f212b0f0e312c0f7d242b247120120f1a311210063201223825111f303212107875"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"48-6quPFSBbFU+nyT6rXtRttULLfLk\"\r\ndate: Mon, 13 Jul 2026 05:36:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pgPnWkB6%2B2KwIWIgDzZEg0DGgJTUY1NaAiCL%2B20cPxRxKp3Cnt0lO8cg2jtsnXm%2BtKWfJYrnbnGxs7bcsYdRBcrg787Ye2Q%2FbEsC3Hd7yijR8lYwiCdOLM781n8ni8%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a5ede56af556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":766,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"01706393998d53e0e494645234a01752","sha1":"eaab8f15205b154fa7c93eab5ed46db542cb7cb9","sha256":"d0cbcf5b18dcd852fe3cc9d92f4d15e58dd5903c9558e4e02cdcb392d75f40aa","sha512":"3931c9e1cf2087d674a3122f7feac689c02a68c1c37d8916ac406c645fb08c3baad3dc406eb1b1ce529cd53affe24a024b3dc0c9a220fcdd3ccbccbcbbd5c048","ssdeep":"","tlshash":"d4a0026d3c0c40268b3826216cdd94a9454357f213c0e1356b925e8063e278bdef6134","first_seen":"2026-07-13T05:36:53.074388Z","last_seen":"2026-07-13T05:36:53.074388Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":0,"dns":93,"connect":20,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/assets/w-loader.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.607Z","timestamp":1783920977607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:52 GMT","end":"Sat, 03 Oct 2026 15:01:51 GMT"},"fingerprint":{"sha1":"71:84:AE:32:D8:4C:5C:4A:5C:15:92:CB:0B:32:81:24:6B:4F:6F:C5","sha256":"C1:77:1B:2C:C0:DC:EC:2A:F4:6F:C4:3F:02:51:27:54:BC:9B:A6:82:9F:F0:3B:66:58:6D:61:7B:0B:66:0D:58"}}},"request":{"raw":"GET /assets/w-loader.js HTTP/1.1\r\nHost: meridianyield.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 05:36:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 05 May 2026 20:58:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69fa59e2-a2f4\"\r\nexpires: Wed, 12 Aug 2026 05:33:35 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 162\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eb9zYKCFilf1RTcHSu5SczSE1rp0%2FZWQEBr2qe%2BgYll%2FHyATsT4XP%2BWmrwsbMfgSf%2BiBNQCom7H2hEVLVVyvyre9GcOtH4HPWs%2F7vsvrn4MBLbeWpAa6gb5TJy6l1rkKfDJlqw%3D%3D\"}]}\r\ncf-ray: a1a5edde0e75712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":8526,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-07-13T05:36:53.076235Z","times_seen":389,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"meridianyield.top/assets/modules.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.608Z","timestamp":1783920977608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:52 GMT","end":"Sat, 03 Oct 2026 15:01:51 GMT"},"fingerprint":{"sha1":"71:84:AE:32:D8:4C:5C:4A:5C:15:92:CB:0B:32:81:24:6B:4F:6F:C5","sha256":"C1:77:1B:2C:C0:DC:EC:2A:F4:6F:C4:3F:02:51:27:54:BC:9B:A6:82:9F:F0:3B:66:58:6D:61:7B:0B:66:0D:58"}}},"request":{"raw":"GET /assets/modules.js HTTP/1.1\r\nHost: meridianyield.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 05:36:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 05 May 2026 20:58:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69fa59e2-5d1a20\"\r\nexpires: Wed, 12 Aug 2026 05:33:35 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 162\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQZrSGzg7A2CtHQWrlEn6Di1I85MSLIFRlfMmGMXWrU7q1Xs7Zt9xU6tE%2BLwSxeJ2CSu%2FzXQYb%2BcwJzKQH5opEjrmIJFofRHwJjVzlI0TWXztI%2FKFy7RwNNm%2FUT1l%2FnaPbHWQQ%3D%3D\"}]}\r\ncf-ray: a1a5edde0e76712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6101536,"size_decoded":2063948,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"3b213a32f63e7967e9c2a5535806df09","sha1":"2198e24da34b883543f6b2bb3b3e315cfc5452b0","sha256":"1c56392da634c53a1450bcebb75428d63339a9bdc0e7e4602c0b674dbf27696f","sha512":"1a44f17a2865c14c3570dffb931bdcf07e5d8b7670fcb5154d1088d6fd10d4406acab0e00d666528882f9d91abc635f96b139f64a467c540b695c2c69a70f8a3","ssdeep":"12288:BMGk0Eqoh8EYL7qjs30amseucfju2ZAyppl:BZk0EJGEYL7v0F7Payppl","tlshash":"c9254a8473a1f076439725a4543f100af239b86c384d446cf768eceb7da9989963bf39","first_seen":"2025-07-27T10:34:55.50581Z","last_seen":"2026-07-13T05:36:53.07716Z","times_seen":159,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.783Z","timestamp":1783920977783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 69745\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-14T13:14:04.379377Z","times_seen":32525,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":39,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.790Z","timestamp":1783920977790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 69745\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-14T13:14:04.379377Z","times_seen":32525,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":45,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:18.669Z","timestamp":1783920978669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Jul 2026 05:36:18 GMT\r\ndate: Mon, 13 Jul 2026 05:36:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":1753,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-07-13T05:36:53.078041Z","times_seen":137,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverok.xyz/","fqdn":"serverok.xyz","domain":"serverok.xyz","tld":"xyz"},"ip":{"addr":"172.67.191.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:19.624Z","timestamp":1783920979624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverok.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 03:07:40 GMT","end":"Tue, 22 Sep 2026 03:07:39 GMT"},"fingerprint":{"sha1":"5A:ED:DA:1C:D9:40:92:17:FD:A0:B1:5A:68:B6:D4:04:64:11:DE:D4","sha256":"2E:1F:C0:65:26:9F:AA:8D:F7:13:D9:BA:E7:AE:63:6C:9C:73:64:DC:A6:56:94:CE:62:65:20:C5:2B:B4:0D:F6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: serverok.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 577\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":577,"data":"v=20012026\u0026s=1\u0026r=2d310220117b1a382a7a7c21072102242a261a242b24717b121f023229101a2401213f212c1006242b247138120b017e0122017b070c2f21040b0278291f792401222721051c053d050c2b3d0522093106213f2f050c1d7e0532117e051c2321040b02232a7a7920291f7c210721023c12100238120f24202a262438121f302304261a3e2b0b013b01262c3e2b253c242b247138120b017e2a261e3b2a0b3f212a1f1e322b7a0e26121e71782b31017e051c2b7c05322331050c237b071c1131050b3f21117a20202c0e712311101a2001223825111f3032121b3f212c7a0e3b2a0f1e78107a0e23120002242b7b052107257d792a0f3f3b01260a202b261a3d1210022e111f1a232b251e322b31017e12250e3b2b7a1e71"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"28-A0PaEo1LoipcJJoXg99CV9g4eCM\"\r\ndate: Mon, 13 Jul 2026 05:36:19 GMT\r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fPK5aPsjO4dtPRyPQRg3P8NpDWseScZK3N2t2LpIYCT5Tb7mb%2Fv6YI%2BU%2FACLXJYyrvhNL0uDpLMsmcG0pN0Ier0Hl9j8ftC0FOhOdC7x7%2BlIYCEsoZ%2Be%2F5bWZd0ftY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a5edeaab1d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":40,"size_decoded":725,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"36c7a47ce320b0936631f4c5de7c47c0","sha1":"0343da128d4ba22a5c249a1783df4257d8387823","sha256":"f0fac7f7534f0bd59a6b6d783cbbbab2f3bccf6d554ebf407999a7d28a53cfbb","sha512":"126e519c260b15de0bd7038cc909a9adfdce7830e402c8020fef9b2b59984bddebc88cd981dc04157bc1c20501fbcde18194a1049f1d9fcfe926fd7deb856c5c","ssdeep":"","tlshash":"059004353c0c4017451001143c5d40750713d7f101c1d01451c043400350701dd74034","first_seen":"2025-08-13T09:59:32.310568Z","last_seen":"2026-07-13T05:36:53.078785Z","times_seen":14,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/shared/i18n.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.601Z","timestamp":1783920977601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:52 GMT","end":"Sat, 03 Oct 2026 15:01:51 GMT"},"fingerprint":{"sha1":"71:84:AE:32:D8:4C:5C:4A:5C:15:92:CB:0B:32:81:24:6B:4F:6F:C5","sha256":"C1:77:1B:2C:C0:DC:EC:2A:F4:6F:C4:3F:02:51:27:54:BC:9B:A6:82:9F:F0:3B:66:58:6D:61:7B:0B:66:0D:58"}}},"request":{"raw":"GET /shared/i18n.js HTTP/1.1\r\nHost: meridianyield.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 05:36:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 04 May 2026 12:06:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69f88bda-1230\"\r\nexpires: Wed, 12 Aug 2026 05:33:35 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 162\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NgGIro3%2B7Vi%2B%2BtK2xFAagLbdwsgA%2FGmpfpUoeTlLcUoXI9hFlUc2ZQF4ohiJHjTqeUAyOEH5ECwie0JW9OKXrtFxdVx2Tjg2M%2FasbJHnI375PTiyfvhTncIxrDc%2FMshmaZ783A%3D%3D\"}]}\r\ncf-ray: a1a5edde0e71712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4656,"size_decoded":2427,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"14b5d8fca3b7ddf4ef918071ee6ded1d","sha1":"13d7d38c041c6fcc967c134eeb41df76a440b7fd","sha256":"00e324fd0e9d7dc25467b9ae74ae7bb8c84295cb60486053580fdfffaf3a7585","sha512":"be50413e87dab555d3f08ca79d8a5eb7c9c9de2bcf2f0b634f0cce6d3b12fce1e019c24f13032eb7cff66e0575a086b01d9d49f053a3312c6d37ce4e2da72be7","ssdeep":"96:UxkrNAzDSybNZ7D42P8HepYvCd1uEkk+GS3VCw:AvhVs2P8+ivCa7ZGSQw","tlshash":"61a1402e7af76076403360beabaf6a457035301b1449e9043f5c86501fc1c726bb2eee","first_seen":"2026-05-14T15:18:39.113843Z","last_seen":"2026-07-13T05:36:53.080297Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"meridianyield.top/assets/w-modal.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.605Z","timestamp":1783920977605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:52 GMT","end":"Sat, 03 Oct 2026 15:01:51 GMT"},"fingerprint":{"sha1":"71:84:AE:32:D8:4C:5C:4A:5C:15:92:CB:0B:32:81:24:6B:4F:6F:C5","sha256":"C1:77:1B:2C:C0:DC:EC:2A:F4:6F:C4:3F:02:51:27:54:BC:9B:A6:82:9F:F0:3B:66:58:6D:61:7B:0B:66:0D:58"}}},"request":{"raw":"GET /assets/w-modal.js HTTP/1.1\r\nHost: meridianyield.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 05:36:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 05 May 2026 20:58:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69fa59e2-9307\"\r\nexpires: Wed, 12 Aug 2026 05:33:35 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 162\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8N8ygQOwSl68hHk7pPOJ4twQjDB3CbCmqrGw5wZDBvOSYdFoaoouAXuAXIt2vRLHUoHzTSCLp0rAR4yUZWIXqaEKKsQ2Tmd14c%2F8ArqAMJa0zm0r2CxDFPzd5r2ctU2VbgKahA%3D%3D\"}]}\r\ncf-ray: a1a5edde0e73712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":11819,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-07-13T05:36:53.081156Z","times_seen":197,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.792Z","timestamp":1783920977792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 69745\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-14T13:14:04.379377Z","times_seen":32525,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":47,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.30.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:18.609Z","timestamp":1783920978609,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Jun 2026 21:09:40 GMT","end":"Sat, 19 Sep 2026 22:09:34 GMT"},"fingerprint":{"sha1":"BC:5D:BA:6B:85:5B:AB:6D:AC:FA:AE:08:60:30:D5:B7:00:DF:7A:6D","sha256":"7F:4B:1F:9D:6C:9D:C6:6E:72:31:02:D1:AA:6A:28:51:EB:2B:06:FC:E9:0E:A3:03:26:25:FB:13:6A:CB:51:4D"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 401 \r\ndate: Mon, 13 Jul 2026 05:36:18 GMT\r\ncontent-type: application/json\r\ncontent-length: 273\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a1a5ede46cf81ae6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":646,"mime_type":"application/json","magic":"JSON text data","md5":"817fe0f750fa91ac954b06a6e179f676","sha1":"651023a67e8786f8c7a63d323d81512687d851f1","sha256":"e54a34359ebeb4245031b742ee300e3fdd72ccf608d481d57caca1fc16147f17","sha512":"b6f4a24f4e9fd1ad99775fcfddc5311c09b8a77a3fc53798f1918b49fe87efcf1063aca6f4c9b63bb0d60d87d11bb5d0ff6223049f30b58d8013b642f33b6109","ssdeep":"","tlshash":"87d012f75585191b2b3743567068a8ace8d3888d99416447957d4364a28cd39128f21a","first_seen":"2026-06-09T22:35:40.080024Z","last_seen":"2026-07-13T05:36:53.082724Z","times_seen":31,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":6,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverok.xyz/","fqdn":"serverok.xyz","domain":"serverok.xyz","tld":"xyz"},"ip":{"addr":"172.67.191.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:19.085Z","timestamp":1783920979085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverok.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 03:07:40 GMT","end":"Tue, 22 Sep 2026 03:07:39 GMT"},"fingerprint":{"sha1":"5A:ED:DA:1C:D9:40:92:17:FD:A0:B1:5A:68:B6:D4:04:64:11:DE:D4","sha256":"2E:1F:C0:65:26:9F:AA:8D:F7:13:D9:BA:E7:AE:63:6C:9C:73:64:DC:A6:56:94:CE:62:65:20:C5:2B:B4:0D:F6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: serverok.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 505\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":505,"data":"v=20012026\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e71222a7a7d25291f2b21040b02232a7a7920291f7c210721023c12100238120f24202a262438121f302304261a3e2b0b013b01262c3e2b253c242b247138120b017e2a261e3b2a0b3f212c1006242b247138120b017e0122017b070c2f21040b023c12100632111f2c24107b1a320122273006322f32071c013f071c2b7d050c097d040b0222290f0e78107a1a202c0f0d21072512202a000624040b027b111f303b12101a2e111f1a232b251e322b31017e2a261e3b2a0b3f212b0f0e312c0f7d242b247120120f1a311210063201223825111f303212107875"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"bf38-9c0+099ZGxIj98SS8THyqApSSHE\"\r\ndate: Mon, 13 Jul 2026 05:36:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oy3MSve2XTpZzyulJoVZRckxWV08vCn%2FKCbGvaWkjaa2Z6EgGxRxCF1Bpw6C06oxRm92IqqCIL%2FBSPrQ%2B%2BbcMdYvLVnlehJ84erRXDh9xJnSn3ZGn5cVHEUuO6lgxyg%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a5ede74b0456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48952,"size_decoded":12902,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (48952), with no line terminators","md5":"ce2bc60d9b8f5fade87a8b12cf0760af","sha1":"f5cd3ed3df591b1223f7c492f131f2a80a524871","sha256":"8bb0d82e53ee574b4919469b1d7d368cbaeb2e83e0e0b94dbe9933dad09c3ca9","sha512":"df391bc973f7ecce5d6b99beb64feb5364b5a3385424b07f7d3279f61cbe69c60cd31d78fc6e74b12a5b63c6ce3b3457ae8845a8b3741d592a071d004b0b390f","ssdeep":"768:p++kQqQPIck0Hks41ZKbrdpL1MybaEesTvvd5MGPioVZvlMqVqYsK0KNQKcxH:p++bJPbk07PvhRlMqVqYwf","tlshash":"a423f378f94c35f4821f9a25b9dcedfe303b92e2152b54200a0791c32e51bd5ebe593a","first_seen":"2026-05-14T15:18:39.118714Z","last_seen":"2026-07-13T05:36:53.08357Z","times_seen":5,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serverok.xyz/","fqdn":"serverok.xyz","domain":"serverok.xyz","tld":"xyz"},"ip":{"addr":"172.67.191.231","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:19.382Z","timestamp":1783920979382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serverok.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Jun 2026 03:07:40 GMT","end":"Tue, 22 Sep 2026 03:07:39 GMT"},"fingerprint":{"sha1":"5A:ED:DA:1C:D9:40:92:17:FD:A0:B1:5A:68:B6:D4:04:64:11:DE:D4","sha256":"2E:1F:C0:65:26:9F:AA:8D:F7:13:D9:BA:E7:AE:63:6C:9C:73:64:DC:A6:56:94:CE:62:65:20:C5:2B:B4:0D:F6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: serverok.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 513\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":513,"data":"v=20012026\u0026s=1\u0026r=2d310220117b1a382a7a7c210721023112101a31291f1e7a121e71222a7a7d782b250e222c0b013b01251a3e2a1f0e382a21017e012579242b252423291f0e3d2d1f24242a0f193d2c0f713f01213f212c7a7131297a1e31107a24230122383d2c1f303b040b02792b7a1e31107a24230122272105222b7c070b013b012579242b7b0620127a1e2e2c00052107220d7b070c057d0522097d06322332070c093b0125062711101a2e120f0e78111b017e12250e3b2b7a1d3b01262c202a0f30242c0e7120120f1a31121006320122383d2c1f303b040b023f111002782a251e31107a0e23120002242b7b0521072512202a0006242e197575"}},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\netag: W/\"f108-xo8Trkh0otPo6r1aWbDNE9NnfMQ\"\r\ndate: Mon, 13 Jul 2026 05:36:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mX8GAT3Se83LaPKaYeNOfYNbjqs6kw%2FOuAroll0OUdRY5TdXrxFPFHC16of68n9VNXAc7ruBChIPajJUISZBiVIUQ7zAAkHQnSFefinMqxES91HbeP8rqsXyHS8qd2o%3D\"}]}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1a5ede92b1356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":61704,"size_decoded":5475,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (61704), with no line terminators","md5":"44507bfaebcd38207917d12c2a86e16c","sha1":"c68f13ae4874a2d3e8eabd5a59b0cd13d3677cc4","sha256":"2c118fdfca718e0c9ff7372ece457d009a327df36c5243cd93a21f981a93899d","sha512":"3072a04a57c2c22b6ba3f22d75883fb5f41c36618ce9b5a7ae0a1ce5fbef29c528b2428ad678334f16077e58d3194521e3b4b3feae9f8ba17199ab18ad3a8e93","ssdeep":"768:Bt5hgCPKQbtDzct9BBRvTU4vX4k/g/+er5U4w/XO9lbh7bh+er3TIprRB6Kcz3c3:5Q7IK8KPUSg9mdpLvA/Q","tlshash":"3153ab3c3a5a30e4036ee532a684bdbf76174be63d22a4252f8197c256d1bddcde181c","first_seen":"2025-08-13T09:59:32.315516Z","last_seen":"2026-07-13T05:36:53.085023Z","times_seen":14,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-13T05:36:17.039Z","timestamp":1783920977039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:52 GMT","end":"Sat, 03 Oct 2026 15:01:51 GMT"},"fingerprint":{"sha1":"71:84:AE:32:D8:4C:5C:4A:5C:15:92:CB:0B:32:81:24:6B:4F:6F:C5","sha256":"C1:77:1B:2C:C0:DC:EC:2A:F4:6F:C4:3F:02:51:27:54:BC:9B:A6:82:9F:F0:3B:66:58:6D:61:7B:0B:66:0D:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: meridianyield.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 05:36:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Thu, 25 Jun 2026 16:28:22 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jUZda0Rxd9tjkveFa3PFBtW3Ssu8bEOSVXgGendIIqmYgYT70qxeDWmcv2Y43w5ShUyku4ZoZv8VOkWUEEC7mNm%2BSauKUq%2B1GHw2FZwqowZickSZJk421thHQ5Y6QrHg1CJjtA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a1a5eddaae4d712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114727,"size_decoded":28623,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (593)","md5":"ad55e74d89dd6ef24a33350ff13d83f1","sha1":"05faa85638ee2d93c3b4ed939f6d53bb745adf7a","sha256":"c2540d658b7cf2eba09994b6eea35707a67def0f7acf23f6c2ee3a6d387509bc","sha512":"bf105402eee55b227474f1aee6aac249ca982b8ac14689425bd51f3a3d0382f629e907fbb0b07e93d0856f3bf7505c27b2c549865970588e68705a69903b24cf","ssdeep":"1536:VJrlwac8gdN5ThEkYhII3XuOwIkiQfAVtjhIbBLp46YsyDGBvZeiVfa:VJdafShqD46YseGBvZbY","tlshash":"99b3e92172b1113a7467a6d1b7dbb72a7368e003d40a96347aec4054cfc8df5ab27e9c","first_seen":"2026-07-13T05:34:17.723027Z","last_seen":"2026-07-13T05:36:53.085948Z","times_seen":2,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":112,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Serif+Display:ital@0;1\u0026family=Manrope:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.596Z","timestamp":1783920977596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=DM+Serif+Display:ital@0;1\u0026family=Manrope:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 13 Jul 2026 05:36:17 GMT\r\ndate: Mon, 13 Jul 2026 05:36:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12513,"size_decoded":1521,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d6d5bd7b27d667440e49878ee07ecadf","sha1":"cc183d95384d1cdf08cd049a6e8d506487864bc0","sha256":"90638e335c287ade6486d63fff06fd9e7e1af9d021776a80d30a4c303208f1d4","sha512":"0708c57d09e5420ccf5c8737a16c3fa594b25b8831c92a4440e779375062c1e75f58e2e2fb995a998843f78dfa9021b33388011c6fd48e1530919d25f5bf3c69","ssdeep":"192:KODpO3/nkJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80s:Ks/mkwU+ME02w","tlshash":"9342c990002be804eb470cd277ce7e3aad5e61567441d5ba5bfe1cd8addbd222320b5e","first_seen":"2026-05-14T15:18:39.104949Z","last_seen":"2026-07-13T05:36:53.087129Z","times_seen":4,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":36,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmserifdisplay/v17/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.786Z","timestamp":1783920977786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmserifdisplay/v17/-nFnOHM81r4j6k0gjAW3mujVU2B2G_Bx0g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 06:04:02 GMT\r\nexpires: Fri, 09 Jul 2027 06:04:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 343935\r\nlast-modified: Wed, 10 Sep 2025 16:58:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24744,"size_decoded":25557,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24744, version 1.0","md5":"c27d5a47c09ebe91c013817e32b69043","sha1":"3d2a435525b8b356551cce6d09a86282a4e598d8","sha256":"fdf61e20fd2c0108e0ea28da4daca0035205b4b7fc031a3974b865b704de160a","sha512":"869245b6bd6a148eb79f10b5c2b56f622ff00a1ecaf0e16d687fb33a7d3b36397e27a4b88a1d53cbfb4f75ec5100d5f0cce31f6939114f24f0bcf651a190894a","ssdeep":"768:rJdlGwx37Ri555B9zR+J5uYlG/PwCEp24tZdD09wJ7:l6m37Ri3BRw5u2KwjJtiwF","tlshash":"55b2f18502a4e449cf1ce95b0795bebe6b1209776c069b30e533948851fd360b27d5af","first_seen":"2025-09-11T21:26:17.489332Z","last_seen":"2026-07-14T12:40:53.806122Z","times_seen":4802,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":25,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmserifdisplay/v17/-nFhOHM81r4j6k0gjAW3mujVU2B2G_VB0PD2.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.788Z","timestamp":1783920977788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmserifdisplay/v17/-nFhOHM81r4j6k0gjAW3mujVU2B2G_VB0PD2.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24572\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 14:14:20 GMT\r\nexpires: Mon, 12 Jul 2027 14:14:20 GMT\r\ncache-control: public, max-age=31536000\r\nage: 55317\r\nlast-modified: Wed, 10 Sep 2025 17:03:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24572,"size_decoded":25384,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24572, version 1.0","md5":"581414e1e5772fb61dd2de0efe6746c6","sha1":"b4de16f725d7403de71766d74cb79ee7fc47d1b9","sha256":"ed8b291611e32fa2d2900488dd48fc95faf0957b2ef7ddf1527e8d21dd9cf2df","sha512":"9f934be123abb4de1047c95021effd867b5f3cd352431fd2ce65a18d5866b487549531bbf0bf839770ad0c6fec2f5c37af650dd7d3bd9f11dd115c740145f7d8","ssdeep":"384:sTBxfZpbHUP71Xrp6tdJfuz4PQdl9J1pQGQl5SQUADVOlhsyF:sTBhb0P71sNf0xdl9s7Olhs+","tlshash":"2ab2e185177e2b48dd4221325d5fffd22d1e4be644fab386e82f27e14d640176e80687","first_seen":"2025-09-23T02:11:44.907793Z","last_seen":"2026-07-14T13:19:47.541153Z","times_seen":581,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":18,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.794Z","timestamp":1783920977794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://meridianyield.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 69745\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-14T13:14:04.379377Z","times_seen":32525,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":49,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"meridianyield.top/locales.js","fqdn":"meridianyield.top","domain":"meridianyield.top","tld":"top"},"ip":{"addr":"104.21.37.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://meridianyield.top/","date":"2026-07-13T05:36:17.603Z","timestamp":1783920977603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"meridianyield.top","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:01:52 GMT","end":"Sat, 03 Oct 2026 15:01:51 GMT"},"fingerprint":{"sha1":"71:84:AE:32:D8:4C:5C:4A:5C:15:92:CB:0B:32:81:24:6B:4F:6F:C5","sha256":"C1:77:1B:2C:C0:DC:EC:2A:F4:6F:C4:3F:02:51:27:54:BC:9B:A6:82:9F:F0:3B:66:58:6D:61:7B:0B:66:0D:58"}}},"request":{"raw":"GET /locales.js HTTP/1.1\r\nHost: meridianyield.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://meridianyield.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 13 Jul 2026 05:36:17 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Mon, 04 May 2026 12:59:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"69f89826-1e0cd\"\r\nexpires: Wed, 12 Aug 2026 05:33:35 GMT\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: gzip\r\nage: 162\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKR%2FXIt2nclaRPGKkFCNcDVBY%2FEcG8uc28lNMc1eouOo8eWS2K07wuLDD2yLkiYNw%2Fs3WkzFIbw22Qnpmgd%2FBqxNtNaoQEZcHPiKIiCCZPlynE5uMkfBtGuXKeQLhXFVk2yrUg%3D%3D\"}]}\r\ncf-ray: a1a5edde0e72712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":123085,"size_decoded":40708,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (531)","md5":"901c27fa93b188773cd9fac801ef1060","sha1":"f94e0d508503c3bdf7416acd044cb54d539d6ed6","sha256":"704e854432bc867ea259e00edecf33cefb3ab3dc87d8fa83acf06c2187f7e6b5","sha512":"2eda285edfaf6b76b408468fd8c3c1422ee2255dec5b3fe2d0f6f7fa01d1f8057ed60c36ee7100195f84341ec538344f33a9bf66f1cf2ea866d4f8cfa1d8db79","ssdeep":"3072:qYYIv1v+O4ik747+pGrY4zIrDII9mwBsEWofM2:qY/p+U73sAArBE2","tlshash":"a1c3fa1a58c1239545865392b2864553f32d8087ab48722cf7acc1295f8f4afd2bfbfd","first_seen":"2026-05-14T15:18:39.100122Z","last_seen":"2026-07-13T05:36:53.090182Z","times_seen":4,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}
