{"report_id":"38642ffc-c699-4f58-8083-ac30cab33a28","version":0,"status":"done","tags":[],"date":"2026-09-27T02:42:23Z","url":{"schema":"http","addr":"stonksfuns.xyz/","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"stonksfuns.xyz/","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"title":"StonkFun · Launch coins paired with anything","dom":{"size":304600,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9868)","md5":"33e381915ff92da8af6007936f0c08fd","sha1":"e6c116ce7977e056c3a085d1a3b00e916366e141","sha256":"65e7722844ed97c2004f6e9c953908c5adab2589886f8b1f86d5944eaec5181d","sha512":"9418ad1c759855d49d1f80ab52a9d41682391da8f13e3cfd957c3af12fb9c09ba4bf051dad6351a5fd30ff637adae6f1fd62b22d242f6a3812967b8f639861e7","ssdeep":"1536:FLkx/c64Jysq7vau/d8z3ezAODE0R5dX4nR9m9amXJ9SZZNSubuA1h1mDcQtCKVQ:FLxXLeXU1OZt0S7k4pKAZTEj77H","tlshash":"c7541917a341137f11a747d1f265f7a9d3a98209fb719278f2ac81a527c6eb08b33358","dom_hash":"domhashb9a569719822462ecae4db62d8c192f7","first_seen":"2026-09-27T02:41:55.220047Z","last_seen":"2026-09-27T02:42:25.954995Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"stonksfuns.xyz/","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T02:42:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.stonkfun.xyz","ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-07-23","domain_rank":0,"first_seen":"2026-08-22T17:44:26.479844Z","last_seen":"2026-09-27T02:41:48.327082Z","alert_count":0,"request_count":1,"received_data":6389,"sent_data":543,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"stonksfuns.xyz","ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-18","domain_rank":0,"first_seen":"2026-09-27T02:41:47.527863Z","last_seen":"2026-09-27T02:41:47.527864Z","alert_count":41,"request_count":41,"received_data":711534,"sent_data":21636,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"stonksfuns.xyz/loader.js","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e886cae008e07298e94468f920a72d16","sha1":"7cce1c005e6c7bf7755bc78243ad52c3dd0ab9d9","sha256":"99ff545897a33c73dcf409bf62cda11703247b5ab63f70c63384822db9e0f4bc","sha512":"6277f4503684931e4ca5e722701d6df4cfbe2b1da8fef817db2a9d132a657b8c77d409245533f2d7a7004e2415bcd2f28b39a9e269e7f222fcf169e80d9eaf8f","ssdeep":"768:HbMFca//9nZD8RUGKOsALd89coltAq+2Bkz+wpB:cX9oUGKiLzolt/DF4","tlshash":"1803948eaae621324263717d0abf11557132d4035548c9287eaca3102fe477ea6f7fe9","size":40669,"data":"","first_seen":"2026-09-27T02:41:55.223433Z","last_seen":"2026-09-27T02:42:25.962415Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-27T10:46:34.975736Z","times_seen":440163,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c863c592938d035a3d9377d5fcb74730","sha1":"c64743ac80c5aed0fa1021ba12179c957a5c89a7","sha256":"4ab47be21a6b67f1d7d1d8a119d4bd2257d68857bbba96f766d616986068f86c","sha512":"80b9e2e26ab95a225bd76fd6fa187305ba9d8ebe3d8ca4b2f6ef6a288d25c66032d87b36e25eb58ad55a8f217751ddb766c3b5abe33995467e708534f9a5f0a4","ssdeep":"","tlshash":"5251e3ab7fa916b01eefc69693cf37d5e20110022611c5a1b66e948c1fc5d6044ff6da","size":2813,"data":"","first_seen":"2026-09-27T02:41:55.273797Z","last_seen":"2026-09-27T02:42:25.990387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"stonksfuns.xyz/cd6c626b941b71fe3d6cce6e0a182e7587c504f4.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.014Z","timestamp":1790476914014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /cd6c626b941b71fe3d6cce6e0a182e7587c504f4.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Ebhr%2Bn%2FnJq4kj94yVs61gysqmU0Mgq3yMXXJaDiImmvTGsQqribaRC1q49ZyCpBcwhm1n%2B0cUj23wemQ%2Fk6%2BBNUUiFd3C%2FIGqho4evGtyic%2BGXlHNVL3Eij5IT0MTz9zQ%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-100\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e89fc356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256,"size_decoded":1110,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"52a058f7bf0b0a290f731cf7bc338267","sha1":"cd6c626b941b71fe3d6cce6e0a182e7587c504f4","sha256":"6633d948bcbfc06671b57bcdec8a3277fa133c2fe431b4514588a85bf2326f84","sha512":"849ca64aefe4001ddb25dff91f0dd41c7951c78416699ccbed678ff79740ec15349ea514a832eb3ff448e1aa503813fb0f92d78db41bcf74b34eb8e7981822e7","ssdeep":"","tlshash":"46d02bf1438c6f2d850bc368893895c4432e307873235d39c88c12301107107d6af254","first_seen":"2026-09-08T18:33:12.472187Z","last_seen":"2026-09-27T02:42:25.956443Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/7uFsXwyuyzKDiqdda4L2cq3DcpcdRqYhwe4m8ZoVJ1BQ.jpg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.334Z","timestamp":1790476914334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /7uFsXwyuyzKDiqdda4L2cq3DcpcdRqYhwe4m8ZoVJ1BQ.jpg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-641\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYoGeVVwUCgFXJrlX%2FJmu%2BcyZpJdYFkd3%2BGQx4vPDyRuBTJBwUEHbWMCUvLpqmM2bCF%2F%2F07IQ%2BNKQ8rb%2BFCHObAhhoRKDBbGHjc1TXVjWpFNiAUxImFUBEFRRiG8bP0nuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726ea9fd656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1601\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1601,"size_decoded":2541,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x95, components 3","md5":"5afda720c2afa9dee5399671b7cbbe4e","sha1":"66f9737fa6fb7818aedc83fee1f2b08845741122","sha256":"f90ebd59d7dfd1367ece502f6ffca3324b5755f8f3f58fdf7f3aac6b1934e16f","sha512":"a5e9070f473abec3a8eef21faecb8679ec2eed1496363ac7f90f0090df9c9451ab09df61cdbc1f59f117d94f49d13d635ce09535d25ea4be60ed8c2ccf04e3a8","ssdeep":"","tlshash":"ac31ea71766559c6ef703634786b0218a105699277050970cb8586e83dfe0e81efb9c1","first_seen":"2026-09-14T20:38:49.282304Z","last_seen":"2026-09-27T02:42:25.957699Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/image-1.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.335Z","timestamp":1790476914335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /image-1.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-1df4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1jsEVSVKiwVnfl9ktKv9T6H0BshbRoVzr2IBCVBe%2BKANQoF4i%2BrR90nrtmP%2FUfia86QRzArD0VBROfd1qPHmZf7UmYLDAyZyVB9Ig7YYnS7z2RBlcqEI90ffyMuBqRf5sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726ea9fd756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7668,"size_decoded":8600,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b7d2395d3ed15b1a9915d8cba51741e9","sha1":"e6b17439e9e2b58b7a25e2fd488a5b8642bf1f03","sha256":"e02ccfb4dd241839911de0cb7170ecc87c34777314e0543b509528db48053a78","sha512":"6c706c99e4463ece8ca1d483cdfdc21127e6001e18998b4aa2fd3d0a8ca0675573171bb2edec35da9963bbdebd3491639b4adfdadaa0bb89fc5a6bd96c99ba4c","ssdeep":"192:wSFkjvyyCKzRUopvPMhbHcRtLr4kJyJJsdy9MDJyBsx:XCjv3CA6opvybIt8idy9MYsx","tlshash":"20f1bf1ecb43afc60dc6cd72a90008b9763f4f9daea504442d6e1fb6d90db5501e1232","first_seen":"2026-09-08T18:33:12.484541Z","last_seen":"2026-09-27T02:42:25.958507Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/Xs78JED6PFZxWc2wCEPspZW9kL3Se5J7L5TChKgsidH.webp","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.345Z","timestamp":1790476914345,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /Xs78JED6PFZxWc2wCEPspZW9kL3Se5J7L5TChKgsidH.webp HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: W/\"6aac1d9e-1448\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 41\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yNfoXaxukXr33X1jd719aixOLjF1uCr4NzL6hga%2FqlVY2%2BQKNhG9FskOGvv8LoTlTrqttkyZIksFnyJVnK1UBLBtWq2TnqM5LMrZB87aWLCFLGFsVCn0xLcW280KSLVtXw%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a41726eaafde56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5192,"size_decoded":4902,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 900x900, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"29c97a27aab18bec0d1789535185d365","sha1":"a69a57399e79eddee1e08c3d399e567bd6bf1e5c","sha256":"389b41b7397f73ca36f953c078c797c65a77df8965221213675bcb04bdff5c98","sha512":"e8fc1908f9f9325a58b02bc0d80343b63f1176c9cd8f80caa02ce44945b37c4e24c0ee619eec31f3c52c3a8ff1cd838c71af8debebd5204897dfa75daeabbdca","ssdeep":"96:GJitcccccccccccccccccccccccccccccccccccccccccccccccccccccccccccL:aiFSMntuot1CFO6mB","tlshash":"33b139a5d732a2d5f28b0a7c7a3641201ba0cdc7ff47c788a3411c2c07213a6253edd6","first_seen":"2026-09-14T20:38:49.312171Z","last_seen":"2026-09-27T02:42:25.959523Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/4k3Dyjzvzp8eMZWUXbBCjEvwSkkk59S5iCNLY3QrkX6R.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.352Z","timestamp":1790476914352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /4k3Dyjzvzp8eMZWUXbBCjEvwSkkk59S5iCNLY3QrkX6R.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-b022\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TiBKfH8557Dvxl0NPdF8Ff45yq47K7iY8s5UmNrd%2FmGe50SMdm4bnve4IReeYC2DjwHfqkAtPn7PLJL9zydrmgE34G7RLYdxY2Gtxyhy6TPPN4sCw2nD4DxAXsXZ7r%2FhBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eabfe356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45090\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45090,"size_decoded":46021,"mime_type":"image/png","magic":"PNG image data, 653 x 653, 8-bit/color RGBA, non-interlaced","md5":"67506e85f48955bfe8d4e38b692d0610","sha1":"3836b499808e46dd667b48a7d38f5a880f007fa0","sha256":"4f19e48447cfb97915021bfa277349d9aa784198261f777a00d8fdf8a1d43fe1","sha512":"fd4d0f91f806f21064eaab7b0724eae9ae8066521843e378f28179ec5a68b34ffb7c65a25a106a1eed1d6a14878d26ee9d2de478140a3bcb45d6d932e67117fd","ssdeep":"768:dFrVrGhWAFY1MVYebYkyO8VeqOWS993A5DPC5cz7mABF6ZWWFuE:dejYigcWc3AVPIctquE","tlshash":"1d13f15a121e99c8ef17983683d90644df259c9e239268cfadb4cf4d1f1604eb3a25f2","first_seen":"2025-06-04T16:53:43.396316Z","last_seen":"2026-09-27T02:42:25.960281Z","times_seen":18,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T02:41:53.517Z","timestamp":1790476913517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n73gVRMS2EQx0EkbZU62w0LdR4xH22qwcMVTL%2F8IOlqLGgsZj1dG3Kkx6TQeNvSKF2K7DaTPe9%2F9DTCKQXaf5ZdU5jf%2FARwk6Nh0c7JyjVQi3wRGCaMOus%2F4hHV%2BmPO05g%3D%3D\"}]}\r\ncf-ray: a41726e5afa056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305112,"size_decoded":50006,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9868), with CRLF line terminators","md5":"0b72b5d8485ecff98678789157430056","sha1":"8f286cf8038d71f96f8670c37e3031f502a6500d","sha256":"0b04d5304576f8e0f46281776d4a69ba6f9d512625d510ffd0c05c45437ee3ce","sha512":"ac3d99f17498384e3443abebdcdbb73f9e4c85a7a985fd00eee5bb4dd2449bb657277dd98fc03a947799a08e2c13774876d7149505e2a340c11b588275cbc005","ssdeep":"1536:yLDx/c64Jysq7vI4/d8mohzAOSE0R5dj4nRsm9aynuXS2Z2SyLfhUhaf4cju53Lt:yLS99znxUmju648EPOulQXEj77H","tlshash":"e4542b17a341237f00a747e5b265f7a9d3998209fb719274f2ad81a627c7db08b33358","first_seen":"2026-09-27T02:42:25.961189Z","last_seen":"2026-09-27T02:42:25.961189Z","times_seen":1,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":2,"connect":19,"send":0,"wait":208,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/loader.js","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:53.924Z","timestamp":1790476913924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:05:02 GMT\r\netag: W/\"6aac1dbe-9edf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 41\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JTjmU1vgttDZXK0K%2FQPAv8vQiUyQBAN%2BFdUbgaVLPJpw7IXHnOn%2BcLg0Gqct97jPZsyiiCpWZcNpXjkESk5magtTqnYWgZNEv8aTq8FExIx6CQ78bWhww%2FosSH1DlJfVBQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a41726e80fb456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40671,"size_decoded":13315,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e886cae008e07298e94468f920a72d16","sha1":"7cce1c005e6c7bf7755bc78243ad52c3dd0ab9d9","sha256":"99ff545897a33c73dcf409bf62cda11703247b5ab63f70c63384822db9e0f4bc","sha512":"6277f4503684931e4ca5e722701d6df4cfbe2b1da8fef817db2a9d132a657b8c77d409245533f2d7a7004e2415bcd2f28b39a9e269e7f222fcf169e80d9eaf8f","ssdeep":"768:HbMFca//9nZD8RUGKOsALd89coltAq+2Bkz+wpB:cX9oUGKiLzolt/DF4","tlshash":"1803948eaae621324263717d0abf11557132d4035548c9287eaca3102fe477ea6f7fe9","first_seen":"2026-09-27T02:41:55.223433Z","last_seen":"2026-09-27T02:42:25.962415Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/popup.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:53.932Z","timestamp":1790476913932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /popup.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-55a7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbfDLGVuR2gzxe%2BFvLVqDlljOrWpXXuP3YsQLaZjhNtRpBKKd3siHeKKkS%2B1Sv6zr9CjxyTMk5tt81bq2wFHeuEAltDxcIjhAF95kdF2m7IdBHdrX5TWAjSh1D7NTNJhcA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a41726e81fb856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21927\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21927,"size_decoded":22858,"mime_type":"image/png","magic":"PNG image data, 690 x 228, 8-bit/color RGBA, non-interlaced","md5":"e9504fb37a067521c673c2769e66a4f9","sha1":"ebb87ad13aa1ef0f734135e21b9d7698ac763717","sha256":"5c4c9b77472e41331641207a6f804437ca30c64efd1cdbd5e29659cdfdd9ab59","sha512":"32993b2023831371cdd37421d71273d7fa958a5316ed5994655c0234b4150161ea1fcf79695ddc9d9b26c27632762d3117a5ef4c8c24748c68ee79c1b58b457e","ssdeep":"384:k0nXVyrpFCrVECub2o35pkKBwEOozq579txlJTLa2VkDopsog:tnFyFFC2Tb22pZWx9txPTeYkMeog","tlshash":"b3a2c096482ee599caff4db41c381798e4779950dfc50fadaeaac8c5abfdc103400a42","first_seen":"2026-09-27T02:41:55.227789Z","last_seen":"2026-09-27T02:42:25.963297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/f12e70f072a713bc0de8482d6c9ef56a4edda40c.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.024Z","timestamp":1790476914024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /f12e70f072a713bc0de8482d6c9ef56a4edda40c.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZZRYQVfcjpgeMOaeoLya8GsKmWExBGVGBC36WE4DuVifdMUBrASz5pzGKtm98nurNB7B8HolM5A0KS%2FHyTkFb%2FS0wAH2u5UwCmBJUppbsA9C3H63EqOZBVFvkZiCvZaJQ%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-105\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e8afc856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261,"size_decoded":1099,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e8c88be8d70e049ac32ddc61c82978e","sha1":"f12e70f072a713bc0de8482d6c9ef56a4edda40c","sha256":"0cada0d031de8ba9839c29644ab1c78733d6f87a40929c4f38e1ad861f445e5c","sha512":"cd4bb8f6ca85800b8ad5d295cafe430a2ddc1588a94a853d8486a5c245f45584f4571744fbda513a26dfad6a88fb0903f694cc6c9efe14be6c8e9502e116823e","ssdeep":"","tlshash":"81d02e31438d3a1e891fc3605a3c84d0472e98b833170c73d88d82b2620b057e1af688","first_seen":"2026-09-08T18:33:12.452149Z","last_seen":"2026-09-27T02:42:25.96435Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/GeistMonoVF.woff","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.048Z","timestamp":1790476914048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /GeistMonoVF.woff HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-10918\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZ3d7%2FmputA1NpK9Vyv4L0ficmrtc1Em5%2FzKFpyHEycWNtxhmfRrbstSSJQkKtvDDRUSp%2BEhMG%2BFP7AYZZpLHaJDi84nw66LAALtEH4N5L%2BIYE7F%2BvzO7LSNwQpLBxVvew%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a41726e8cfc956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 67864\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67864,"size_decoded":68807,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 67864, version 0.0","md5":"cbeb6d2d96eaa268b4b5beb0b46d9632","sha1":"fd8c986a8767d59a36e2d194299466720c916ee2","sha256":"e8b65928f551b17e3d67c3f709721b952c39842d14b00701f9232057fde73608","sha512":"0828401dbc56e8a3343958d9b38d64115de040417f108a10d8ccdb0281ac2dd785eeb634c0affc2e255d291970b70c682a22384ae9a4c45208d560b0813b839a","ssdeep":"1536:J/BT12BbemOlLQucYMXTGJ2JwkhNa+62xmFXENn4qD:J/l1abevLlMqUxhNjSXENn7","tlshash":"2463f19f8d54c168dcc8763ee0a65b412f882f03c1dde8e5121d6284278a55b7acf37e","first_seen":"2024-10-03T01:19:04Z","last_seen":"2026-09-27T10:14:44.2771Z","times_seen":2192,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/favicon.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.328Z","timestamp":1790476914328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-83b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mzp7ONN7xi0PNzv530OT%2FHQzJ3YPPvNhkmDWlBfP97RAn8FrHoowPvq6iHoiiElFFjMD71v2zmKZ0in7LelUf0%2FoGRYCVK%2BjjNzP7EnvkMmB3BN3MbATII0UadYNSrT6ZQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a41726eb0fec56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2107\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2107,"size_decoded":3041,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"381afa261c74efe166a98bf74c932494","sha1":"468956cc6d293127bfb15150f87343e11310ee16","sha256":"b3f0c1cef9781ca0c5c5d54022c742db641760fb130b23cbabe09e756fde7e19","sha512":"17e88cfc37e31eaab64e3337d486aa32e3c73612d1402099db699ec0961e619fc7e42657c8a66435e87a7569063291cd85cce6c012ee404ee38ae7cb5b93a629","ssdeep":"","tlshash":"25413a9bac7c78c2865473380d005b3af997787329d0f8221b343f22345fa8671d9979","first_seen":"2026-08-22T17:44:30.265796Z","last_seen":"2026-09-27T02:42:25.965878Z","times_seen":27,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/8ea8a12959c6737aa4c7a54ae6967c67116182ae.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.008Z","timestamp":1790476914008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /8ea8a12959c6737aa4c7a54ae6967c67116182ae.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p88%2BOWdfbmZyaK5JNy%2BuWuqS4nf2qWJkc%2F26uDeQ59hYKsFxUOFstFPPV66NLQvl%2FFGaLb%2BmR0FjXZt7hi5piLiE9lRXKkoAGaBkBVwJAg8SX8q5nny2ZqHFkpDz6umg1w%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-102\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e89fbf56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":258,"size_decoded":1116,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4f0c54d2b531079d0ff79a5746ce853","sha1":"8ea8a12959c6737aa4c7a54ae6967c67116182ae","sha256":"237053ac5c9782df8e249c6a720b8cd5d35af3edf02e94a102d9f5ce105cd9cc","sha512":"dccd1ed5473768ac7f9576bb504ef14b5f26b27129ecc8384c4a1c521d439b7e1007b3e6d25723ee6868eef0c29c8ec3b6efad7897ffe86801b391e4fd8b739b","ssdeep":"","tlshash":"7bd0976dcb9c151d805d877cef7b0900039e95a6325e0a31c88c3333d103266f48fa80","first_seen":"2026-02-14T17:21:55.904454Z","last_seen":"2026-09-27T02:42:25.966695Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/a72f5788d9cc3e82443f803eb8bf026727221578.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.016Z","timestamp":1790476914016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /a72f5788d9cc3e82443f803eb8bf026727221578.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y528Xofl58P0kRZvAl5ULhaRi0PFaOzX0HjlEvkyFuAjLWhkusL%2BEl%2BdTkgl7eMQCjAbjNlh7GsMUykNowYuetHUKbBLs27l2zf8p%2FRnfJ%2FJVQqgsflcgW%2FD2jXSwCyEAQ%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-384\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e89fc456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":900,"size_decoded":1378,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2d0a101dbef0a38f9bdb05dd9783edda","sha1":"a72f5788d9cc3e82443f803eb8bf026727221578","sha256":"7565322c1447f0d3f34b6a273786b4d9cc4cb2c9ecf1c6758d861988b05f9b1c","sha512":"f33c28050011d7fbe4786d0f4bffb512bd927ed3db7bd59b407c806b62d8110d8085fb29728ca7d5d72f7142c7afc396093cd074a53c79cf79a25c0831b004b3","ssdeep":"","tlshash":"f5116fba869d3bbd41975356521280607faf94bc760652604e1cebf036c771ed7df044","first_seen":"2025-10-18T17:47:24.868608Z","last_seen":"2026-09-27T02:42:25.967381Z","times_seen":16,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/image.webp","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.340Z","timestamp":1790476914340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /image.webp HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: W/\"6aac1d9e-14b8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 41\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JfQEuvAa5uXIfrL66tRrh8v84A0U0RqGQWZAL1VeQyg%2BpmYaWZDBRC1c33FhOGq6NC8dSchM5pTnTMLsoDSXrSPGqC8g%2FeIr0vKsbdsSqtJQpCHao7AtL7zJ%2F4%2FA7pdAQ%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a41726eaafdb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5304,"size_decoded":6272,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"51bbecdcf62eee145983457766f70646","sha1":"23b62d627e183a0ffd0889ad5f8ad4e416ccbf23","sha256":"4e5598f0f3c6e8d36a39ffc08033ecba4338647e63f54435cc7b0010349d6bec","sha512":"5f4ccca558f51e399c97c3c331f7aad2ecff0d84d99b4b886d8f7fdbad7edc0e4ca611af3faea59290b3f417e0eaad272318624bf3ebb20b4e6c6e8c06c51c42","ssdeep":"96:cu3j22YbV9aonbi92eeNxSOinlKFWSEFe+qErJy5zpCuJviGTRD:cz2GDnbqelGKFhEFeatyBpLl5","tlshash":"66b1affb04fc86f1d12beb45499207c7e138e06c4e1e18272dd788535270e9e182ce98","first_seen":"2026-09-27T02:41:55.230277Z","last_seen":"2026-09-27T02:42:25.967984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:53.927Z","timestamp":1790476913927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 29 Sep 2026 02:41:53 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7yb7L5C%2Fa3TyFIqBvpTSs47GVUPKo4xwm18%2FdSXmUfVoTqZFVMqeMY4qYa%2F8O7Ti%2FcuotRt5z1N8neWL6v7DWpA0K37cAfXKZ6hdMAkv3CpD8RhS9wC8U4pPSWlmqIlxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\nserver: cloudflare\r\ncf-ray: a41726e80fb656b7-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-27T10:46:34.975736Z","times_seen":440163,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/XsoCS1TfEyfFhfvj8EtZ528L3CaKBDBRqRapnBbDF2W.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:53.934Z","timestamp":1790476913934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /XsoCS1TfEyfFhfvj8EtZ528L3CaKBDBRqRapnBbDF2W.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-7f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X3p4Zk55KNJciMRrw8GMk%2F9U7BVxd6ysrrr4cjf55Lg9ElPweo0X49x%2Fjs0HLSXIuGXE71wvjbUg%2BdoP%2FNy5%2FaQXboLxYpc1e%2FMdz8gy9LmCXeB3%2Fr%2Fgnync4jq4a%2Fp%2FyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a41726e81fba56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2038\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2038,"size_decoded":2983,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"6f774df653a4bcf40c324f950753e566","sha1":"0b4ad5c7252d2aae6d7fc2d96f13611a98afc2e1","sha256":"48cf9ad4e0da0c452bf66a7ac531c6bf870b71e50ac5316fd89fe39def92d944","sha512":"f63739e5af57fb0999f794229bbecc6906f16161616d19fac56b5f10709a7ecaa1a5c39a5b4447308c9327b343128167c6d479c3f823077063e506c92837e6e9","ssdeep":"","tlshash":"e6412ac17a95f574c4b680f9f86a1c984171bea2b6c3f193111dccb00ea498e71381d6","first_seen":"2026-09-08T18:33:12.460199Z","last_seen":"2026-09-27T02:42:25.969411Z","times_seen":12,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/d1442fdd6b31aab9ad360171f537b3755084dde9.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.018Z","timestamp":1790476914018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /d1442fdd6b31aab9ad360171f537b3755084dde9.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FSNh4Tti3wheanaeeFXgtTwQzHB%2B1epmWzUcvmGCAFpDBthZscRKV3nvw1kPeJd4iq7T3PoZzDk%2BF1aUqwuZgQfjsoey8sa0T2H2fLS5cTjrhP3I5BYg5m14W9fOhqD5Q%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-208\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e89fc556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":520,"size_decoded":1237,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0fa48800ae14df9b63c4cb9ec5c1e822","sha1":"d1442fdd6b31aab9ad360171f537b3755084dde9","sha256":"62f65015a6f47542d369302161625c57dc13d10336569e0a0da6dfbdf789a1cc","sha512":"5c77cf0849c612d5199631e1fa46be80ba1759ceed595ea56b6156aca96aec1ea6776c44e467c82f114c46c0396df5aad73d053ff998a9f907c7e826732d3dbd","ssdeep":"","tlshash":"75f0e9b6c35ea53c4c8f8b9869654960771fb07576170fb45cade6f4100392ad7c7144","first_seen":"2026-09-08T18:33:12.473207Z","last_seen":"2026-09-27T02:42:25.970006Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/775749675f498a892c01e42d3dd7fd516766bf17.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.019Z","timestamp":1790476914019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /775749675f498a892c01e42d3dd7fd516766bf17.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ugnUOrkEXktxnf8YBegrgmfHBp%2F3R9E%2BW9AwVbauhzdtAte1ronSzmwsVYfxSJMJFq6W8AqJOXO2DuaPvhnbjH2RXesINZY9bY4ZkHfgoZ%2FXCq%2FabJkwghGOrkHTOZLu7Q%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-125\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e8afc656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":1117,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"736479ea43da5b04ea708355ffad72ce","sha1":"775749675f498a892c01e42d3dd7fd516766bf17","sha256":"f2a2b89e9dba23cdbb5e72c365bb67eb3120926c3fbe904c0af9e4ca12c6018a","sha512":"66b9da6f7121b67195085b6e31d5631454947762d49ae1608c877e54eb6606e4bb7cd878408343594c0760b1fd3679cb5017731355f578256f07df23b6af19ee","ssdeep":"","tlshash":"64e02ba2935c0d0ccdc84767ac593591431e1070b1871ff42c7d0d4113902caf6cf14c","first_seen":"2026-09-08T18:33:12.506378Z","last_seen":"2026-09-27T02:42:25.970718Z","times_seen":7,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/07bbe3779f04620386fb8ca456ea353a896cf3d1.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.020Z","timestamp":1790476914020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /07bbe3779f04620386fb8ca456ea353a896cf3d1.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xlxtpEGM0ULTs%2FDHSk%2BYH4SYJVjWk6TBppgtACLcZsuXjGTG9%2BZ3PgAfOH2dnyzvqx%2ByjM%2FpcVXCMBGaV8dNTeZl%2Bl%2FOdidVnT532jxzPmH1uCHzaCIMX5ncO%2BtcTB340A%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:28 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9c-7b9\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e8afc756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1977,"size_decoded":1804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b50d716c172f4ce8451846413801d607","sha1":"07bbe3779f04620386fb8ca456ea353a896cf3d1","sha256":"6e60128575c314bb0067eeb3d35dd4a78d85df5432f178634eb16f5aeabf41b3","sha512":"fdbc826154628300920cf9ce5e1444f2ce092b3bfbc2d5adfa542726291ac17c3f09cb2551d9d291fbf18ac496b18259dc8c9d0c7b1dd6f08a53fb662cbc4c43","ssdeep":"","tlshash":"4c41ef4aa7e57bb855cbcb10d07586107a9bb1fcd30b9b785374bbe0f246b91d19009c","first_seen":"2026-09-08T18:33:12.462676Z","last_seen":"2026-09-27T02:42:25.971385Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.stonkfun.xyz/stonkfun-logo.png","fqdn":"www.stonkfun.xyz","domain":"stonkfun.xyz","tld":"xyz"},"ip":{"addr":"216.150.1.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.327Z","timestamp":1790476914327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.stonkfun.xyz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 02:33:12 GMT","end":"Fri, 25 Dec 2026 02:33:11 GMT"},"fingerprint":{"sha1":"92:3F:5C:2A:1E:C4:AD:E3:F5:8C:29:98:A7:D5:37:28:28:2F:20:D7","sha256":"7A:0B:7A:8C:DB:A5:46:50:15:34:32:5E:E7:DE:88:E1:4A:20:CD:6F:BE:05:B7:17:D7:03:64:8C:5C:B7:1F:4B"}}},"request":{"raw":"GET /stonkfun-logo.png HTTP/1.1\r\nHost: www.stonkfun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 66424\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"stonkfun-logo.png\"\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' https://plugin.jup.ag https://*.jup.ag https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' https:; connect-src 'self' https: wss:; frame-src https://jup.ag https://*.jup.ag https://www.googletagmanager.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /api/csp-report\r\ncontent-type: image/png\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\netag: \"86c113d7140e4d429a1f42b84d5c0b20\"\r\nlast-modified: Sat, 26 Sep 2026 08:14:49 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /stonkfun-logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gsj26-1790476914443-59ffccc64c81\r\ncontent-length: 5045\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5045,"size_decoded":6389,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"86c113d7140e4d429a1f42b84d5c0b20","sha1":"4a2fb7f74c39c75a6a19127154543419b1d20f0e","sha256":"f5f68e7da8b202bac4491f0830e3c7100f29fd511c173d9f23905bdb57b6db38","sha512":"603d648603c11e0e38b8e244c35961964a6ba5338a29576ae8016e9cc8c40f587d1ea896202281752e502aac70c2615ff20ad9b63415897a29ee5b99646a54a4","ssdeep":"96:NkCf7AgjGaXpeJkAbz411NrL6xx4L/tlry3D6NbmAkEaHstsM+sD:NkCf7AgKmAbz41frufay3GhmNEaHcV","tlshash":"87a12afb4bd3288ddb6afbc350e7823682347c64fe652d81bcc64d023124a1f1791222","first_seen":"2026-08-22T17:44:30.259399Z","last_seen":"2026-09-27T02:42:25.972045Z","times_seen":19,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":18,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/DKNGQFNGQmoBdXSRGKJ8tTu7uPDasw5JDcfMmWniNfow.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.339Z","timestamp":1790476914339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /DKNGQFNGQmoBdXSRGKJ8tTu7uPDasw5JDcfMmWniNfow.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-1614\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FCC72kF4MPCNrGoGm9QknM1AuA39ksRr3qEFtkxbLN%2Fcbv0NgEewDuzUWW3cNl0QCSZl0vh2e73ewp8ABh3iCKRTQJPVBzEGx4oeoqFNd%2Fxu%2BC0fUF5Ap2%2B43zjwpIobg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eaafd956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5652,"size_decoded":6588,"mime_type":"image/png","magic":"PNG image data, 447 x 447, 8-bit colormap, non-interlaced","md5":"ce717bf7c628561b68dc9fa7a4963501","sha1":"fae119a7ba0bf3ad4d23adc023fcae728aaa7184","sha256":"4e470458b4bcdf51cae3129fa390773483e44d8e65f59718fedbdf109d7ae1ca","sha512":"c7fe3501a194d3228442a4f5066c3145bab852869cfc7bae84f0b22a032e0a0c99a7b3b6f3e1df5a87702f7cf99e061f34814f3dcbfa3f644d3c8843e26f481d","ssdeep":"96:S72S/L28dey23tlbodwgWTLOZZKLjzTZ0NDYe67yPQy9xfgqimLWhm:22SD28EyStaevOZszTZ6k52Y0uEWhm","tlshash":"17c1aefe7179d7d3da2464b0d81b4c244c789c719ea3c8c6646997ef05130026f7482d","first_seen":"2026-09-27T02:41:55.234687Z","last_seen":"2026-09-27T02:42:25.972677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/ENbdipSawCZv6Z4Lv1hvGpppmnbS3pArfrpJtcTi7p3a.jpg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.343Z","timestamp":1790476914343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /ENbdipSawCZv6Z4Lv1hvGpppmnbS3pArfrpJtcTi7p3a.jpg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-8bd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g3SBLnMKwvIg5KS%2FcFASITZV6Rx9Rw4AnemisGsUCNK7RXuBzNwpYTz%2Bhv0ja8vd0OoNAcpNBnYBdrzvbc1FxnT9jj%2F11in%2BsBs%2Bl%2FBQDqfbAmAFxy3JfZSljbRgYuCZ%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eaafdd56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2237\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2237,"size_decoded":3177,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x96, components 3","md5":"18996eb8c9bea38ed54edac3151159b7","sha1":"8db92d98a42ad0bf657ad52c1d22ff196ebc17c5","sha256":"52326eb394c1511406ea590cc62f00df11e4a954642946628e3a960e7898c25f","sha512":"bfcf10357ec6fb09e8e147156b0993a3721dab66009df807dc86b1b913e722e8ffed11ab9687a8ea85dba8abac09e8a3944216b9b14d2c2c4e1d9e2d31778399","ssdeep":"","tlshash":"0d41092e76999157ee2d5c3626d8b3f17f5437f74c00baaa0048c188c3bd0b06b179ea","first_seen":"2026-09-14T20:38:49.310581Z","last_seen":"2026-09-27T02:42:25.973657Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/stonk-mark.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:53.933Z","timestamp":1790476913933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /stonk-mark.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40me21HefzAVB0oV90TrdLNqpmkQbK8sAUKZVB8SZPiD51pLWWR15an3y6uNq%2Ff0YZs5zeqg1jrj9koHSp1Ker%2BvJ%2BnLDiJTfSHhY3oBV6LJi8x0psGch5VA1sU2W3O2tA%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=5,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-32a\"\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e81fb956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":1399,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74b28a0c5ab1bb335c46aa994f8d1f27","sha1":"7976ad36d14e2f4724a5d5a81c2b30800dde978a","sha256":"7417b870b953aaf29f1c51c9029374e9e6b0beb6ff0612eb0ce8724ea07228bb","sha512":"0c77f8aa075eaebfc5340771631f2ffe7588aacf48375e4301fe5be93bd02122bd6e1b676f2b7bd973f63601ddc5de110e31a85c2433035c907dc096cf4fd6d0","ssdeep":"","tlshash":"e101f187e23816346aea5b74497594213dd1b9d5b071e0acdcf31a82f7167f09024a7b","first_seen":"2026-08-23T15:30:14.179803Z","last_seen":"2026-09-27T02:42:25.974596Z","times_seen":16,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/B77x6QzyvAbwR6RXZyQajSN6TppjKsRxTa5YfVqCss5W.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.353Z","timestamp":1790476914353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /B77x6QzyvAbwR6RXZyQajSN6TppjKsRxTa5YfVqCss5W.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-1a62\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNC8lpRy7QDz%2BpBqf6LOUxn2qLQ1g8VGLA3217N%2FaFojpnaR5DktekEn7Jn3bhkCdNmD%2B9XQgsBrs6Pp98Fq6WgvLjcuBdUxyeGSYdfLMZDuSBnXp%2BujtY6vc%2BgVLD1veg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eabfe456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6754,"size_decoded":7690,"mime_type":"image/png","magic":"PNG image data, 96 x 88, 8-bit colormap, non-interlaced","md5":"d3a57919728f4027e718527bb91ec3e1","sha1":"233243cb54904fc467aa6ad1b5ddf073405fe10d","sha256":"7d74a520d756e5caf53890bf3fc00b2506ef732f6d5dd4dd8ad619b310ae5bd5","sha512":"6a4ee0cb7300098e6a4d36246710333362ec7a765b795bad02f044ac5f24c4c98c572986616d1287064e9386a38dabda19e79c462c4b2507551910e6c5783d3b","ssdeep":"96:Sb1ForlFoQGdrUQJrQUXlWBKQylGv+I8tBymctU+Us5aXH9vb/1xiTvjAD+K+P:iLCfglJrQUXlWkY8tB/ct6s5exb+Tvz","tlshash":"f1d18ee28eb0db55c4c9a2031b47529bcbd2635751afb5a001d5baa36750c6d48faa02","first_seen":"2026-09-14T20:38:49.277614Z","last_seen":"2026-09-27T02:42:25.975239Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/Xsv9hRk1z5ystj9MhnA7Lq4vjSsLwzL2nxrwmwtD3re.jpg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.354Z","timestamp":1790476914354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /Xsv9hRk1z5ystj9MhnA7Lq4vjSsLwzL2nxrwmwtD3re.jpg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-1367\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L3CXjKqb9j6c90QPsduimUWa06BhxplsxZRs5ycxjFAO0V7NVoGvJAZkR4cdjY95PCYp1kg9aGCFXs1mwT3WGKaHVZZWG6Vubn6qEQTspltOSgfmuz5t%2BNonahLmac5GaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eabfe556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4967\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4967,"size_decoded":5896,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, baseline, precision 8, 250x250, components 3","md5":"c302f7c36d8c4b59b79abbc8fc657f0b","sha1":"d29c07c07b0a7f7f09ae45812dcf8cc7cfb8ae25","sha256":"ea4b6cbeac04bebb713bb29e8a6890948eca793ea4f17662742986b18cf06216","sha512":"cad476b4ddd3af3c3a842ce4102982ca8cf04024156545974b4d7b58efd73e4f790876acc0952f67ca76a13ab2968b7aa5b4c9261e540bf6d039841ede831ca0","ssdeep":"96:QVTBypJmK9Fex0SJw4C/Qk6HeESYNdoCw6S62bmJMq:kwpsKnTSzUQkXE9dpZH/J1","tlshash":"41a16ca7cbbb8c5cde6e1f355546154a9b22733000c9a5834262f0e33b1759fde10560","first_seen":"2026-09-27T02:41:55.251879Z","last_seen":"2026-09-27T02:42:25.976062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/5wTHVjcQcbpWaKGLe2w8T1hpGoQsLAxhTvSMpXuKHPUx.jpg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.355Z","timestamp":1790476914355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /5wTHVjcQcbpWaKGLe2w8T1hpGoQsLAxhTvSMpXuKHPUx.jpg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:28 GMT\r\netag: \"6aac1d9c-877\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xjTRL25GiIILzBVta5gHqawRMOunlkVfbtWe75g98zsLc79Y7sARbVSIiJY4%2BaVUK1LHk7Bm8iPZJTrWrU6DcuOE35yIv9s4Kmb3NKUCSsd5VyACbnI4%2F90tbug40uhLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eabfe656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2167\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2167,"size_decoded":3097,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x96, components 3","md5":"ed8e571b83f9f609c0ecd37eb643c15f","sha1":"27c0dbd42ba11075fed0a7b8cf671ba46c3a1f38","sha256":"f5f3b98a5492b4be93a7b917f5ef154632d0734888a0e2b590cf38deb6d31d10","sha512":"469b32521f6eb9afcde7389fe2e13d2378e0e57c1aa5b9700ee5e676256124f9aac9ba91970e39a7030f819924db6e6b316c5c09c606d8a0499369dd6bb50582","ssdeep":"","tlshash":"9a411a7f3801248fc0f1f93dcee8895d490e28646d66962d49c0a92a1df13561b994db","first_seen":"2026-09-27T02:41:55.272354Z","last_seen":"2026-09-27T02:42:25.976948Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/72ipFM6nub2FJEzQjhLSG2KGq7YDFQ2qmp8ZpYwcNKyh.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.357Z","timestamp":1790476914357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /72ipFM6nub2FJEzQjhLSG2KGq7YDFQ2qmp8ZpYwcNKyh.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-1fd0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FJ0hcYXYuulNBxasZQIvEHj4K4nLp1aRxFYLDBjnygUoXotPG21bixPyw9yqHn7NEY7jtLLrAkLutvG24ovwmi6XfWWE4%2Ba5nat08UdetVbqB6TiWhXJ0Ee7bpEMd2%2Fjkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eabfe756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8144,"size_decoded":9074,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"cfe9bd66c2e097c98cc7520777ba6a20","sha1":"356ccc1f6658f72ecfa01ef18557c5ffdb50dfc8","sha256":"12c7f0340057095709c9b2d7d1e273f24c62c0dbbdb31aaf5aed329ffbd78c9d","sha512":"5f04e147dfb28123e6d5d26d88f0167a5e3f31a70f6753ec59a5d7d7f31cf2c9f06c7cd73cad9a180862119290387ea325b827a69e6362282b274688ee246f4d","ssdeep":"192:JxDvJNwotx47KautcAvU2LO9sa7tkIaBJ6Wrk4Z:vJNwaa7KautcKU2i9L5kIyJjrjZ","tlshash":"08f1a05de7ab57f9b87f92865085a20379facb0fc0bb9eed3213238418456102b91e85","first_seen":"2026-09-27T02:41:55.246373Z","last_seen":"2026-09-27T02:42:25.977724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/image-1.webp","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.358Z","timestamp":1790476914358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /image-1.webp HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: W/\"6aac1d9e-870\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 41\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yCt5ijk3ny45UVB8fy8Nq35qplFllrusdKW3ZMDwxMHYo4xBsZwLaU2UKhe87oQPi%2BNDlPrd0q9bfVjlFl8kSyOswESwhuHOktv4kQC7TiBE5OwbF6N75DHHC%2F4E%2BVnJYA%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a41726eabfe856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2160,"size_decoded":3125,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 192x191, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fca50cf67a61319fc37b4887238ce3ff","sha1":"91b4c2d13006941bc570d1e3cd7ccce557917420","sha256":"f4842b6bf83f2b0731e7e811966ccf029d55f8a4a98ce947269e11c6d0ca6241","sha512":"aa741cb7619c39f90782d7b985ee1b0058ed4bd3820b8e9af8806a4e2c4a1b64ff280ff83b0533fd0672de13f5e681e1069abef18a95a4b46b083ada0f8cbd40","ssdeep":"","tlshash":"f7412b1ad599c5e1de00e669e80de9012bc4706dead44d1a4c1f5eb903e0772b1167b9","first_seen":"2026-09-27T02:41:55.221842Z","last_seen":"2026-09-27T02:42:25.978399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/HDbZ7zbR434Z7FLG7wwLBqfupJbf4fRcvKL9JmAn11sp.jpg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.360Z","timestamp":1790476914360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /HDbZ7zbR434Z7FLG7wwLBqfupJbf4fRcvKL9JmAn11sp.jpg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-81b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4pkJ6La6KJyBmo9un0DIZfpJ7CrPoxvq7N8stv08pkC2IWAzNWA8cDjGmA1S1uh8knRxJwrnsi7NHb6c0EVHi0k71RtS9tUm0y%2BOmwr0TKz3F%2B8zFUZ0jerN211VHJgDRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eacfe956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2075\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2075,"size_decoded":3005,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x96, components 3","md5":"031fd9b4d149097d823cca04df629cc2","sha1":"6c459aa28e1c3f37529367dd6b1d96a2b7a654a7","sha256":"c0eca799decb5b634879f5a0a4cf0dcc3c2090fe727248fd86d5049d2b17b74b","sha512":"bbac3f7ccd951102184435da4d0d7294fcf784658e034e430892d92aa266f3044407af986ff34cac6ca8575f068167a113db6a96d1f19e16ba8cc89257c3ebd5","ssdeep":"","tlshash":"95413a08a3e884efee17337ced940726bb5277766e8c620341ccb9942438131d1374a4","first_seen":"2026-09-27T02:41:55.253464Z","last_seen":"2026-09-27T02:42:25.979218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/0rkw7hds3qpf8.css","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:53.926Z","timestamp":1790476913926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /0rkw7hds3qpf8.css HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: W/\"6aac1d9e-1078b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 41\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppnTKjAqk%2FktnMXynqkkI45oT7VTbBtnhcwni03XAmy39ECm7CuCAOqKBGEymUWRS7taePBYh9q9z1FSnVq7jFYJA4y0XLZqEYhLmLPpMBpKIb5Mtr5Q1rz1L5p8NzZcbg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a41726e80fb556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67467,"size_decoded":15452,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bfa76635edd9c7b8b22967bcbae5f384","sha1":"7f2eda1af576073290de915ad4bb00b8a80fe283","sha256":"8f2ac67873275459158124b2fa68717e6300dce812d6cee1fc9477627552911e","sha512":"c54f323d5baa10009b35ea749093f3acc5661d071b0a6a08960436c7ff4368e114621619101b2633bdd00c3a18751af438d98f4365915dd382dd71b7fc036595","ssdeep":"1536:bS3ucKeWyYDOyKiwJK71itMHymimasevOmkeRrWQmoBKGshOzUN/:G3ucKeWyYDOyKiwJK71itMHymiDpvOmY","tlshash":"b163b5a0f325ca7fbd33657da3acf88c620ab1469d1197e8fb11221247c7bf66c52614","first_seen":"2026-09-27T02:41:55.265913Z","last_seen":"2026-09-27T02:42:25.980024Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/image.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.332Z","timestamp":1790476914332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /image.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-35db\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCWD%2BTyftfa5xOj0jnDCheQ%2B2DUHvHkIoSmtF%2BgUIq3PiO9Iblmf4I1o4Crls25jVBa2EJNrhnbBt%2BkTnoNQoKAhcWzQ%2FuiJ9DJNOQICLfGpd6Rbtt5cQknTlgyH0ixE%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726ea9fd556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13787\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13787,"size_decoded":14726,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"cc1f5c8bada0498da96974288c87d75e","sha1":"72ff09f3d9b323915e0fe7fcd453091c3b03b810","sha256":"cd1f7ce90a14b24ce98e8ab43a97d2ea2382a4fc1f36bbaacae8b772fa4a7063","sha512":"83ce3808c307a292d9cb6e9a8e1ccffa64a3a622684e9ce2ac97ce1f23df2fe34507f7f7abf8d426e7b2be3d7e4df91a95c0842256d38fcb214ac199d95b103c","ssdeep":"384:qij0Kjf9hG7sBa6CmmaAqfX4oegUMyVkCL32Rk:twKBK/npq/4oRlCjCk","tlshash":"e952d1d96be43f57b99baa4a19117224c876a63ce58c704d23f0dac56138d0cd3e93c3","first_seen":"2026-09-08T18:33:12.474495Z","last_seen":"2026-09-27T02:42:25.980875Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/98sMhvDwXj1RQi5c5Mndm3vPe9cBqPrbLaufMXFNMh5g.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.342Z","timestamp":1790476914342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /98sMhvDwXj1RQi5c5Mndm3vPe9cBqPrbLaufMXFNMh5g.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-2b17\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=do%2F8e%2FoVv1WtblH%2FAAX%2FevrY7V3HmoiSGWGXyQkiKF9qN3chqUtBypz1Ia%2FbuhpUfOQmS2KM0lqsJzwcqOPSMfhNg80d6dmRtJfHTC2kpweLGLsBp2noFf8OLs0%2F3nwYcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eaafdc56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11031\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11031,"size_decoded":11970,"mime_type":"image/png","magic":"PNG image data, 576 x 576, 8-bit/color RGBA, non-interlaced","md5":"ac4dc21a73f24878406528ab8086b2fa","sha1":"11c10eb7a5ecd17ffb61048f590e7cfda099bd56","sha256":"4d210e44f273db8d4089cd44c86e24c057969495c8ba32d1331c30badd91102e","sha512":"33deb19cb8cffccf76e6cba5318e3177d03f239dc6b13469889c471cce9418bae8383ca2a68ed67503a3aeaa4b8bd5309834762ec50f4ef1a2242b6ff8353fd2","ssdeep":"192:hmu0d4J+USRImHYXg3Efnj96Nb0NVqjL1WUHgLKT3EGD/hzBg:N0d4gFRImHMv3NwWUAWLEezBg","tlshash":"5132c08342791aaad44f397f97e3fa8c709e00b844042fa6d336b54a395ac82a59158c","first_seen":"2025-10-28T19:35:39.589635Z","last_seen":"2026-09-27T02:42:25.981486Z","times_seen":112,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/DzqTc3JmkcToAq4b4dXnvYAwTUpbtZud15rHLzbURG5E.jpg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.350Z","timestamp":1790476914350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /DzqTc3JmkcToAq4b4dXnvYAwTUpbtZud15rHLzbURG5E.jpg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-786\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2CqJiyU2GtYUiaHbGRDC6tNX4ty3W%2BcTBM3VG8NzLvo4T%2BwAQOfspvLivCnYelV8hVbCyoUhb7cNqMFy8GjnBlzTXPq4YTSZBe7ePDXI8eFEtTZP7Hjdp2x8ETAlodv5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eabfe256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1926\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1926,"size_decoded":2856,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x96, components 3","md5":"41f869152ae71df93c7b9462b726b9fb","sha1":"6a55893381989f2f3bebfd99002a267b2dc29f8c","sha256":"0547c386c69dccc691e31b7984afd2dae282bf1d57d02dd114444a698d4f8576","sha512":"186a16ef1aa9aecdf39141a1353ca87eb791e9fffbbb3314a4da52db111db6c1b6fd417ac429504bc6972aadb316927ff19498026627b9ee139f7da603150acf","ssdeep":"","tlshash":"1d41e87ab2202d4af63db87690edaac4e30e3cc7283551f1266988e8143d15e8d3a684","first_seen":"2026-09-14T20:38:49.291175Z","last_seen":"2026-09-27T02:42:25.982331Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/confirm-popup.css","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:53.923Z","timestamp":1790476913923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /confirm-popup.css HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: W/\"6aac1d9e-1583\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 41\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGA28vJSCYFnl6UragRQxrOlG1Kj3z4c1rwPbqTBIrU31r3kje7xvA5Ir1%2FAeExE5uCcel90q5eLlJLRhnideZqs%2F08XYsgIHfwwObcZyKKqv462Zg2mpQFxte4Ze3q9lg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a41726e80fb356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5507,"size_decoded":2879,"mime_type":"text/css","magic":"ASCII text","md5":"2ab0b37a87041ca853ba4efd281e529c","sha1":"7cac376c05592e7ba32e148014f2e4c51e68d845","sha256":"469969fe15707357453ccfd972bdaf6eb35b671f6f5b0e087d1749c1e0234ae1","sha512":"248073de4bcd109a24a371856c956f0a4b02d9cd1eab01ae32dc33a69fa0aab286d111ac28a6e49ffee65c8eaed68dc1453eb3342a882729a4f72bc54e4babd5","ssdeep":"96:hbCLgHX8ZahCif9Iu9N9Qxt2+S+/+1E950x29H0pq9+ASwCVk+q9Y1z59axlps4:48HM8UiWdW1HL3Vk+RIpd","tlshash":"38b1439b97a99208b4f3d59c79835f06336cc0136416dabc6bd1245cddce09ca27379d","first_seen":"2026-09-27T02:41:55.250578Z","last_seen":"2026-09-27T02:42:25.983913Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/stonkfun-logo.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:53.938Z","timestamp":1790476913938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /stonkfun-logo.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:53 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-13b5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llHkLkHd1Poijits44J6xj470wZYUy%2F3DGfCEvflFvcZtUGCQw6KeBi7TLE7OrMo8oNalBhLwgpIoXH7puQB0tFqMmW7yi9vsw%2BcPohZhitKe2NRnOlMA%2FI4EGRwWMgUjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a41726e81fbb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5045\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5045,"size_decoded":5977,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"86c113d7140e4d429a1f42b84d5c0b20","sha1":"4a2fb7f74c39c75a6a19127154543419b1d20f0e","sha256":"f5f68e7da8b202bac4491f0830e3c7100f29fd511c173d9f23905bdb57b6db38","sha512":"603d648603c11e0e38b8e244c35961964a6ba5338a29576ae8016e9cc8c40f587d1ea896202281752e502aac70c2615ff20ad9b63415897a29ee5b99646a54a4","ssdeep":"96:NkCf7AgjGaXpeJkAbz411NrL6xx4L/tlry3D6NbmAkEaHstsM+sD:NkCf7AgKmAbz41frufay3GhmNEaHcV","tlshash":"87a12afb4bd3288ddb6afbc350e7823682347c64fe652d81bcc64d023124a1f1791222","first_seen":"2026-08-22T17:44:30.259399Z","last_seen":"2026-09-27T02:42:25.972045Z","times_seen":19,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/3da3a26bbf29a7a7221fb543120cf0803d4d6436.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.010Z","timestamp":1790476914010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /3da3a26bbf29a7a7221fb543120cf0803d4d6436.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nC6xTIO4Q2i56J4VYriHJ45mZKD4gpM28S6leEjzIGQZW7AJkZpNw8IrfgXUnnQOoVz29fhckXDOrqQtc5xgpFPl8EoE2cPNoXs2LONwjdHJE2b0iIrKbXNuu7Cf6y9o9g%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-ef\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e89fc056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":239,"size_decoded":1080,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f684dd82f4e0465193a2f222ea5b46c8","sha1":"3da3a26bbf29a7a7221fb543120cf0803d4d6436","sha256":"ddfa6742c432ddd20d193453d319c4c2035c6cd93a1f2b3d63255a1af0fd1d2e","sha512":"a7eaf7688c7bf34b3cb7a754ade61ceb711244af63a3e0aaadc8af8b72b4dfd390a03797789a8ab6d94591d22d18c8c7c088f3afff7dd01293f4bf27bd9d44a5","ssdeep":"","tlshash":"f9d0a7f7cd8cb71c818fc2025838ed60471f2170215d0735488c16e5130a299fb0776d","first_seen":"2026-09-08T18:33:12.500297Z","last_seen":"2026-09-27T02:42:25.984777Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/faec8f803e4bd0fc92cb908297445224b6cef884.svg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.012Z","timestamp":1790476914012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /faec8f803e4bd0fc92cb908297445224b6cef884.svg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/0rkw7hds3qpf8.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wsylaog%2BA9D9zNiRSk5pBKXhsEFS4481JVlWEbE2PManJPi7Kq%2F%2FvdiiErmnMcqRh0YVtt8%2BAuy4qWuXMEcUPqTY9VrXr%2FsxeQGr63ciAQVc9Qnl4MoCVFI0hiVVrrL6g%3D%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\npriority: u=4,i\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\netag: W/\"6aac1d9e-15b\"\r\nage: 40\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41726e89fc156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":347,"size_decoded":1149,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58774b35334e9d972353b5f3bcada19d","sha1":"faec8f803e4bd0fc92cb908297445224b6cef884","sha256":"bee1c83e7a0cf54bf5186e51b9667ea4c3a58a66851c10641672892ef6278b2b","sha512":"793fe9eab4cc2c66cfd83fabed5086d31e4484b01153e4e3759465fab9c32e4fc91766bea6aae2683e6fa237726459cb7c624ca2deef1549f3afb13b1ce8ab18","ssdeep":"","tlshash":"2ae0cdfa4f9d371d464fc11a68666571875ea0b1710a0e394c8cc3b4761b785dfc7948","first_seen":"2026-07-20T17:45:29.349629Z","last_seen":"2026-09-27T02:42:25.985335Z","times_seen":12,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/3KNgu99JvZ961wXUxcZ8LXDXjaWK4651Wo9oUZSA5U4L.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.338Z","timestamp":1790476914338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /3KNgu99JvZ961wXUxcZ8LXDXjaWK4651Wo9oUZSA5U4L.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-290\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=et%2By68xdxYFTmDHPTo%2FK%2BAo6a7wuTuTAnV%2F6ANClKQMcWpHEwpd3GkuuVwhtJ9tktu7rxb4gVHhVY5vUTL%2FPS20V8scu35KfTe4aCZ2VZSqhKHk6FAXdNvmqBL38F1GbHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726ea9fd856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 656\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":1590,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"91c98cb2336bcc2a13e7cf2d5a13355f","sha1":"c22778a7fdc8cb29aa7f9d81adfa45350a11403c","sha256":"24283b8d7c18b92b57d72dc95716c84bf4100ebeaae039ee8899518fb3acc604","sha512":"2097252b4d0643b9af0ab1aefc94ddd3588b1431915258d1d2cf444ac39becc88e04f5df89ce78b4f84e2814077ccec45fd1e6c86007b92d8e0cc0c0da85163b","ssdeep":"","tlshash":"e5f02359cf85c4d481db372694cb0ce46e7618e9550c0509284ba93eed467c2405f351","first_seen":"2026-09-14T20:38:49.284134Z","last_seen":"2026-09-27T02:42:25.985908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/FT9XVQdFwpkKMfEvi2rEKwEP7mNbXgtXvNUk2B3dWA9v.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.346Z","timestamp":1790476914346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /FT9XVQdFwpkKMfEvi2rEKwEP7mNbXgtXvNUk2B3dWA9v.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-257\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOu7Uki0fvFf7PskS27%2BDjsSH0QvdapMakWo9%2B70QH8gMQiEdaFgP3er7KE3KdFCWFqqx%2B9wxz897MQmpYKWxmnsFfVmTFHO0EEixROlQIIYrROAT5BQywrD7X21Mz4rlg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eaafdf56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 599\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":599,"size_decoded":1529,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"adce8315ff66fbbe41c5b1bfb1ccc852","sha1":"f2e672383e1848a0586e730afe2bd152c06b50fd","sha256":"94585376dc98131a7e7d08ba8a8b6a6f6a19969514adc244558ef1ab9ac2c937","sha512":"4b9494ae24fe7fbb508d5f10f830c077d9e9a6bc4a357b1baba9110d60f0653215bc4680e8edd287078a5567363db36daaf07a5fe48dc3bb75b8241f8f47abeb","ssdeep":"","tlshash":"39f00cb6a6c44a909876b25396950a36da3740a49e340209bae50674ba074a2a5bd2cb","first_seen":"2026-09-14T20:38:49.327449Z","last_seen":"2026-09-27T02:42:25.986795Z","times_seen":4,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/3NZ9JMVBmGAqocybic2c7LQCJScmgsAZ6vQqTDzcqmJh.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.349Z","timestamp":1790476914349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /3NZ9JMVBmGAqocybic2c7LQCJScmgsAZ6vQqTDzcqmJh.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-265c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmUtZUE0WukTBIsvrPOBLeJh%2BS7Xkq8hXyG3k4QPHWuJLMdmShcGieyhGu6vbUN3WbRwcHirFRl27ArPhrYwr0goKKW1OAI55VlcbVQPnZTtf6F41CAoQEXd3SYtyqgUBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eabfe156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9820,"size_decoded":10748,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"ee04460babed9cc74279f8d4cf050222","sha1":"6aa608f6dfd612fb4d4db76cc1a1dbdc7755afac","sha256":"4b2b394a8a1a3e370969a74e9d2cc0cd04f336f40ce726f682609eb0577bf3ad","sha512":"215772ebdfcfb4962469ca159bed8f378102d7bab8ba1ad36df2d54f376db6cfbbe4a073fc4e93ee13dd041c8d3b5485bafdbd7a3e2d993f37f0b4a2b9ea1ba6","ssdeep":"192:YhlmM2HwmMlg5awBNIraYPEGnozKRKT1N5M5OpdYEn/2R:Yh5nlNw/TYsG/sT10cYg/Q","tlshash":"5312c0c639a3d5dd501e1be075c7380d20abbb0e88cb39745662efed80d62c5209cec5","first_seen":"2025-09-17T10:56:12.405332Z","last_seen":"2026-09-27T02:42:25.987682Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/6GmAFSYs4gk3FDao5FzzySQpPZaWsa4rUJHacpMpUNgx.png","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.331Z","timestamp":1790476914331,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /6GmAFSYs4gk3FDao5FzzySQpPZaWsa4rUJHacpMpUNgx.png HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:28 GMT\r\netag: \"6aac1d9c-242e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pd7I2H%2Bqpw9P7YyeaBeHbtfID08NlCTzDKVWl0zbwLnmh1oeXgHU5Va%2BkBR9zzZSf%2FEuQe82WOfR1owPlTeA3OGYOD7x8rMnXN%2FmV88U8S6Sz84Pu5hWjveSZ7r4ivTS1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726ea9fd456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9262\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9262,"size_decoded":10196,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"0b63d4deb2e9ea2dab2463785424bbe7","sha1":"c3c8141001d24741b23d9435e5dfe08bf9072824","sha256":"b03671d5dd99e585d20712e1f4038c3a0d495285f3881ca28e3055ef2559762c","sha512":"055134b2f15ff589f5ed2fd5b369ee0f9af4df92d269358d198694e72d466ba184c6c28d202f0294e4bdb0ca747e87e5fd0e48c3a1e941cd621c8a1dbf2485f0","ssdeep":"192:AvM9xwv3lobhT2Ejjv5z8wnHGOhFXOKqLKZ8D2MF2xHbOLJD:gM9xwv3lm4IjhzlH9XOfkq2W2FCtD","tlshash":"0b12d275f4e5c1fefc2b7b6b1d83148526216d378b1aa51a2fc3ad44098ee9b8d021d3","first_seen":"2026-08-23T15:30:14.096095Z","last_seen":"2026-09-27T02:42:25.988775Z","times_seen":14,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stonksfuns.xyz/EiwGr8C8Jf1MqrB1GbCCEjNXzXpr1NNhcitM6u39DQEA.jpg","fqdn":"stonksfuns.xyz","domain":"stonksfuns.xyz","tld":"xyz"},"ip":{"addr":"104.21.36.28","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://stonksfuns.xyz/","date":"2026-09-27T02:41:54.348Z","timestamp":1790476914348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stonksfuns.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 18 Sep 2026 08:27:16 GMT","end":"Thu, 17 Dec 2026 08:27:15 GMT"},"fingerprint":{"sha1":"56:28:B3:3D:60:8E:0B:40:B2:26:70:3A:36:3F:07:2E:46:2D:AB:B6","sha256":"3A:B7:96:4C:24:A3:86:95:2B:5D:2B:A6:7B:7C:3C:7F:6A:34:A4:AB:ED:82:26:E8:52:9C:11:A2:41:5F:57:86"}}},"request":{"raw":"GET /EiwGr8C8Jf1MqrB1GbCCEjNXzXpr1NNhcitM6u39DQEA.jpg HTTP/1.1\r\nHost: stonksfuns.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://stonksfuns.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 02:41:54 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Thu, 17 Sep 2026 17:04:30 GMT\r\netag: \"6aac1d9e-ae5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 41\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6J27PCFHSpx7ZTwIyJp%2FuJl6B%2FQAFaQ3nXWUkY3ELGEC1D0u%2BwttUIJU3FEcdD15xO1v5zOHMh6SK9lr50TMiyWBZAmXxeoc0zul7U%2BbVXSiu8sni7dBUQArxp6qjCtXdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a41726eaafe056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2789\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2789,"size_decoded":3723,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 96x96, components 3","md5":"30e5cbe3374981b74968c366d3b0520a","sha1":"915de4bc4a322a024172ee3c9eea939fa2bc80a3","sha256":"bef6e06f10741da9147c1996445100b661b6b29b2358287382ce8f846927a49b","sha512":"1ed4fb8e2cd56139f36d67e14d2e0a63a8fb542fa2cba16c95ffddeaef6ebd7447c7252887c07e3cf53e6aee8674695d0a9e8c5cc577ce8c1cfe16dcf44c748f","ssdeep":"","tlshash":"88512b5e8354846be9bd98fcd95caa7d3a1298538c2a9b811c12fcf056b288b8d31349","first_seen":"2026-09-27T02:41:55.240122Z","last_seen":"2026-09-27T02:42:25.989584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"stonksfuns.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}