{"report_id":"478788e7-f6da-4187-bad2-923fc34e92da","version":6,"status":"done","tags":[],"date":"2026-02-13T22:57:10Z","url":{"schema":"http","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"104.21.66.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"title":"YETI | Airdrop","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-08-03T21:30:06.035182Z","times_seen":1034972,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"104.21.66.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T22:57:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"chainflow.lol","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-02-13T22:57:13.299485Z","last_seen":"2026-02-13T22:57:13.299485Z","alert_count":36,"request_count":12,"received_data":2245333,"sent_data":7050,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.dexscreener.com","ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-02-06T22:02:59.575391Z","alert_count":0,"request_count":2,"received_data":11824,"sent_data":990,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"cdn.dexscreener.com","ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":1560830,"first_seen":"2023-07-13T11:22:42Z","last_seen":"2026-02-08T17:26:23.166751Z","alert_count":0,"request_count":3,"received_data":108595,"sent_data":1695,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"af0c56c5b6a47c01d2a1475564ea06b6","sha1":"216858c8f851e0fa202fa461ee43ea6849a2574e","sha256":"00e9c80e094996eacacb8e9364bb9c65e4bb83c372d1bb4841537f357ba8be29","sha512":"5dead604827f7cbd2feca26eea8de0231a9cfdaf1ad5341e1d186c2fb335c5129340f11281b340dfbea35048964c5c5a94c2841891fe7c87b454e34e44a2cca2","ssdeep":"","tlshash":"8bc0c054c0b08d70000804de703217863040153d51d3b4cfcabdddc691ccff005c9810","size":186,"data":"","first_seen":"2026-02-13T22:57:16.774302Z","last_seen":"2026-03-31T15:51:15.730375Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7ff7c357900e89f3996440f6d993141","sha1":"009487d13786f6ccac192422512a76a136756038","sha256":"a6359fa762114ac2a13c85832e5e47eab47a85896d116d4e8976c5e9d22c4bed","sha512":"954367cce1dbc5ebfc39ad424582a456f7521d76c6959e4a293aa07f61fcbff0c443222bbb599c323d20770ed732563fafb2883f630901c5d318d81faf0b68dc","ssdeep":"","tlshash":"72e02b286aa755fd36b73591c71fb240e86500735085d801fd1cf58a0fc0e1434b9fc9","size":319,"data":"","first_seen":"2025-03-07T16:16:50.313512Z","last_seen":"2026-06-02T08:58:23.961977Z","times_seen":108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"63afcb80a028dedea1f9b5a70c4f0391","sha1":"1425284a0a9f74b1faa85f1d3524151015c4bb59","sha256":"25bc91c3c40ea75713f438f6780c69e28a8afe1e05edb716f1f6205f627cefaf","sha512":"5ac25311757f73e66a340aa38e6c5f1532122c3c8ddd0d6afafc139a09f276720bc457b83ce4c9069fa80248f69c3d723a4c185259dadb6c1083acb4b12f36f1","ssdeep":"","tlshash":"06e02ea82ee61338237b2120831fd28037e48043a0e4f8023a1ce1cb0fd2e1000bf5db","size":292,"data":"","first_seen":"2025-03-07T16:16:50.323665Z","last_seen":"2026-06-02T08:58:23.963206Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"186291429839af825e469deba941f547","sha1":"1ae0b9833058ab18bd2793e0cd0941c167727a32","sha256":"0d3a0f41c46cc94f458749c12a349dd48c9e9e6c5ca3ac557501c7d841010a82","sha512":"6cd4ae38e85bb981e6f6ea1700d37b9db2e5842651efc78087e3375344f9d3f39b2949982c7389c78333d330a744aaa433595dc873f5ce1c19c825ee73eeeff9","ssdeep":"","tlshash":"84d023691cb5843071940147507dd7e875602051f725a341c1c8cc3b7e21fe314f155c","size":217,"data":"","first_seen":"2026-02-13T22:57:16.777057Z","last_seen":"2026-02-13T22:57:16.777057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"290f2693531b75e4376c03efb2e445ba","sha1":"b7d99187eb7703bdc3e0d91432b1e6108b57bca5","sha256":"b2464a6e184f8e48f9dd9b02483cf8f9a049eb5ddf47bc900d570fe387613ae6","sha512":"13b68e7b1f8f4e9278ab87f46f2f9d12a9c7a48351d18265afce4d59c501c11bc510195ba10aeaf6c5c17cfd996a9ce4c639c162752cf6ea4b026e5fd6875e4d","ssdeep":"","tlshash":"5fe0863935761574097b986fc74b934b7da2141b5001e8167d4c914b0fa4f1034e6599","size":350,"data":"","first_seen":"2025-03-07T16:16:50.325983Z","last_seen":"2026-06-02T08:58:23.969339Z","times_seen":218,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d5fb98e2f53a71e98a9207f8f9dafc2","sha1":"76fe78890c8394f9e2ba179ed09c0e90cb8cc589","sha256":"69bb6865ea000e44ccd8e232dc9f99e143b4bd1c2cd616398e7b60a4172639cf","sha512":"23350b7f9b391f62d491009a550373d58e484fdff6646a7917a7f3af8ab23f32dae7e6844479c4a9014af704aa56b0f9082cc7b9eaf418e57fa33e00f2c0fa9a","ssdeep":"384:MLWyLlnaARibh0umP6PpElTA8A+cKZf/gx/JkFyg8RNeyTLqjz9e4ZXo:MyQ8EieTAz+MkFST","tlshash":"3d9274fc3de6f80502a1d4343297a24a726aec8c9054751ee141cea4f924b58fa7fbcd","size":19856,"data":"","first_seen":"2026-02-13T22:27:59.057411Z","last_seen":"2026-02-13T23:00:34.109701Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"378e68d5b8be1e62364ab6496a8184ca","sha1":"026e703f0ca0c16f9eca3f04ca2ade5cc802e638","sha256":"d5cedf03c467c31906bdd413d8c49c30d59c804337481dac16345f30b15ae384","sha512":"a9f9efedabd7066206b53e074cceb74beb439cc651cd5ba06c275fc8e7f34a20e5cb886f1a2e4638a5e95aacfcefc744ed87055206081f83b3e5aed988fe26c4","ssdeep":"","tlshash":"691100793e2a1534d5c5408b317ee7a93d326021ba02a184c26ccc28ad18e9714efcbe","size":902,"data":"","first_seen":"2026-02-13T22:57:16.779759Z","last_seen":"2026-02-13T22:57:16.779759Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a268114a6fbc741f206f54b277908b6","sha1":"eff795853b385888801eb392d72f669289509875","sha256":"e6bbf4dc89465990079d31196576cf27bc61f2dce79ebd19cfe2c3c7691eb33c","sha512":"bf7db222b36ce9e0bfc5d80ea73f09755b0ccb82456a3569a7cc04c54c27165839d02e587c795851c91ed7e979ba1098d22f3c8c1114f9d233c4937d30c61400","ssdeep":"384:oTx3RycP64092Sf3u7ylcKk9HgBfODpLbYH:oVRycJSf3u7ylEABA2","tlshash":"7f62826d6af320366463b23e9fefa11025a994032609dd487c0cd7d01fd2d249abbfd5","size":15294,"data":"","first_seen":"2026-02-13T22:57:16.783343Z","last_seen":"2026-03-31T15:51:15.733002Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/secureproxy?s=%2Fipfs%2FKLxfV3_aThCzYRk5pKiHbAacdfe97ee8e5daa2bb9c47ea7181e66a%3Ft%3D1771023404777","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a847e0e51686ce6c30e3c5820ee02d9","sha1":"adc230d23852212fdadcad4f52a4bd21f6d145e6","sha256":"4e33e9745e1745f91fdb4413fbafea06387c13ce79873bf8c689584ddff5850b","sha512":"8855984b298fa5e7c4ace5cb0bd7434a143b6fdb26b3e98a414fbe8b1a550e7d924e2c90dce67f29d2f55f1d533cc912b94579181157d318acbb26741bf86de2","ssdeep":"6144:FujB8gltIeTM5/S8g6zRhNgDq8UhpTUhRPNZYbRjFHXc0eS2J:ahltVM/g6ZsrUh4RPN8ROSg","tlshash":"d7d4bdc8a798b6b744e0b7a516b3c46fdfcc6d6a430b889ab3c11c94234d70395d6f68","size":608763,"data":"","first_seen":"2026-02-13T22:57:16.755484Z","last_seen":"2026-02-13T22:57:16.755484Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e70d4137b84d2746503a0303475e9b0d","sha1":"d792e518d1b50c3a93cdec9af7657bd7da29303c","sha256":"698f07b6a735ed274edf9b21498f90e6556333f76db463306285a9f2a96cd284","sha512":"336dbff08e2faa403a4088600bc9a6b89f45c683fa15eed9d47c571af7ceed6f19329695a4a56afbb507c8d40092ba142f05d660363f8b732ea826331d6ed184","ssdeep":"","tlshash":"6df0e918375515210527e3eb6b9b27b16d123086680ad8947add82045ff16f199d23ae","size":523,"data":"","first_seen":"2026-02-13T22:57:16.784795Z","last_seen":"2026-03-31T15:51:15.733736Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chainflow.lol/64d91d8d612b9cab0c24970445eb0aa43142a1ba.jpg","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /64d91d8d612b9cab0c24970445eb0aa43142a1ba.jpg HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 131968\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"20380-19c4b044b69\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyBaLr4hUplvFze02pbndiBIOS0mgszDraif0dorQCXfumSCaWuOLTzbtJxLtqZc7LRgbFKnffMPyEWkmbUVKaPjPoDOD7GCSHb81HY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb8185a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":131968,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1167x1218, components 3","md5":"089a768e14cfccb4e01522fb229a467d","sha1":"64d91d8d612b9cab0c24970445eb0aa43142a1ba","sha256":"11187947ba91d52e94935ed3deb8045bd6df0d4233b2b796625f516151a7214e","sha512":"f84ff8c132257b06953cf80323124d1a83ac155ee2126bcc4907301682ff2a71bc3dcaca7c63949ac58d2badddc124af8e1741723eb5965a065173dc34ce6307","ssdeep":"1536:irKRahAejQQKTJRpew5YpL/i69c7J5yvdl5Q0nphEdyXsVOKDhgZKGm4eqaqXWZc:ayrpvG/nQ6sVO2hgZKj4efqPbBT","tlshash":"77d317139c099b93e50997e4ff074ea82f056b5ce8923aff50574e8b7f586220d9c42e","first_seen":"2026-02-13T22:57:16.746658Z","last_seen":"2026-03-31T15:51:15.724246Z","times_seen":11,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/711ff17ee32324d75b401f3b887468758078de5b.png","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /711ff17ee32324d75b401f3b887468758078de5b.png HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 40170\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"9cea-19c4b044b77\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CSx%2B0tAhbtHvONbxjpU8MBAklz5B7oG5CnCp1lMvuE5OXjODRxMfMiSol9pXepCkwO1QHduopQF0fL97wk2Iys9aynT5SskRpeL1hQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb8185735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGB, non-interlaced","md5":"f7691803270c48a98ed93cf9dc5bb2f2","sha1":"711ff17ee32324d75b401f3b887468758078de5b","sha256":"0d94540f2115e83015930d86482495a60d157f783de3f714aa0c23447ec9ece2","sha512":"9ecaa27bcdac13c530092fac2cccc62cf78eaf63d8a41a25dec1e827d9e6240f5a2976bd7c1fb6be7cb5b1ed1915c218abf6f2383860ef94c95cba80736b1716","ssdeep":"768:KDJOvPpV/JUHlMto3KuzkQ2w5XNdG0JQzz5Mc0fC9kbWMiD5ONnQKv:K1Ovh5JKd6XBw9G0U5aakbWFwSI","tlshash":"8903f2ed1ddb8c784e67a38a49d386f578eb3f5dd9bc7955e414cc019980448afca103","first_seen":"2026-02-13T22:57:16.752147Z","last_seen":"2026-03-31T15:51:15.728154Z","times_seen":8,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T22:56:43.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KNXzv0gX6pcEr9P5jjqBa0w5shJV9xM04SX4J%2BFh%2FyzRIL8EV7ouT9GS9cfJcbqpJA3KjLDdGW9vfSH9aLlhD5DbACutYCCtifOLNOY%3D\"}]}\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd7ebb2e9e023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1035271,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"a2e23a720672fd3c651dac9e0ba6d84f","sha1":"5207a3d3ed31a8ef112977f0c7c6aaf5ae9bcea6","sha256":"7bcbe29e55039db06bbda92632eaaa144ef7a522908623a944ae4863a79c489b","sha512":"e815289317ed26dba5f4d63282f232024feb8a8cb9e172778060a3e5f92c2b1fe421c2ca39b981c550a71924bc7aced8861781215c690616178d28fe6eb39bab","ssdeep":"6144:IhGR3FTbdAvnh5Ck2Rwykv9oLXlJ7zgvFTz6V8u6Iaxx3BOS1z:wETZk5rYkF8JHQz5DBTz","tlshash":"b225846995ba10805b42f1a1234b5200b32df21bd908cc1db6ceba9edfd6206ddde7dd","first_seen":"2026-02-13T22:57:16.753739Z","last_seen":"2026-02-13T22:57:16.753739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":88,"dns":57,"connect":1,"send":0,"wait":474,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/secureproxy?s=%2Fipfs%2FKLxfV3_aThCzYRk5pKiHbAacdfe97ee8e5daa2bb9c47ea7181e66a%3Ft%3D1771023404777","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FKLxfV3_aThCzYRk5pKiHbAacdfe97ee8e5daa2bb9c47ea7181e66a%3Ft%3D1771023404777 HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"949fb-rcIw0jhSIS/a3K1PUqS9IfbRReY\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=IccZmeEhTbV_ASWmjh_Bkw.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 22:56:45\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 480203fdd8b7d1c3984b71184fbc1a6d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6IwNURZI2k9TYCIS0d7LX2ZQmQxgzLzBSaAP5ri4eX%2B8tJNrQojFlGC80q%2BoHwDq0uNrMlt10rTYSWITHqniCoc1G%2FnLyiA0CwA%2FKSE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb8185235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":608763,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8a847e0e51686ce6c30e3c5820ee02d9","sha1":"adc230d23852212fdadcad4f52a4bd21f6d145e6","sha256":"4e33e9745e1745f91fdb4413fbafea06387c13ce79873bf8c689584ddff5850b","sha512":"8855984b298fa5e7c4ace5cb0bd7434a143b6fdb26b3e98a414fbe8b1a550e7d924e2c90dce67f29d2f55f1d533cc912b94579181157d318acbb26741bf86de2","ssdeep":"6144:FujB8gltIeTM5/S8g6zRhNgDq8UhpTUhRPNZYbRjFHXc0eS2J:ahltVM/g6ZsrUh4RPN8ROSg","tlshash":"d7d4bdc8a798b6b744e0b7a516b3c46fdfcc6d6a430b889ab3c11c94234d70395d6f68","first_seen":"2026-02-13T22:57:16.755484Z","last_seen":"2026-02-13T22:57:16.755484Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1058,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":901,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/1731a45698fc08cc34267e0caa7dd53f196e106e.woff2","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /1731a45698fc08cc34267e0caa7dd53f196e106e.woff2 HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 150052\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"24a24-19c4b044b79\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S7SBQow1Fmb7Y5si%2F0tE7gX1vxOPpEjUgqBzsy6ZymveeKeVrfUIzn8EZ3Tyvc4Xzky9TDLiuNXrS1SgbkjWVdfnFJ4WTNHQc6gWxUU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb8ebc535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150052,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150052, version 1.0","md5":"dd3e7d7c6f336dc11da0b3df4795b9b1","sha1":"1731a45698fc08cc34267e0caa7dd53f196e106e","sha256":"2153b52cea9e06fc0cc8496048be485b381a0f8bf130adea5a9756fc8f100b87","sha512":"b16041296ed46f68a16c6b526cb7b8c39ed3a72fc8c7c91e7eb2702e678f61aa2df08f1ad7ac719ec9003704ae916592c04a999c30718ebf4972eae43ca54664","ssdeep":"3072:pcMblNHoNwKDtZkSAmn8x6evxankgfHB4DLs/Yu1+YdrPHRavU+7r:9blh4LcZxaWI/0srZ27r","tlshash":"f2e312b6c3839b5a124e7afc83d40f1f78bf951893900d9c28d727e9f8ad1e129471a5","first_seen":"2024-07-20T04:11:49Z","last_seen":"2026-08-03T02:53:40.495914Z","times_seen":536,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/654af0929c01b3e27d0af7208bf096a9824d3cda.png","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /654af0929c01b3e27d0af7208bf096a9824d3cda.png HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 39258\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"995a-19c4b044b74\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LTLP3raAfhINwvzxx1t3Zn7%2B9bg6ElQq6tY373XJsCJFJMZ2noGc0mAmS5xyRMtegPwTn%2F3xuOfoEEgpqFUAX%2B37hdvn9vsmEpKKN8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb8cb3d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":39258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 174 x 169, 8-bit/color RGBA, non-interlaced","md5":"98c9c9cc8b20d66cca6beddc31bd7457","sha1":"654af0929c01b3e27d0af7208bf096a9824d3cda","sha256":"e049d0dc8f796435576fbb31033a3ac1f84bc690ff28ac35fcd6c28f5da765f6","sha512":"bde4f08a73982a4cc79f931145ca09cc2db74b8d43fc07fbc249510e745d731560af719e82f43d059293764504d381c8e6f9316fbc3f74dc3f640133d7cca3dd","ssdeep":"768:KCRL9IoiyhqiaB6WT4LYgxw6X+x11YAhjDrBpR52hnAburZXt4UdK3zO9FaCDz7H:rRL3iyhqio6WB6M1VhfdZ2ySv4UojOnZ","tlshash":"e00301d7d8c2056bf82939a018f808c3ed2ad8750e0bb897569250c01bd77e56fc9cd9","first_seen":"2026-01-14T21:28:48.983509Z","last_seen":"2026-06-24T21:13:19.703875Z","times_seen":13,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/3ae621518210e658f2cec928e0c3aede6d0cefe2.woff2","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /3ae621518210e658f2cec928e0c3aede6d0cefe2.woff2 HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21168\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"52b0-19c4b044b5e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6P5o4GeN%2FWAboUfRpinRsBqGfv5861nvGOSB8%2F1a3GidqEfOOFxZKCoFBxLDiTXmFf9QVQQIMh2Dua9ZgP5NgVv0mYu3pmR9Exgtfyw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb8ebc135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21168,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21168, version 1.0","md5":"caf0dfde4e448468f09b7bed230206a4","sha1":"3ae621518210e658f2cec928e0c3aede6d0cefe2","sha256":"14425ba9c695763c1547f48a206b7aa60350a33ae23de09f0407877f3fcd89eb","sha512":"901b535ef03d223622abf9f8fb4af14bf80bf474c139229d4a0e50fb6f988569c3ffb2933c107a456052925b102325987d06ceaeee24db628de7598088305757","ssdeep":"384:2r0vIFlaUmbfLh0/QbqqSfF9KpME3dUJ3hPrJvn/86C4KJYHtSuOBFoXqfEeUu:AsIFlaBfVsQLSfFYaw4KJYN/Ov4KEeZ","tlshash":"c292d08f03ee3734f94036f0283bfcc283e95a321ae79236e09c7d455d5595264a6a47","first_seen":"2024-12-28T16:03:38.26782Z","last_seen":"2026-08-03T17:54:20.677827Z","times_seen":1383,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/latest/dex/tokens/72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /latest/dex/tokens/72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chainflow.lol/\r\nOrigin: https://chainflow.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9cd7ebb95faab28a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"13fc-8YKEEbl1oY+unGCXobMcxxLulfo\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nexpires: Fri, 13 Feb 2026 22:57:15 GMT\r\ncache-control: public, max-age=30\r\nset-cookie: __cf_bm=_JDFsDgRfEOy_uMysy.zmvCNsybCdshD3durJbVXljE-1771023405-1.0.1.1-bQj0AIo6JEnnRc02c67n4HnY0crgYviRBSi6BqvA3qiNO2_pxIx_ViTxbvXooH9_emxm6AFtk7GNTCCtBtVostFiKxeNz9nN663bpRaqXRhICdRfE0ShpvfrdHJpnBy2; path=/; expires=Fri, 13-Feb-26 23:26:45 GMT; domain=.dexscreener.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":5116,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"03eff45ec1fdabafa2caaad99d5ccafc","sha1":"f1828411b975a18fae9c6097a1b31cc712ee95fa","sha256":"92cc5ebb6eea26c7c122d8e1cd4914597330cc1381a500ab99b2c4aa2625266c","sha512":"17290bdae6b3722442917228ea2dd5d05bebaa13ae9855102b9de96d31d082126ac607ab8ac60645abe4f22be26c4e85ad35c3f95b9c04a95dfb4217e8eb0312","ssdeep":"96:P4IKEmh7+pX+IKEmhadJdwbKIKEmhAWEXhd/qIKEmh5:P4fEmh7+YfEmhYJdffEmhAafEmh5","tlshash":"6cb182b743ec29afc3051ab6999b30ac50e530438bec055bd5809d9e42cc7afa21ba1c","first_seen":"2026-02-13T22:57:16.767946Z","last_seen":"2026-02-13T22:57:16.767946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":53,"dns":34,"connect":1,"send":0,"wait":324,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/c5Bh6sWTFIQDo1YZ?width=800\u0026height=800\u0026quality=90","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:45.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /cms/images/c5Bh6sWTFIQDo1YZ?width=800\u0026height=800\u0026quality=90 HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://chainflow.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35296\r\nserver: cloudflare\r\ncf-ray: 9cd7ebbdef0fb28a-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 60550\r\ncache-control: public, max-age=31536000\r\netag: \"cf3a1Pgf4AELuVHSv-mNCzyIvuep8_PYOkQEM-3KU8DQ:5e6891b3394232f68bda5dfb35d98080\"\r\nlast-modified: Fri, 13 Feb 2026 05:27:07 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=6+31 c=2+29 v=2026.2.7 l=35296 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=k20aEyorRIG0AQo.3Q7bUfm12A.t_g6akFPX_69K0r0-1771023405-1.0.1.1-HtVEqzdoCotPZKyNCW23yN7pZyvi598_JcA7eCudXf3Qr8OJC4lx7m_UlOW3UxPTNklBSyp8gPLWJGHJuuzLPRHECGJuqFAQnh9pFXXEZpa1mHmBBZlArvotphejkrJu; path=/; expires=Fri, 13-Feb-26 23:26:45 GMT; domain=.dexscreener.com; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76dc0404ee939c5e25c624d7b6cfa1f3","sha1":"4b65ad15a04a2810e5550262817a5e82e9364af6","sha256":"c127467bb7abdf3362ecc6e6213186df40c5c9fd714f4ca8abaa52067c3a8757","sha512":"534584c27715368e55c6d0a68394fe84d1992745e42df783a1017a80a1603d8fdb881cff451e730f88f22af71a9ec4644ba1129c1660b41d50891860b0b4d934","ssdeep":"768:qrhqM1d7sC9VDSlgU9g9op3cJgFDdz0/tqhSqnTE8J9:qdT1BsODSlgG5VliEhg8f","tlshash":"f3f2f1ddc3c3a898add77dbb284f54284d5e8842f9135f0d320a815924bbacd9713bda","first_seen":"2026-02-13T22:57:16.769573Z","last_seen":"2026-02-13T22:57:16.769573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/c5Bh6sWTFIQDo1YZ?width=800\u0026height=800\u0026quality=90","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:45.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /cms/images/c5Bh6sWTFIQDo1YZ?width=800\u0026height=800\u0026quality=90 HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35296\r\nserver: cloudflare\r\ncf-ray: 9cd7ebbded0349c5-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 60550\r\ncache-control: public, max-age=31536000\r\netag: \"cf3a1Pgf4AELuVHSv-mNCzyIvuep8_PYOkQEM-3KU8DQ:5e6891b3394232f68bda5dfb35d98080\"\r\nlast-modified: Fri, 13 Feb 2026 05:27:07 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=6+31 c=2+29 v=2026.2.7 l=35296 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=UUuxLJ_Rc9.aDqxNH3DA8AorgUVBYGbmuxjCPNJR0jw-1771023405-1.0.1.1-tMJrbM8zR1TbVhfIPLNXGfK1gPlSfH2PwTBUQ7AKLXWo0qDvDNq6pTpCfsfin3vTM1lhROL14dj7fjtIo0hSseQzjM2nkkXQZHpWmF9mBziVWqoOnFx2hkCNuljeJ_ey; path=/; expires=Fri, 13-Feb-26 23:26:45 GMT; domain=.dexscreener.com; HttpOnly; Secure; SameSite=None\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76dc0404ee939c5e25c624d7b6cfa1f3","sha1":"4b65ad15a04a2810e5550262817a5e82e9364af6","sha256":"c127467bb7abdf3362ecc6e6213186df40c5c9fd714f4ca8abaa52067c3a8757","sha512":"534584c27715368e55c6d0a68394fe84d1992745e42df783a1017a80a1603d8fdb881cff451e730f88f22af71a9ec4644ba1129c1660b41d50891860b0b4d934","ssdeep":"768:qrhqM1d7sC9VDSlgU9g9op3cJgFDdz0/tqhSqnTE8J9:qdT1BsODSlgG5VliEhg8f","tlshash":"f3f2f1ddc3c3a898add77dbb284f54284d5e8842f9135f0d320a815924bbacd9713bda","first_seen":"2026-02-13T22:57:16.769573Z","last_seen":"2026-02-13T22:57:16.769573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":85,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/c5Bh6sWTFIQDo1YZ?width=800\u0026height=800\u0026quality=90","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:45.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /cms/images/c5Bh6sWTFIQDo1YZ?width=800\u0026height=800\u0026quality=90 HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/\r\nCookie: __cf_bm=UUuxLJ_Rc9.aDqxNH3DA8AorgUVBYGbmuxjCPNJR0jw-1771023405-1.0.1.1-tMJrbM8zR1TbVhfIPLNXGfK1gPlSfH2PwTBUQ7AKLXWo0qDvDNq6pTpCfsfin3vTM1lhROL14dj7fjtIo0hSseQzjM2nkkXQZHpWmF9mBziVWqoOnFx2hkCNuljeJ_ey\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35296\r\nserver: cloudflare\r\ncf-ray: 9cd7ebbec93749c5-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 60550\r\ncache-control: public, max-age=31536000\r\netag: \"cf3a1Pgf4AELuVHSv-mNCzyIvuep8_PYOkQEM-3KU8DQ:5e6891b3394232f68bda5dfb35d98080\"\r\nlast-modified: Fri, 13 Feb 2026 05:27:07 GMT\r\nvary: Accept, Accept-Encoding\r\ncf-resized: internal=ok/h q=0 n=6+31 c=2+29 v=2026.2.7 l=35296 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76dc0404ee939c5e25c624d7b6cfa1f3","sha1":"4b65ad15a04a2810e5550262817a5e82e9364af6","sha256":"c127467bb7abdf3362ecc6e6213186df40c5c9fd714f4ca8abaa52067c3a8757","sha512":"534584c27715368e55c6d0a68394fe84d1992745e42df783a1017a80a1603d8fdb881cff451e730f88f22af71a9ec4644ba1129c1660b41d50891860b0b4d934","ssdeep":"768:qrhqM1d7sC9VDSlgU9g9op3cJgFDdz0/tqhSqnTE8J9:qdT1BsODSlgG5VliEhg8f","tlshash":"f3f2f1ddc3c3a898add77dbb284f54284d5e8842f9135f0d320a815924bbacd9713bda","first_seen":"2026-02-13T22:57:16.769573Z","last_seen":"2026-02-13T22:57:16.769573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/a5a4517fcbf185c69d520e115e580243508541a8.woff2","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /a5a4517fcbf185c69d520e115e580243508541a8.woff2 HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21236\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"52f4-19c4b044b8c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PwIiHB001By8YYTG3npvKj332u%2Fwt25vtIBBeHJFLBUPzZ8uuifLZyn7iYHq8APStdpCiHBTy3WEJAG3IKxgavHCJGKLRDSXkfu8fyQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb8db6d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21236, version 1.0","md5":"3b19b586e030867864c002aee16f8978","sha1":"a5a4517fcbf185c69d520e115e580243508541a8","sha256":"237d0cbcf1aacd607e07f610d79cbc880edbffcc99ebcf417c502f8fa873ee53","sha512":"b9f09ba4285d8371f139642e31d0e95b08b2cd46bc022b2cf7d24ac86064a223d7a5289ad8b2fbc37d1df9320b3327898a012cbbfb01b58462847c84bca16c5e","ssdeep":"384:t6cfhlTk68oeOqxPUhk96TzPTqsaqLkSSUDbxqKVq7NZg1jT:fj8oRqINTzufg8U3xPL1jT","tlshash":"1b92d04f99a0427ecfcff4742ec48b2ac95911076e8db41cf7286851aa67df02649d89","first_seen":"2025-05-29T18:19:56.363842Z","last_seen":"2026-07-24T06:51:36.648163Z","times_seen":22,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":335,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/0a35a97f42227b7d165a309d7961fdf7c98321f2.woff2","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:44.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /0a35a97f42227b7d165a309d7961fdf7c98321f2.woff2 HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 131744\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"202a0-19c4b044b5c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfQLySY2oMn3fJfkRQFn5HnsfSpCwsEashoQQsh9aWJAHAkEnjd3squMaqtLjZoLATCm2HBoaMrcvorhRhqxiV34LtUpkXtd15Fzp7I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb8db8935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 131744, version 1.0","md5":"e411caf3fd95535654554603071189e7","sha1":"0a35a97f42227b7d165a309d7961fdf7c98321f2","sha256":"660bd6045c0e0d9756cddb8ba2ece3aad855df7d4a170ef23f7b1c0bf511c430","sha512":"efb61c9f0fa654ac2705bee8ddf5daefb3da78f6c37af6312733023eb7602ba626c62e598f3a88dfd322e8a589aec230a9ce5780d6981defa5e8e025a4591aa3","ssdeep":"3072:XX8DiMh5TQHkmjKqoPgS2IzKyyPpFk8/9hfuWufGa73q:XXJMh56cxP4SzgpFk8/+W8GQa","tlshash":"7ad31210e4f14de7e3bc93aabf40304b61975f9260396cbc3d687d2272d94d56d0b269","first_seen":"2024-08-26T12:03:08Z","last_seen":"2026-08-03T02:53:40.463467Z","times_seen":3137,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":390,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/5296100bf92a9df9aa9cf8b820fa75e474e8917e.woff2","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:45.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /5296100bf92a9df9aa9cf8b820fa75e474e8917e.woff2 HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14108\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"371c-19c4b044b8a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4KYhitddXVCOuyhPgHEorHFVqIBtUpbBuBQx3DznK8u%2F5JOq8l%2F%2FfOtVeXcPfn19qgVmZdi46Mmrn%2Bd%2B%2FY2OJP8SApcEsZg7hfX1b0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebb94d5535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14108, version 1.0","md5":"1589a53d0b0e81b757201b56ec289d92","sha1":"5296100bf92a9df9aa9cf8b820fa75e474e8917e","sha256":"849290ef12a2eeb9af5c11924120d11aa4ae8b435ed3347d7fc8bc240c293ca3","sha512":"08de38ebe938a9036ce4a02d50810117cd339169f0ea8a55350d22b373fed7f58999eb41c51f969eac1726dda7bc28f92bc5b0e6579c27046f6dda93d45fd1b4","ssdeep":"384:9fW/LcVxKHhaPKTjaRjtcyV1sKDKka/wNu04jP0T:9fW/Lo4RHkcyV1p+ka/wNu03","tlshash":"4152cf95830d8a564bec68b0563a92d912ecc7f0940d93443f8c3da1687eabd935b3fc","first_seen":"2025-06-04T22:07:03.561923Z","last_seen":"2026-08-03T08:52:47.895952Z","times_seen":1503,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":315,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/654af0929c01b3e27d0af7208bf096a9824d3cda.png","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:45.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"GET /654af0929c01b3e27d0af7208bf096a9824d3cda.png HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\nCookie: cf_clearance=usopRTq22P.ZyShpqFKCQJw1ZhHD7yyPD8chzp2fJEc-1771023405-1.2.1.1-jtBsP1LCA.r.iSAl94N8mjvQYLAwAU9_ckHNQiCxBw6ecO..csdarGowTG6RHefoGu8m2jZfwTBoIjTC0EYEGZNnZn8942at2DKcdRNUVQRiJ7zzMriY2V_WcI0NiiKsBtyiJFcmWO3ZxTb86GZF9YwSFDi7hqjGQ7sUjtJeb_qaCndyotGS25AbyWPwi21z8mGWvHbLJ8jZjWvm_VGOGHxPadlwbZ7H7.PiOtU9KCY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:56:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 39258\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Wed, 11 Feb 2026 04:44:58 GMT\r\netag: W/\"995a-19c4b044b74\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JzOkV%2FQPBqTZzzMmfiSIl5joSsJv%2FsX%2FW48vLKfYkinpGXOzxz%2FyJTk3TytHACaIvfcKw08S3ha09uSP5V%2FzosfZpILCSwVVXM92%2BlI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7ebbd1e2435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 174 x 169, 8-bit/color RGBA, non-interlaced","md5":"98c9c9cc8b20d66cca6beddc31bd7457","sha1":"654af0929c01b3e27d0af7208bf096a9824d3cda","sha256":"e049d0dc8f796435576fbb31033a3ac1f84bc690ff28ac35fcd6c28f5da765f6","sha512":"bde4f08a73982a4cc79f931145ca09cc2db74b8d43fc07fbc249510e745d731560af719e82f43d059293764504d381c8e6f9316fbc3f74dc3f640133d7cca3dd","ssdeep":"768:KCRL9IoiyhqiaB6WT4LYgxw6X+x11YAhjDrBpR52hnAburZXt4UdK3zO9FaCDz7H:rRL3iyhqio6WB6M1VhfdZ2ySv4UojOnZ","tlshash":"e00301d7d8c2056bf82939a018f808c3ed2ad8750e0bb897569250c01bd77e56fc9cd9","first_seen":"2026-01-14T21:28:48.983509Z","last_seen":"2026-06-24T21:13:19.703875Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chainflow.lol/secureproxy?s=%2Fjmpd%2F","fqdn":"chainflow.lol","domain":"chainflow.lol","tld":"lol"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:56:46.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chainflow.lol","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 03:39:31 GMT","end":"Tue, 12 May 2026 04:37:18 GMT"},"fingerprint":{"sha1":"10:6B:EB:9D:0A:A4:47:59:45:C5:54:19:67:F8:0C:C2:19:89:AE:AA","sha256":"81:8A:7F:63:82:21:EE:D1:25:A6:EF:E0:08:09:AE:3C:83:13:40:91:94:65:E7:6D:44:A6:31:10:43:A0:F4:D4"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: chainflow.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump\r\ncontent-type: application/json\r\nContent-Length: 1394\r\nOrigin: https://chainflow.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=usopRTq22P.ZyShpqFKCQJw1ZhHD7yyPD8chzp2fJEc-1771023405-1.2.1.1-jtBsP1LCA.r.iSAl94N8mjvQYLAwAU9_ckHNQiCxBw6ecO..csdarGowTG6RHefoGu8m2jZfwTBoIjTC0EYEGZNnZn8942at2DKcdRNUVQRiJ7zzMriY2V_WcI0NiiKsBtyiJFcmWO3ZxTb86GZF9YwSFDi7hqjGQ7sUjtJeb_qaCndyotGS25AbyWPwi21z8mGWvHbLJ8jZjWvm_VGOGHxPadlwbZ7H7.PiOtU9KCY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1394,"data":"{\"route\":\"n9POyFeFG1tUtiSU-z9JOx3n\",\"payload\":\"0hqM-6_N52QB7gK-AhkAFwABA60CEwDVAh8AAAIBIAMAAO8nhn2XtsKCAaks2RmN85D5H7eFgmQCAACiN7rdRJYdGUGXsoiJ0elHRFtbXZjASiHVcrSAWGm50QObmF2qAi0k4H8jGRW-mPfaLbbE1xr0Grq-fmQZ-p3fRoQHbH1p9pq71LPH131xArTR_2JtrG6Cl-XZcwo2b1s14r0Jd8wfriYGbPM8Fvas2nMy8OJIB7SmoSlq2gDQmivT7XBYy9uYIyEitZXuBuatVOqc5s6SVp2UvmLgGNkEo6NeGVc9xFBIMWmhVz1r1K76MqMpPkEnovri1t3J-ELCkLgKUMF1qMhhZoV0xEoF4zhcVZzHCpbcQBgLSSqLtDUOH3PKHfk7aT6hghgDYt5nkBWUsCHG2gT5r2sXazp03zfcQMhlWFanxxuLso5cQ0D11pv8HTbEjAehgl93-LCw75MdRlSymNQtamVx6VYpRzx8-cHTr7h3LnrEimAiyRbl_WgdbeI-d2IE74J2v95vlRF7Rbl_oUh6gTggAvLksta5c5_P5Dbck6yMxtAQbkW9DMdsZyhT8hc37nTR5lxyNEsl8nUBXqrE1WVO_TJk0lFTYcRoUJabcZvvFl4HZ3WORKC2RuDd8LMHLYhN6X4Lj-IG9B-lJ1jcbDpSycphgHIqq-WHzwEjkzWjU994USlPlFCaBSJhpVDI1HNnx6_D48Zr4Tw91JMKPjI8K2c-8ZMSlqVxBdXEjMBCGx4vT3ln2lJf2Fe4pGrpc3UMUU_AbuhxCv9vX_ZlLiVC4jAvVCGH9yisPkb-6Cj2dG1_1exYbXyovfyBDUUhZGDA_z7_taANtLmsEutc_PdkMwelDsaEvs3kOicfmPSG1OV6WjIQs8pkzZmMB4CtbRfhsAw0HJP0Us1wbKUO700mndrQz4GwQRrYd40zhKHqA8wtI6IsKAzYYyJhoyKk8xCpx1FSwlxPX-McjsmfPl9PdcrB8s0nc_MheFFWY4CdBnJHpJ3FqxjxsAdyRPQ7idAO5Y3txWvLF41PLHnfMVIIQ9GR69YvE07xoAbbava9B20Pxwe30RixCbtG7aOD2zkaMmsVc6TDL05jMxjrf4NLE-NbEn8UhmY88TE9qxeGpdukwEXL8O7_YKmvwThvx56xGiEZqxeZR5StEA\",\"proof\":\"eyJpZCI6Ik1QWnZTX2hQck4teWhXeFdTcFdFSHciLCJub25jZSI6Mzc4LCJoYXNoIjoiMDAwZGYwZmViY2ZlMTZmOGYwNTY0ZjBkNmY0MzM3Y2Q5Y2Y0YzEwMjlkYjcwMzIyOWNjY2JiMjFlYjQ3YzM0NiJ9\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Fri, 13 Feb 2026 22:56:47 GMT\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1771023466913\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 02/13/2026 22:56:47\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 53eda699ddb08b6764bf61cd98688ed8\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3vHLX6yGRiAYnzuqwFCUHPpOJCeXCNaBAp7OUgOpl52CLM5k6ev5oV%2Fcw%2BloOfZi9V17ENO3XW0wwlgRmHjDGQFSvRn9dIA1XwBAMMM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd7ebc4993735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T21:30:22.615566Z","times_seen":17696876,"resource_available":true,"data":null}},"time_used":957,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":956,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"chainflow.lol","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"chainflow.lol","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/latest/dex/tokens/72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chainflow.lol/?ca=72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump","date":"2026-02-13T22:57:00.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 02:42:49 GMT","end":"Sun, 26 Apr 2026 03:42:47 GMT"},"fingerprint":{"sha1":"EA:3A:CC:F0:58:31:D8:82:DD:90:88:D9:E2:47:C9:DE:99:A8:7D:70","sha256":"4B:39:97:86:5F:AC:80:42:4E:F8:21:24:18:C5:D9:10:D4:35:57:60:C8:6A:A9:21:C7:42:7D:41:22:F3:20:B0"}}},"request":{"raw":"GET /latest/dex/tokens/72Ed2QEAbZkbRqJ5vhciuyhGbDqpkh1BE98cuMeepump HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://chainflow.lol/\r\nOrigin: https://chainflow.lol\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 22:57:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9cd7ec1b78fc49c5-OSL\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"13fc-8YKEEbl1oY+unGCXobMcxxLulfo\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 15\r\nexpires: Fri, 13 Feb 2026 22:57:30 GMT\r\ncache-control: public, max-age=30\r\npriority: u=4,i=?0\r\nset-cookie: __cf_bm=yogKH5J7wY1czSNJlc0hjONAURLv3EFS2Qf8A5nQirA-1771023420-1.0.1.1-WqyAodIphYD6n5oYqCFtuPzqSIxB0BPZLsapDgZ.TbCSbNAQ7dTMT3Z2psiMVhQtV5Cch6h2y5cbDlX3y5WrUJ4qOLmYlAV.MMaWhNyvKjfRdRaMsdEkwdaK2NePgsvX; path=/; expires=Fri, 13-Feb-26 23:27:00 GMT; domain=.dexscreener.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5116,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"03eff45ec1fdabafa2caaad99d5ccafc","sha1":"f1828411b975a18fae9c6097a1b31cc712ee95fa","sha256":"92cc5ebb6eea26c7c122d8e1cd4914597330cc1381a500ab99b2c4aa2625266c","sha512":"17290bdae6b3722442917228ea2dd5d05bebaa13ae9855102b9de96d31d082126ac607ab8ac60645abe4f22be26c4e85ad35c3f95b9c04a95dfb4217e8eb0312","ssdeep":"96:P4IKEmh7+pX+IKEmhadJdwbKIKEmhAWEXhd/qIKEmh5:P4fEmh7+YfEmhYJdffEmhAafEmh5","tlshash":"6cb182b743ec29afc3051ab6999b30ac50e530438bec055bd5809d9e42cc7afa21ba1c","first_seen":"2026-02-13T22:57:16.767946Z","last_seen":"2026-02-13T22:57:16.767946Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}