{"report_id":"4c0d1347-280c-4109-a4c7-4d19255fc553","version":6,"status":"done","tags":[],"date":"2025-07-29T14:47:11Z","url":{"schema":"https","addr":"pengu-memes.com/","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pengu-memes.com/","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"title":"Pudgy Penguins AirDrop"},"submit":{"url":{"schema":"https","addr":"pengu-memes.com/","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-02T14:47:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":5,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":36142,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-29T14:46:50.280074+0000\",\"flow_id\":215288974542982,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":36142,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3514,\"start\":\"2025-07-29T14:46:50.198790+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":36144,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-29T14:46:50.309829+0000\",\"flow_id\":1883029070595507,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":36144,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3515,\"start\":\"2025-07-29T14:46:50.247219+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":60150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-29T14:46:50.381826+0000\",\"flow_id\":423307125628719,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":60150,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3434,\"start\":\"2025-07-29T14:46:50.368431+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"52.209.240.73","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.25","port":34322,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2025-07-29T14:46:50.439831+0000\",\"flow_id\":653302624329734,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":34322,\"dest_ip\":\"52.209.240.73\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":927,\"bytes_toclient\":3168,\"start\":\"2025-07-29T14:46:50.368646+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"108.128.33.172","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.25","port":40322,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2025-07-29T14:46:50.490105+0000\",\"flow_id\":929215618381264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40322,\"dest_ip\":\"108.128.33.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":927,\"bytes_toclient\":3168,\"start\":\"2025-07-29T14:46:50.423376+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"images.prismic.io","ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-06-05","domain_rank":13460,"first_seen":"2018-03-28T16:39:57Z","last_seen":"2025-07-22T11:14:37.898112Z","alert_count":0,"request_count":2,"received_data":7554,"sent_data":1092,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":235,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-07-23T15:19:49.824156Z","alert_count":0,"request_count":2,"received_data":798867,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bsc-dataseed.bnbchain.org","ip":{"addr":"52.209.240.73","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":0,"first_seen":"2023-08-03T06:51:11Z","last_seen":"2025-07-26T09:55:57.436941Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1045,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bsc.drpc.org","ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":0,"first_seen":"2023-11-21T22:39:48Z","last_seen":"2025-07-20T10:35:07.54852Z","alert_count":0,"request_count":2,"received_data":6238,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pengu-memes.com","ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-29","domain_rank":0,"first_seen":"2025-07-29T14:47:13.449955Z","last_seen":"2025-07-29T14:47:13.449955Z","alert_count":1,"request_count":10,"received_data":6945788,"sent_data":4426,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":3267,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2025-07-23T23:13:52.866577Z","alert_count":0,"request_count":2,"received_data":943,"sent_data":880,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":36142,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-29T14:46:50.280074+0000\",\"flow_id\":215288974542982,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":36142,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3514,\"start\":\"2025-07-29T14:46:50.198790+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":36144,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2025-07-29T14:46:50.309829+0000\",\"flow_id\":1883029070595507,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":36144,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":915,\"bytes_toclient\":3515,\"start\":\"2025-07-29T14:46:50.247219+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.25","port":60150,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)","source":"{\"timestamp\":\"2025-07-29T14:46:50.381826+0000\",\"flow_id\":423307125628719,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":60150,\"dest_ip\":\"104.18.11.59\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058812,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc .drpc .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc.drpc.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3434,\"start\":\"2025-07-29T14:46:50.368431+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"52.209.240.73","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.25","port":34322,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2025-07-29T14:46:50.439831+0000\",\"flow_id\":653302624329734,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":34322,\"dest_ip\":\"52.209.240.73\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":927,\"bytes_toclient\":3168,\"start\":\"2025-07-29T14:46:50.368646+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-07-29T14:46:50Z","timestamp":1753800410,"ip_dst":{"addr":"108.128.33.172","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"172.18.0.25","port":40322,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)","source":"{\"timestamp\":\"2025-07-29T14:46:50.490105+0000\",\"flow_id\":929215618381264,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":40322,\"dest_ip\":\"108.128.33.172\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058780,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":927,\"bytes_toclient\":3168,\"start\":\"2025-07-29T14:46:50.423376+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-07-29","alert":"UNKNOWN_News_Penguin_Feb2024","trigger":"pengu-memes.com/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"Credits":"Is Now on VT! for notification of the malware sample","Description":"Detects an unknown File Type that was part of the tooling used by News Penguin to target orgs in Pakistan","Hash":"538bb2540aad0dcb512c6f0023607382456f9037d869b4bf00bcbdb18856b338","Reference":"https://blogs.blackberry.com/en/2023/02/newspenguin-a-previously-unknown-threat-actor-targets-pakistan-with-advanced-espionage-tool","author":"Yashraj Solanki - Cyber Threat Intelligence Analyst at Bridewell","date":"2024-02-27","rule":"UNKNOWN_News_Penguin_Feb2024","yarahub_author_twitter":"@RustyNoob619","yarahub_license":"CC0 1.0","yarahub_reference_md5":"861b80a75ecfb083c46f6e52277b69a9","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"45cc6729-fe81-4055-ba74-40f5a17d4fae"}}]},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pengu-memes.com/main.js","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fae7270dd285a522177de99d883513f2","sha1":"5dd78a21c33162b598785e1efc4c063b11d23f55","sha256":"3d1206f52450246c1eb7e77bb39f9a308087b53ab691d103daa694d75aed77a5","sha512":"c03cf3c47dbd39f2e04215c41fb4fe05ab87ca9dbbc0f26bf8f3eb31e81e875bfc3969521bb7ec5cc15504c66fd20bd4ccc7277bb12adbab926e37df102754b5","ssdeep":"24576:I5nEWD6HpatgTbXEuDP2gGvf3RIkH4WLbLgvPODvp7yhuqVbT9fA1nrNN4g+/LBx:I5nEWD6HpatgTbXEuDP2gGvf3RIkH4Wq","tlshash":"ad153d1aab952538d173f339cd6b9809f936176f1556850f3a3c90e80f7682483b9fb8","size":929473,"data":"","first_seen":"2025-07-29T14:47:21.582185Z","last_seen":"2025-09-27T18:54:53.815875Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-05T05:20:03.272865Z","times_seen":237064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/svelte-animations-12.0.4.min.js","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"01c37e3139e0f56ea72eb4997706368e","sha1":"c37e4efb3c424f2c548510009aa606f5b8f41419","sha256":"b6ae68a42ad03b62a716c2bdcbd8f8aaa5439ae1654c969efadca4bf3edd3ad7","sha512":"f7a37cd42984c31767b1dc400c61ec2c193387cfc8fa9fcfb58e41be1ededd9dc95cd3b3fe746a79ec842eaabdc7013da23d68acfefd18f3d28bb855eeed3c19","ssdeep":"49152:qsd2QwGbHQFWRQ5J+OU2z7dgOZX0IgrzM3l3FwNBrgIGHG7tht:3xwG0FWRQ5J+OU2zzoV","tlshash":"d236c8acf78548508bb90295da2dc1ab9c0e3e95879c63f9ff4d6d96734871308e38b1","size":5181682,"data":"","first_seen":"2025-07-29T14:47:21.602614Z","last_seen":"2025-09-27T18:54:53.910065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","size":60819,"data":"","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-05T01:42:45.861681Z","times_seen":31852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1fea3c052ce0aa0d5504febafd153751","sha1":"3e5ebf3672040b7b352c8319db010d3ea42b46f8","sha256":"3629f5f37902cd1f1e31f9572ca52836e4ee2b28f899f5613aa529badfb1825b","sha512":"fdf4a1e0c2b84d4cc4e06ac8cad27ebdc5e177059f7344128a7d9fdb8cbef53943d264b58b1b5976766c1279cf82d39d6ff3fa288bfe180491841745eff7d6fa","ssdeep":"","tlshash":"1a016d14d17619b8009b9016db4e6b0834a704ff324ad315b91e9f7e2ef2a74846d6a7","size":769,"data":"","first_seen":"2025-07-29T14:47:21.603709Z","last_seen":"2025-09-27T18:54:53.887566Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04af1239973dcbbf9d79968cf36f3328","sha1":"1be3805de753df939dcece875151fd36784d3f0c","sha256":"c1f00693c00d5aec2f609cf199404e5521653096066e52b1bd1810e850e75387","sha512":"98da58bd7eb016dae730f076aa144f0679ae40f05293a5bbee2677f85ba0ce60becf322bfac8484209937b2fa71785185a46ac17e596026ac15b61f002db0a59","ssdeep":"","tlshash":"76d0521891930400ab0b2c8aa2649210e0e282664238f001b0ae8c3a8f38dce04efe68","size":251,"data":"","first_seen":"2025-07-29T14:47:21.60488Z","last_seen":"2025-09-27T18:54:53.893085Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-05T06:58:40.227608Z","times_seen":738280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"pengu-memes.com/main.js","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:48.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Jul 2025 04:13:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68884a72-e2ec1\"\r\nexpires: Wed, 30 Jul 2025 02:46:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ghd%2Fh4s08IXkoBL5Gndp%2FPnzDv5U2Efk2%2BL%2F4eXeVrGn82t4hhXv1OEy%2B8bbU87IstPJ6REuB3MrnLlgfPUxjDgXO%2Bwxh%2B4Z2LvmjmY%3D\"}]}\r\ncf-ray: 966d6869ae77eb48-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":929473,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (421), with CRLF line terminators","md5":"fae7270dd285a522177de99d883513f2","sha1":"5dd78a21c33162b598785e1efc4c063b11d23f55","sha256":"3d1206f52450246c1eb7e77bb39f9a308087b53ab691d103daa694d75aed77a5","sha512":"c03cf3c47dbd39f2e04215c41fb4fe05ab87ca9dbbc0f26bf8f3eb31e81e875bfc3969521bb7ec5cc15504c66fd20bd4ccc7277bb12adbab926e37df102754b5","ssdeep":"24576:I5nEWD6HpatgTbXEuDP2gGvf3RIkH4WLbLgvPODvp7yhuqVbT9fA1nrNN4g+/LBx:I5nEWD6HpatgTbXEuDP2gGvf3RIkH4Wq","tlshash":"ad153d1aab952538d173f339cd6b9809f936176f1556850f3a3c90e80f7682483b9fb8","first_seen":"2025-07-29T14:47:21.582185Z","last_seen":"2025-09-27T18:54:53.815875Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/loader.json","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:49.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /loader.json HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:49 GMT\r\ncontent-type: application/json\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=srom9AZ4v0%2FBUkc0CRUeNUzf4yLzVuPoEQbpUVKwcx6u2ZAiU%2B3rplz7XEqDbkWcdPMMdwUqUtIypndY4QrymuAgWYoMWdQgkM2j8Fr9eAm%2F6sGtDyEa00cYl78igFJfwCE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 29 Jul 2025 03:59:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68884718-a20\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 966d6870ec21be49-CPH\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=25595\u0026min_rtt=25187\u0026rtt_var=98\u0026sent=135\u0026recv=60\u0026lost=0\u0026retrans=0\u0026sent_bytes=160409\u0026recv_bytes=4034\u0026delivery_rate=2478282\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=142316\u0026unsent_bytes=0\u0026cid=36da50c4e34f763b\u0026ts=1512\u0026inflight_dur=226\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2592,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6e7a745aa1b20338f87baa3181bd1e1e","sha1":"355d12b2b8bbd44ecd5eb5c9d168fa5e63e0d826","sha256":"42db60215fe0c5b69c6cf5adad5977542d56a62b4a67e4c4233a97c165e188d2","sha512":"0a5c4fb2fd06cf119385ef9c71b052a213d7e992fce73142b3c75f3467c4365aa04bbc68c0308d841377214a3c4acc994f446638fa8696ac1a801f60c752fc74","ssdeep":"","tlshash":"b15120c4057502dcfb161590db5774c9dbc88c667fc401eaeeb64c188faaaad2342f23","first_seen":"2025-07-29T14:47:21.583364Z","last_seen":"2025-09-27T18:54:53.85961Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:50.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pengu-memes.com/\r\nOrigin: https://pengu-memes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:50 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 966d6874b89610eb-CPH\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=25991\u0026min_rtt=25755\u0026rtt_var=3492\u0026sent=8\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3269\u0026recv_bytes=1281\u0026delivery_rate=167858\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=3704121011073ee6\u0026ts=182\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":59,"dns":3,"connect":45,"send":0,"wait":123,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/secureproxy.php?e=ping_proxy","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:50.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /secureproxy.php?e=ping_proxy HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pengu-memes.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:50 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=nNjzFDjNNgpJJTqO1crc0lEF7XVef010CsGgrxSYYtzMZepqHrDsnbj0MOQpYis9TF4TrqXf66LkArhnjidlfNRR2gcUMQzax%2FgzEzTnmTt%2BJ%2BwL2Is1MsIE4OhF7pfK7F4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 966d6873dc2dbe49-CPH\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=26197\u0026min_rtt=25187\u0026rtt_var=919\u0026sent=138\u0026recv=71\u0026lost=0\u0026retrans=0\u0026sent_bytes=161913\u0026recv_bytes=4782\u0026delivery_rate=2805945\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=174326\u0026unsent_bytes=0\u0026cid=36da50c4e34f763b\u0026ts=1949\u0026inflight_dur=254\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-08-05T07:04:55.524334Z","times_seen":9007,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.prismic.io/pudgy-penguins/35374c56-10b6-476b-a374-54cd2182e1ec_igloo.png?auto=compress,format\u0026rect=0,0,321,321\u0026w=32\u0026h=32","fqdn":"images.prismic.io","domain":"prismic.io","tld":"io"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:50.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"images.prismic.io","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sun, 20 Jul 2025 16:24:15 GMT","end":"Tue, 19 Aug 2025 16:24:14 GMT"},"fingerprint":{"sha1":"D4:62:1C:61:73:BB:28:AB:36:5D:59:18:AD:26:1E:DF:3C:5B:9B:01","sha256":"97:62:40:5A:53:56:0D:93:91:01:48:FD:56:13:D3:3A:72:5C:4B:A5:1A:1E:B4:F6:30:89:82:B4:54:FE:41:9E"}}},"request":{"raw":"GET /pudgy-penguins/35374c56-10b6-476b-a374-54cd2182e1ec_igloo.png?auto=compress,format\u0026rect=0,0,321,321\u0026w=32\u0026h=32 HTTP/1.1\r\nHost: images.prismic.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 1c903da7d317a7bff3279807f0e0e80916dc443a\r\ncache-control: public, max-age=315360000\r\nlast-modified: Sun, 20 Jul 2025 21:44:53 GMT\r\nserver: imgix\r\ndate: Tue, 29 Jul 2025 14:46:50 GMT\r\nage: 752517\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230118-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\ncontent-length: 1034\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1034,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2f3507a773a5d3d0fcc55b1c7532129e","sha1":"e4d6b872dd7159f58cc39dcbd3533759662b7f28","sha256":"76baf38bd3a609e3afe85daee31b07050085efa0ad8c2b567d86e6d14d5f7765","sha512":"cdceb0bacba8ed475520cd1a40e26899e451cf8f274e15952a5bcc3b82fb17f6194c9e3c0839651f4d5eea097d8599d590276e9a32b778c14f19733a7105a469","ssdeep":"","tlshash":"6011c82c31643e32e61d0b310a6edf42324ad774a7b764529cc27308ca39739d40bf00","first_seen":"2024-12-15T08:53:22.928746Z","last_seen":"2025-09-27T18:54:53.825732Z","times_seen":6,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":10,"connect":34,"send":0,"wait":32,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:50.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 23:06:13 GMT","end":"Mon, 06 Oct 2025 00:05:56 GMT"},"fingerprint":{"sha1":"8A:D4:06:E3:DF:41:70:FA:F8:24:61:06:C6:AD:47:97:37:2F:30:94","sha256":"B1:0C:6E:35:A4:D2:D3:A9:97:48:58:62:89:5F:87:76:31:39:A9:9E:3E:0D:7B:F7:56:58:A6:CB:D8:05:1C:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pengu-memes.com/\r\nOrigin: https://pengu-memes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:50 GMT\r\ncontent-type: text/plain\r\ncontent-length: 12\r\ncf-ray: 966d6874e8bf10eb-CPH\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=25991\u0026min_rtt=25755\u0026rtt_var=3492\u0026sent=11\u0026recv=12\u0026lost=0\u0026retrans=0\u0026sent_bytes=3637\u0026recv_bytes=1281\u0026delivery_rate=167858\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=3704121011073ee6\u0026ts=207\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":178,"dns":66,"connect":30,"send":0,"wait":117,"receive":0,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-29T14:46:48.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:48 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Jul 2025 03:58:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2cR5LQsdU7o11LaJHfeBRRvcsPR4lrH9T5xKk2mRGLJKTa%2BgHVroyB5P%2FUt8VNK%2FptnhPhMAY8ftjXNpmfvUhvfbQsrO1YVtkWKM6fs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 966d68669f46eb48-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318624,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65240)","md5":"e3ad80781c96eedb435ffa9dde29ea0a","sha1":"8ab2e82ab547c1129564653dc212a82be313f02e","sha256":"5e6b4ff7dd953b2597d8bf16a080ba2ba673992325026f9be611bd423b6ff415","sha512":"dae42ea83f6eec10ad983641f7e0abe998038791376a013c78383a71ebc657c6f88955da02a239c30aefe917420b3274a06af951f981c8dc9486c08e0daadc99","ssdeep":"3072:A4e8rJfAgAVQDkpSXnHyPd0VL4RSDWX0KMF+5Lzpx16/Tqi22vL0Ol1PS+HBnlmC:AchAhp7CLHDWkM5N6/Tz2mPTPJHBlL","tlshash":"0e648de067b6e3f89501e7e8d62a94757f6224fb7641c1f5f3ac1d10ab861ad8c438c2","first_seen":"2025-07-29T14:47:21.587705Z","last_seen":"2025-09-27T18:54:53.84171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":72,"dns":1,"connect":26,"send":0,"wait":91,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"","description":"YARAhub by abuse.ch","scan_date":"2025-07-29","alert":"UNKNOWN_News_Penguin_Feb2024","trigger":"pengu-memes.com/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"Credits":"Is Now on VT! for notification of the malware sample","Description":"Detects an unknown File Type that was part of the tooling used by News Penguin to target orgs in Pakistan","Hash":"538bb2540aad0dcb512c6f0023607382456f9037d869b4bf00bcbdb18856b338","Reference":"https://blogs.blackberry.com/en/2023/02/newspenguin-a-previously-unknown-threat-actor-targets-pakistan-with-advanced-espionage-tool","author":"Yashraj Solanki - Cyber Threat Intelligence Analyst at Bridewell","date":"2024-02-27","rule":"UNKNOWN_News_Penguin_Feb2024","yarahub_author_twitter":"@RustyNoob619","yarahub_license":"CC0 1.0","yarahub_reference_md5":"861b80a75ecfb083c46f6e52277b69a9","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"45cc6729-fe81-4055-ba74-40f5a17d4fae"}}],"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/Heading.svg","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:48.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /Heading.svg HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:48 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Jul 2025 04:23:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68884cde-8374\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gj%2Fcn9ja47bNzgT9lyagFwnUe9KJIfjXXAu5ABgpll0mhJucPwpgcJCsrgx8Q4u%2BPxvZhXJzR167g%2FsoplezFjFlLY43Ne4iZCPnVEY%3D\"}]}\r\ncf-ray: 966d68699e42eb48-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33652,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0caded1abccfe1ba63070bc265881300","sha1":"53de24e9b347172bc491bc99f88ff5c152d3a341","sha256":"d5c2a8504b596b660dfcfc285d442b79406eefcfed072640cbd597506227e4b9","sha512":"f0153f20ee68b1e9f0d3ac51400206c7f106a51efcade64879bc2b67bcd74c1513ef97a07bff35567111efa5e563d25c5a0c5e0ca6823f7977e4b4de42a8adce","ssdeep":"768:kftEsjTKH/HHDH9ggqaitvz/rOT6AmMy972r:kftEe2H/HHb9ggViOT6AfA0","tlshash":"5be263dd4a9009d08dc54ac7ad32a44c3f07b8bf6d978b14c188cbf6755a4acf66ce81","first_seen":"2025-07-28T12:34:20.82762Z","last_seen":"2026-02-22T23:09:36.512237Z","times_seen":13,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/reward.jpg","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:48.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /reward.jpg HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:48 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Jul 2025 04:41:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"688850ea-121a2\"\r\nexpires: Thu, 28 Aug 2025 14:46:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GIZU7Zhk4Au8JcMWQjlqRWH2wd9%2BpUlYC1gkmq9tI42s7%2FPGr0XWc2wWq8p41sy%2Fn%2BDqawXdcJxiNvIZ1IIHHsfPDJcIBTYPpHfe8OU%3D\"}]}\r\ncf-ray: 966d68699e4deb48-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74146,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 734x319, components 3","md5":"7938a00b62ee09b5fb8af9e7200253fb","sha1":"72dea13cab1a0278bf9f9dcebdd5c27e55f270a8","sha256":"c1eaae062b1f89c61071dfdb1ba4c64b6b4edf7a7242bb56a7d6fa8d096a3ac4","sha512":"8d6218e5f9e255f4f970ca92c097b6ca5469ce5f2808d0814e6e0482aa2909b8f75e383456b7436ac26786ada2d5d3c77085bea84baff5bfe46092fea4ee0383","ssdeep":"1536:yqh930h83UAPcLHLrvNVCHMhQOZbNK0ZLQE5sXH4o5fJfobPuF:t30+3U8cHbNVwe1JQI8H7VhoiF","tlshash":"08730133a5a17742f76538b38ac50de3de452da37627810a7d00dcdc750ef45b92ca6a","first_seen":"2025-07-29T14:47:21.590578Z","last_seen":"2025-09-27T18:54:53.87072Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:49.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 966d687008a95695-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 897655\r\nexpires: Sun, 19 Jul 2026 14:46:49 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vI9NPQhcmONfSJtB8FyWLw4UiWyIRgn6xv5f6l3dWtx41yvGueW3lF34PNsENcKjVYSWFgpi4FFH5mNQVt7v2snlhV64IiR%2BzvQKOfPKzokvwgwRaPCVRDJIv7OgTQUA6XHBW%2FNS\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-05T01:42:45.861681Z","times_seen":31852,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":25,"dns":1,"connect":3,"send":0,"wait":14,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/image-load.js","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:49.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /image-load.js HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:49 GMT\r\ncontent-type: application/javascript\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Wsl3PA8TEe%2F6DpesmHGLF1M24tLawHFb1so6CUTugTqLEJjj22jHVaSvF8N6Fgy4vUL0kSA9CVgqcSuNMqQiLI2M8i6DflHHvpEiRvThBu%2Bu6t8RzEOmlJqmf2bbgh3VVCA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 29 Jul 2025 04:03:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68884810-23d2\"\r\nexpires: Wed, 30 Jul 2025 02:46:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 966d6870cc20be49-CPH\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=25665\u0026min_rtt=25187\u0026rtt_var=511\u0026sent=126\u0026recv=44\u0026lost=0\u0026retrans=0\u0026sent_bytes=149477\u0026recv_bytes=3298\u0026delivery_rate=1277302\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=80958\u0026unsent_bytes=0\u0026cid=36da50c4e34f763b\u0026ts=1494\u0026inflight_dur=205\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9170,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9170), with no line terminators","md5":"2d71d6a285834a600b9428d08795ae47","sha1":"03428bba8b893d628e7897d3e8923c3a856bfef8","sha256":"678ed0e14440ee01f36794a144e0777d5b33dcca41647e9778c7c7e749b1f5be","sha512":"4db8eb94b0b7d043e169634610689f435f6df0a8b5eaab20ab2e15f9dadaff87bcb634b9511d2d6036636f61900d515cd43cd8b5d04f74c5ffa96c9e3a1db715","ssdeep":"192:ATnyF2JRnFh+IOprhYrDnNAX1busY6qyyqNPtgvsWqW44MyEMHU:YvFheprhZbuKh5tgRNxfw","tlshash":"881261deb1c2f46543a37630811f200ae27a495df549c494e729e9e2fcb444e9267fbc","first_seen":"2024-12-18T05:35:34.280484Z","last_seen":"2026-02-23T23:30:54.316876Z","times_seen":6,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:49.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:49 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 966d687179a0712b-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 600245\r\nexpires: Sun, 19 Jul 2026 14:46:49 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qU4Dc%2FN%2FXsc0yzKv%2B6dZqm3LRUPasSRGJZ%2BP96sN%2B08wsQH%2FBgbV%2BZb6X%2BcIwP2asWUSa5ADEz%2BPOpXqb5aEoNMkBL%2BWQLEIaWy5rffYLVIfHUXwnAPXHnaHSlgcJxgoscVF%2B3t9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-02T04:01:58.308798Z","times_seen":8484,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed.bnbchain.org/","fqdn":"bsc-dataseed.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.209.240.73","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:50.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://pengu-memes.com/\r\nOrigin: https://pengu-memes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS","post_data":{"size":154,"data":"[{\"metricName\":\"WebVitals.TTFB\",\"value\":689,\"pageType\":\"list\",\"subPageType\":\"main\",\"unit\":\"Milliseconds\",\"time\":1753800413705,\"pageConst\":\"ls4105907596\"}]"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 29 Jul 2025 14:46:50 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T07:58:24.171748Z","times_seen":17721098,"resource_available":true,"data":null}},"time_used":910,"timings":{"blocked":372,"dns":10,"connect":33,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:50.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 11:05:37 GMT","end":"Tue, 23 Sep 2025 12:05:32 GMT"},"fingerprint":{"sha1":"EE:63:A4:E6:4E:19:32:30:4F:F9:7E:23:97:D0:25:98:D1:C9:BF:7A","sha256":"EA:5F:7C:2E:45:73:D4:0F:43:6B:96:01:B6:18:83:C6:42:53:23:E1:8E:B8:28:20:99:88:EB:2C:5F:2F:9D:3D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pengu-memes.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://pengu-memes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0xd24aeC3254652B0ab565E41A945b491e98Bb5FFC\",\"data\":\"0x73d4a13a\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:50 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-public-multiregion\r\nx-drpc-trace-id: e068be0cd36477e2d12b9334b14ca077\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 966d68767d8b56b4-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c6bfa8fda4c0e071f9d03e47e2109c3c","sha1":"c9cd91f85569f1927c3deb5f4c3469255b6479ca","sha256":"30bd4eeaa66748ea6d936f73a797160ea5ad2aa29caad7e413598ff962780988","sha512":"91972a80a9592ab068cf65c75de6ec5ab6c1e42945c6fe8d5e7356ff5e0dd6e076c1b637908a86991e085becd11a1f743d901412bb9ac6170dfd4da20762cdc4","ssdeep":"96:+igW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:V5TB2SzAT/7kSRRrze3k","tlshash":"2ca179f0ee02c891f1be4768f2ddbe0461383326eedc5a4604745a991ee5a51bd0dccd","first_seen":"2025-04-16T10:17:39.724523Z","last_seen":"2026-04-30T18:00:51.584548Z","times_seen":621,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/svelte-animations-12.0.4.min.js","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:48.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /svelte-animations-12.0.4.min.js HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:48 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Jul 2025 05:01:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"688855bc-4f10f2\"\r\nexpires: Wed, 30 Jul 2025 02:46:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgH3eC9tG9pLoy4Yxx5n8%2Bl7ujReBP3Z6HoL%2BisDQhKwEOV6ZbO2o45TnehMQwIQJvcRCjWSlkkRMIhfpnePh8lR7vUljEK6MbQYksA%3D\"}]}\r\ncf-ray: 966d68698e1feb48-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5181682,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"ec8160e8c1ed3bb846715ad02a25d805","sha1":"f5e81994181448d7ff58f307c1a56d6c3466ef3c","sha256":"74aa23841494c4fe2518f8d14c7770cee8dce784ea2b1611d2663bf72c0018b9","sha512":"ad2810fbef169357c07b3795525b51eba45859d5c0715f35bd1a4d5442359e647df0158f97362e2591284ede534a142a643d40bbf14f675659b9605611e41c74","ssdeep":"12288:VzBe6kEdOxQoNqfd+RLqbOxRv4pTNHVl8OqSIpwxuqKoAf5J+OUe1Ez3f/+1Modv:qsd2QwGKsNHQFlpwxvRAf5J+OU2z7dv","tlshash":"f3254addfa4b5020c76922914c1a884be86d6c2155ccd2fdfd4cedc27da9a6280e7b3d","first_seen":"2025-07-29T14:47:21.595749Z","last_seen":"2025-09-27T18:54:53.805716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/participant.jpg","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:48.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /participant.jpg HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:48 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Tue, 29 Jul 2025 04:40:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"688850b4-15dd9\"\r\nexpires: Thu, 28 Aug 2025 14:46:48 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wE2hrnMxQbpM56DldR1u3lIDlFfRXuQeoUkZZhMI7MNabYxbFCBVkZP1Fz211lHPfO2wn%2F5RwhAPM8TIzynURow3kXiVTFUsBRaCJ0%3D\"}]}\r\ncf-ray: 966d68699e44eb48-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89561,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 804x336, components 3","md5":"3ed5d5c37efe17845af92c8cd06e48d5","sha1":"57436f5d4c237063cb76881d231e0e0cc9303784","sha256":"23621b37ea824278fc5ad5bef52b26d21c9666483ed40a4103b026bfbe308539","sha512":"079ef466037a6f1fae900b0ebc918835e55df6824c8a99450bd215ad9ece8f191ff6b946a09364b0e20a621d40ac8526243cd866b7b3ac3b516f0552d27b4e07","ssdeep":"1536:ftHUOzZpE2c2ZB0EkEokOoJtNKMG904OX1zzoXLEcZH5ZyRv9ZpJGF8qNIAuUNcs:ftHUOzfELO+kOoJTK9QpcXLEcZZZopJq","tlshash":"a7930245cd59c47bfb98b038e1ec9239fa417f8c1fe09673e92dc235079139a83661a9","first_seen":"2025-07-29T14:47:21.596922Z","last_seen":"2025-09-27T18:54:53.846429Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc.drpc.org/","fqdn":"bsc.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.11.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:50.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Jun 2025 11:05:37 GMT","end":"Tue, 23 Sep 2025 12:05:32 GMT"},"fingerprint":{"sha1":"EE:63:A4:E6:4E:19:32:30:4F:F9:7E:23:97:D0:25:98:D1:C9:BF:7A","sha256":"EA:5F:7C:2E:45:73:D4:0F:43:6B:96:01:B6:18:83:C6:42:53:23:E1:8E:B8:28:20:99:88:EB:2C:5F:2F:9D:3D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://pengu-memes.com/\r\nOrigin: https://pengu-memes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 29 Jul 2025 14:46:50 GMT\r\ncontent-length: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS\r\naccess-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 966d68751bc556b4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-05T07:58:24.171748Z","times_seen":17721098,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":10,"connect":2,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pengu-memes.com/main.css","fqdn":"pengu-memes.com","domain":"pengu-memes.com","tld":"com"},"ip":{"addr":"104.21.58.55","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:49.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pengu-memes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 29 Jul 2025 01:40:40 GMT","end":"Mon, 27 Oct 2025 02:39:22 GMT"},"fingerprint":{"sha1":"4F:53:03:8E:56:FC:C8:1C:F0:08:F2:E9:01:B8:13:98:B5:87:05:F7","sha256":"97:75:40:F8:80:63:F0:63:94:73:21:8D:B7:39:22:40:0E:29:51:0B:D5:58:C8:BC:A0:58:92:8D:8D:87:3F:82"}}},"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: pengu-memes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:49 GMT\r\ncontent-type: text/css\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hNPfp5PAPnMLkhOs71eedlc8MI3hWlMZPZ3Z%2FRGFjpGPM4iyRozql1hKwcs3%2Ff%2F2axy%2FettkQUTKx8yIFV17clUwixVHpF%2FJPoU3UPXjKa1qS3Tw0%2B77uOd5JDZka2XsN90%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nlast-modified: Tue, 29 Jul 2025 03:55:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68884646-49011\"\r\nexpires: Wed, 30 Jul 2025 02:46:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 966d68700c1abe49-CPH\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=29426\u0026min_rtt=28279\u0026rtt_var=8814\u0026sent=22\u0026recv=20\u0026lost=0\u0026retrans=0\u0026sent_bytes=5614\u0026recv_bytes=1810\u0026delivery_rate=95904\u0026ss_exit_cwnd=0\u0026ss_exit_reason=0\u0026cwnd=18079\u0026unsent_bytes=0\u0026cid=36da50c4e34f763b\u0026ts=1393\u0026inflight_dur=107\u0026x=40\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":299025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27622), with CRLF line terminators","md5":"1260ff0bca38dcd991d215c81391276d","sha1":"91394359c510db256787a1c1442e166274d4e12a","sha256":"237eafe65036e054256d809c9eba30ffb45a540d76e2eb7260f5e05446577785","sha512":"ab5db8416063b02bcbb152680a69c112132ed422a49f402377fe227017048164e7e5aff61193046c2d6ff683c609761a084bcf5a84e340015fe18fbf9396957c","ssdeep":"6144:uchAAp7lLHDWkD5N6/Tz2mPTPJHBB+UwXt0cUgVryYaNJc7G7:uqZvjWkD5WTSYFHBoa","tlshash":"7d543a7b4e01224c0533af289bda0668fbb40037a70b31e5bddd61899fb6694c5a5fcd","first_seen":"2025-07-29T14:47:21.598485Z","last_seen":"2025-09-27T18:54:53.850447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":110,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.prismic.io/pudgy-penguins/35374c56-10b6-476b-a374-54cd2182e1ec_igloo.png?auto=compress,format\u0026rect=0,0,321,321\u0026w=196\u0026h=196","fqdn":"images.prismic.io","domain":"prismic.io","tld":"io"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:50.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"images.prismic.io","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Sun, 20 Jul 2025 16:24:15 GMT","end":"Tue, 19 Aug 2025 16:24:14 GMT"},"fingerprint":{"sha1":"D4:62:1C:61:73:BB:28:AB:36:5D:59:18:AD:26:1E:DF:3C:5B:9B:01","sha256":"97:62:40:5A:53:56:0D:93:91:01:48:FD:56:13:D3:3A:72:5C:4B:A5:1A:1E:B4:F6:30:89:82:B4:54:FE:41:9E"}}},"request":{"raw":"GET /pudgy-penguins/35374c56-10b6-476b-a374-54cd2182e1ec_igloo.png?auto=compress,format\u0026rect=0,0,321,321\u0026w=196\u0026h=196 HTTP/1.1\r\nHost: images.prismic.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pengu-memes.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: cf3cdd8239550c0c1bea85501a7404ebab77f2a3\r\ncache-control: public, max-age=315360000\r\nlast-modified: Tue, 08 Jul 2025 04:18:56 GMT\r\nserver: imgix\r\ndate: Tue, 29 Jul 2025 14:46:50 GMT\r\nage: 1852074\r\naccept-ranges: bytes\r\ncontent-type: image/avif\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220109-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept, User-Agent\r\ncontent-length: 5411\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5411,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"03a56e28119a986965f7fef0c32eb686","sha1":"e8ff86665e18727920236656df70470451b69c6b","sha256":"86133c56e037abc0ec2d2136f9f8a4bb1dc7d948b0337996e0c478a799560024","sha512":"d5bfa3e46acb25d4cfd8d027876d02bdc8871fe3a73cbce4c9a417ea740268b0aac14b2b1e5a47d474e7adafa2c1aee9692e882d18fd43b93fe1d554d7f5acc3","ssdeep":"96:+zCj49RFtCsOoajDWGsQEZrdUsmeE8SxHFvqL05ej/ew/vacrmfIrnJcL7:+zC0Dt3NajDWGs/tdUneE1yL8ej/eCFa","tlshash":"03b18f793765b640e36f55b0122eb701a752b8b0b7e238660ad0b0199bf436b4426f27","first_seen":"2024-12-15T08:53:22.92656Z","last_seen":"2025-09-27T18:54:53.789817Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":11,"connect":34,"send":0,"wait":34,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed.bnbchain.org/","fqdn":"bsc-dataseed.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"52.209.240.73","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pengu-memes.com/","date":"2025-07-29T14:46:51.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pengu-memes.com/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://pengu-memes.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0x158862Ec60B7934f1333e53AC1e148811A2E3BeB\",\"data\":\"0x53ed5143\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 29 Jul 2025 14:46:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 555669553bb27c19544fc24fa6c7ff83\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-06-18T09:20:21.245055Z","times_seen":5257,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}