{"report_id":"578c8f90-0097-4258-b4e8-93c95c4045e2","version":6,"status":"done","tags":[],"date":"2026-01-13T14:56:02Z","url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"172.67.186.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"title":"PUMP FUN × PADRE - Exclusive Rewards","dom":{"size":48294,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8594)","md5":"4ac70a67505cfdc0ca697980cf3bfdca","sha1":"1484a7fe011763e52492bf1f18b2bff7273017ca","sha256":"776cedffa51908846d88bb7608874cd5b32034782619010605f00e19bfb11636","sha512":"98d0753a669ff72b6d0f6c3462335bc4dd1c243f7f564e1b3f6c22374b4e9180992c4d4a694660e5bcaa915ae109656244239e14cfab37edd3b69f2e9800ea01","ssdeep":"768:/LnEU1dur2JNF+6wxThnPr6GZH6b6K1EDapr3A0iBoK85uz:znEYur2JNI6khPr3ZH6b6K1EDapc0F52","tlshash":"4123d85d66f7142a581380a6eb97670db165fd43db1ece783b8c12805fc2aa5bda330c","dom_hash":"domhash3ad8c1f079cf4342d4d199ad2cdbf00e","first_seen":"2026-01-13T14:56:26.421936Z","last_seen":"2026-01-13T14:56:26.421936Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"172.67.186.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-17T14:56:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"rakeback-pump.fun","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":34,"request_count":17,"received_data":2377643,"sent_data":7845,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"frontend-api.pump.fun","ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1853078,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":10,"received_data":73990,"sent_data":4929,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"imagedelivery.net","ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":15876,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":9,"received_data":24647,"sent_data":4733,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":117330,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":815966,"sent_data":826,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9f490fc8d1ae762697adaa8df8aa9fb","sha1":"0e5e8fb47ddaf2d43f06ffc20559b329b7c495e6","sha256":"d0f40772b38e12962ab6ef32808a42fa4692bbd34571d467516e2c871c4e9853","sha512":"eebaa65a9be787f500548f5801d580b20c4f96594a06f0e36daaafbcf412769bf7318da4a40731aef48ada642ff1ea6b082a727eba7becf39cce3f3854f2c359","ssdeep":"","tlshash":"a0d0805dcdb11f7301265c2845cc4150f606d4171e5d5c3bf54c204f5f0800548f9345","size":203,"data":"","first_seen":"2025-12-31T12:24:56.584439Z","last_seen":"2026-01-13T14:56:26.473372Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"37cbb4e26d65e866ce2924a1f6db8d60","sha1":"eea96aaead8006338ac5c948b491319f2ac44fd9","sha256":"5783f862825aa43f11ec0788f8276de71a394ec5fe14d0fa618857ca9fd537fb","sha512":"c7093dfd445a2209ee846d36d225512ca35eb3bad6e1be58914aad19a975dd8b1c8826b2026e899b6c7a88b436587a272aa68b94109cc0ad05b48ceef7c6ae1e","ssdeep":"96:agmWsgi7jA6rJOWsrKNHXtv9SvahRy6cSUTB9BoK4rI:apr7jAyAWsrKNHx9GsJUTB9BoKt","tlshash":"efa1e9a47ee6242093e7c2f7261b3226e927b5035f05c80d768c55800f65e23e1bfb9c","size":4955,"data":"","first_seen":"2026-01-06T13:47:59.704578Z","last_seen":"2026-01-13T14:56:26.474041Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"247f0b7b0444ae4e9d3896b74095d510","sha1":"4011e89dea680f565d0b53961e0ba866f84f503c","sha256":"02f02e16d6bdb232f27aa53cbf852b97aa8fc49ca223a02058ed88712e3bc482","sha512":"9b1d289580216cc3f378f4a9d8b09dbfc51994d8ccf815232d4b3968843226ca0c24b8d9391907a83fc908cffc23e6886bd24db87241b3dce8574c1ff4d95529","ssdeep":"","tlshash":"3a01f98e3b7f2c268c6f041be105750e4156ffc79624a9b20d1d85c44fc1a1d3ba0754","size":705,"data":"","first_seen":"2026-01-06T13:47:59.702032Z","last_seen":"2026-01-13T14:56:26.475772Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ba7e5c9acbcc55ebd9b2ad0578212867","sha1":"d4a5dc89ccba68306139d39453a015dba5cc98c9","sha256":"2b35a9eea75abc87e77d091e010a89437a980c5000fbbbcfda3c6680927dbfd6","sha512":"166b4f78367070152ef4fecb4db10a2778f12d70c607f6c94fd9140bc5ce6346ae9fc8ef024e4bac7cb656286c6ae38be0344f04280f4b10e1665cecc50d696d","ssdeep":"6144:SkqDBu0+ykCvzpaHv1GPjNYYu+J264c7IOH9XvOQlOIJS:SkqDBYYk9+jNYYu+J264c7IOH9XjlOIw","tlshash":"66942d5c16f6136c8f80a123ad63fd47e89b69b1d35a1adab630f2c5f4e427270ed250","size":429424,"data":"","first_seen":"2026-01-06T13:47:59.700461Z","last_seen":"2026-01-13T14:56:26.477561Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/1aWv-3Vp.php?s=%2F%40v1%2Fcdn%2Fjs%2Fsweetalert.cjs.js%3Ft%3D29471935%26u%3DasIturwxObjFuQQzGDY5MjYzOTQ4Y2I1ZTk4ZjIxYjZjY2NiNXkjadJEnQwCd7DjPw","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-27T12:16:15.967898Z","times_seen":2646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"247f0b7b0444ae4e9d3896b74095d510","sha1":"4011e89dea680f565d0b53961e0ba866f84f503c","sha256":"02f02e16d6bdb232f27aa53cbf852b97aa8fc49ca223a02058ed88712e3bc482","sha512":"9b1d289580216cc3f378f4a9d8b09dbfc51994d8ccf815232d4b3968843226ca0c24b8d9391907a83fc908cffc23e6886bd24db87241b3dce8574c1ff4d95529","ssdeep":"","tlshash":"3a01f98e3b7f2c268c6f041be105750e4156ffc79624a9b20d1d85c44fc1a1d3ba0754","size":705,"data":"","first_seen":"2026-01-06T13:47:59.702032Z","last_seen":"2026-01-13T14:56:26.475772Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"247f0b7b0444ae4e9d3896b74095d510","sha1":"4011e89dea680f565d0b53961e0ba866f84f503c","sha256":"02f02e16d6bdb232f27aa53cbf852b97aa8fc49ca223a02058ed88712e3bc482","sha512":"9b1d289580216cc3f378f4a9d8b09dbfc51994d8ccf815232d4b3968843226ca0c24b8d9391907a83fc908cffc23e6886bd24db87241b3dce8574c1ff4d95529","ssdeep":"","tlshash":"3a01f98e3b7f2c268c6f041be105750e4156ffc79624a9b20d1d85c44fc1a1d3ba0754","size":705,"data":"","first_seen":"2026-01-06T13:47:59.702032Z","last_seen":"2026-01-13T14:56:26.475772Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/react-beautiful-dnd.min.js","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a042f9571091ec6577847b8c992d7706","sha1":"ec23ccf05a21230c627bb23085ca1bf913c7ad7d","sha256":"970c3323427ca4ced3ee622c9023b6bf83cbc67462ab339c4a3e6aec53d7e509","sha512":"047e165ddfbcddbd0b7f73d39b174a7aba201a82312520b9bda606a01aa3d257e9528dbbd2964524a39ee7885ec1ad8c192bb67396f4c49603e99952e67f5c23","ssdeep":"6144:sXOGxGmWWM8+mnpvkZrWdjNYYu+J284k7IOH9XPoQXcilw:sXO8GmEEQYjNYYu+J284k7IOH9XpXciq","tlshash":"88942e5c12f6135c9f80a123ad63fd4be89b69a1d75a1acbb630f1caf0e417270ed251","size":437276,"data":"","first_seen":"2026-01-06T13:47:59.680754Z","last_seen":"2026-01-13T14:56:26.461836Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-01T22:44:56.577581Z","times_seen":47715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca13b357b01c079f086788436afd267f","sha1":"019da35b4f3ff5f0abb25cf83422c9bc84ec447b","sha256":"5d6bd12d80f28912aee606f189f69d282ae5f1458f9738d0c52300776a16c3b5","sha512":"a453e85e91cf6d0189441f862fea0dc8bb223c2c20af6d349752a0dc17d7e9cded5191649febfc7d9d68f5a3f0f314c6abfab5dfdb5ad1d32bf99492ef644eed","ssdeep":"","tlshash":"3c41d059e369163a02b75646028fa7f93a6200136554dd2827ecced04ffb591847b2ff","size":2123,"data":"","first_seen":"2026-01-06T13:47:59.705926Z","last_seen":"2026-01-13T14:56:26.479269Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rakeback-pump.fun//1aWv-3Vp.php?s=%2Fjmpd%2F","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:40.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"POST //1aWv-3Vp.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\ncontent-type: application/json\r\nContent-Length: 2202\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2202,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NeXNH4bhH8fmkKpPr9kgA24sLfh1YxqTgUgu%2BnS79DYS9W7Fc8uKRssfmrQt9Ul1NdlRjZ2qqxVQA54Vaz1qMk4OrFNtncAkL9EVWi1p2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc63883d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1fad5a18a87465c07d3175ad4054a74e","sha1":"91bb7f7dee8773e49a669897b0ab153fa6c1ee2c","sha256":"dbe9cfe06ec89bd17a66cd1a928269417acf4c3d537b0d0bfefbb06ce87b2151","sha512":"53232a09987fd89287c42299499320f0640ed4e0e1ff72404f5ae7a7254354d596f174c19655fa0e8f0b1cc03c29d0cd38632b0ceab2e3d2e16ae49c9aacc1df","ssdeep":"","tlshash":"17d023754386525425c6e14651fa6655070334113d441dcf70da99d217d78ddc6add44","first_seen":"2026-01-13T14:56:26.426504Z","last_seen":"2026-01-13T14:56:26.426504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":343,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/wallet_phantom.svg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/wallet_phantom.svg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TrkcBCzQOTxlyziNXZ5se6PgrC7mMqQ%2F2IiiLFjiY0Xxpw8KUp2p3zaH6%2FmCgzvAx%2BxH%2BN1QmI1wJxEutPCMzrNXBf1VidNu30jweaMJkw%3D%3D\"}]}\r\netag: W/\"695f81c8-455\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc559a8856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1109,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c03cefef7d2f9c744962ad68f1a8fac","sha1":"078a264cd05cec66acb42574be3caa03bcba5441","sha256":"f0568a024a8290d744ee7a548839ab9db336357a3fe1b8efcd881d8da1e57013","sha512":"d32da9d18f95111d9185a1ac32bb754aa91af1e3767e168d3acaa272e6c32f62a3346e85380b68682403637407ba104cc6621414563f0b22710fb5ffb677e97e","ssdeep":"","tlshash":"f811ccd53747d375c447eafd0a262dd06c1754f66725b47fc2813c0aa8560a53ca48fe","first_seen":"2025-07-22T14:10:16.992352Z","last_seen":"2026-07-31T06:10:12.38714Z","times_seen":137,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/Gbu7JAKhTVtGyRryg8cYPiKNhonXpUqbrZuCDjfUpump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/Gbu7JAKhTVtGyRryg8cYPiKNhonXpUqbrZuCDjfUpump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=6xhoRsFm7P151mVG.N5U7ZWF8zDUT9UgPbbpwJ5MKtY-1768316138631-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a2b8032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"dec0e221be5c05be5d0cbbb8057152a9","sha1":"2e0ec39312518f3ad83eef726f566ba7c89b4bf3","sha256":"a0389ba7ca8c93ce5fe330e11230c96d7d78dac4ac3025d7baf6c5515ad7b7df","sha512":"bfa9825ba91ac0c7b54f51dd3ebdfbbf6c951a1a1cef94738ff885135b89c071a136de79847cfb900e884b192361468e0182a5730b2418c61c6b182c5074695c","ssdeep":"192:1j9jhjYjqK/kaa7lVzzYzMf/PMWa02rl9ieJGD:c/hgVtfXMWx2rl9ieC","tlshash":"0ad1b763f5f8257b019382a231a9772979e58023dea704e5b69ec0761f8df91fe07180","first_seen":"2026-01-13T14:56:26.430961Z","last_seen":"2026-01-13T14:56:26.430961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":65,"dns":3,"connect":5,"send":0,"wait":47,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/9AvytnUKsLxPxFHFqS6VLxaxt5p6BhYNr53SD2Chpump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/9AvytnUKsLxPxFHFqS6VLxaxt5p6BhYNr53SD2Chpump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=kklV.qbbGdgnWbqofMO4kwhLrAMh3bABndNcFdTTfHQ-1768316138629-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a2b7432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"f89211bac7dc143930d9f82144f27170","sha1":"e424e8db24f1d698f24372b050e175959d18c2dc","sha256":"1f03801d0de29dca1a21857f0e98365e808fddb87154c6139addf74233606a9a","sha512":"dbb618058530dc4eab147304e746d8a15f7b5a20bafefebcf91a6b59742afb6ab887fa9eb18536d9e701629111db517029759b68721f5ace5924ce77cb6c807d","ssdeep":"192:1j9jhjYjqK/kaa7lVzzNzMf/PMWa0Trl9ieJGD:c/hgVGfXMWxTrl9ieC","tlshash":"44d1b763f5f8257b019382a230a977697ae58023dea704e5b69ec0761f8df91fe07180","first_seen":"2026-01-13T14:56:26.435117Z","last_seen":"2026-01-13T14:56:26.435117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/a3W4qutoEJA4232T2gwZUfgYJTetr96pU4SJMwppump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/a3W4qutoEJA4232T2gwZUfgYJTetr96pU4SJMwppump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2871\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5c7d888deb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfrQUtu-CaZtZ8bcmDMSDBA5K1QLqyszcoZn7faW5HDQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-images: internal=ok/- q=0 n=25+50 c=1+48 v=2025.11.6 l=2871 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2871,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"46f28b7dfcc0417634d90e294ce318f4","sha1":"c1a3e3e650321ed79c8ae742effcf0210fcb7bc6","sha256":"7e673a4879a7625da66e4a4136f1bcd02af1f1ef99b9b4b138448c9d5997f864","sha512":"1491259150eb7fcb559dc4ae656630e93fc52666b06bdfb9c0ecae9f9c02ab50fe974efb765a6453b8f4cb95b93628d655f634c7e4df54cb56de626c13304507","ssdeep":"","tlshash":"1b510af2b0c98e26c14d40709b42d03e13a7aab8ec696f12d194be282d2d457ad9991e","first_seen":"2025-12-31T12:24:56.574766Z","last_seen":"2026-01-13T14:56:26.437432Z","times_seen":4,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":64,"dns":3,"connect":1,"send":0,"wait":15,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/pill.png","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:39.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /pill.png HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 510647\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\netag: \"695f81c8-7cab7\"\r\naccept-ranges: bytes\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BN2ptJ%2By8CaNsT1cpeisiQuiW6%2BB34hqT2CZcJuMXgbnquQ33NhY9mAerqHBK%2B15bpdUbARMMJ6DNyAx%2FVKpor1XEf4iu%2F8a7S0EAyTXLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd5bc5d59b956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"24ebec471450bbe2401c8ccff9798c51","sha1":"9ce01ae7267310e402291073fceda3bf52d171b3","sha256":"d987ddca308e3fc9172e266fe770e1acf5a68246c3406e1eacb07d8749c072cf","sha512":"ec6357688e31e740e3c1a53e3859b2899e1d035e6e8cd85396da6474d63dc76bff0691989c85beb56bfd0af89316fe49408c1b294a1f57453b9eedb2adf2f875","ssdeep":"12288:gFt2CKT1lEnvyhPl/nMiuIMn1r9xeApVTk:gFbcT685RubJveAp1k","tlshash":"aeb4239ee7628a30f95a6134427f27e1e9a4c6b2eed73cd28db5723c5a34386c507143","first_seen":"2025-12-31T12:24:56.558889Z","last_seen":"2026-03-25T16:06:44.022582Z","times_seen":10,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/1aWv-3Vp.php?s=%2F%40v1%2Fcdn%2Fjs%2Fsweetalert.cjs.js%3Ft%3D29471935%26u%3DasIturwxObjFuQQzGDY5MjYzOTQ4Y2I1ZTk4ZjIxYjZjY2NiNXkjadJEnQwCd7DjPw","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:39.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /1aWv-3Vp.php?s=%2F%40v1%2Fcdn%2Fjs%2Fsweetalert.cjs.js%3Ft%3D29471935%26u%3DasIturwxObjFuQQzGDY5MjYzOTQ4Y2I1ZTk4ZjIxYjZjY2NiNXkjadJEnQwCd7DjPw HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:39 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OUFm%2Br01B7WlKT%2BHyR0wIjVsftkIYz9GhQO56c%2F4vW%2F%2BERnhA9zFKAtwCdvbZbtE3A%2Bg8x%2BT8qZzULMpmkeFBK5Tnm6ZUkuQbvCdci6rrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc5d89d856c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-07-27T12:16:15.967898Z","times_seen":2646,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/close_icon.svg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/close_icon.svg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gULh6XXMHVkhiG%2BFRVq8pS5CzSd2hB9q9q75Pcs59n7zKy%2BK87jbDnMOxoI195SHzOiSIXyN6p9TI8jEPdEPIaKvYlEhNq%2B3a7CwdEXBLQ%3D%3D\"}]}\r\netag: W/\"695f81c8-115\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc559a8356c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84e69edfdc5f95304ca09ecdb8b4470a","sha1":"4bedd7a8bb870242463c32dd6514110998619883","sha256":"99dfaae864d697c0c85271501b1c9d3fa055bbcd5891ff143412e482ddd05226","sha512":"b92795a66c3d7f0691604f8448fa2a68bd1e8627148b5d22b55de5805fe9524246d3130e9f69d5613cf42b4f25b34edee62992238ee14cb56599f268fa367469","ssdeep":"","tlshash":"53d02b15530cad1cfe228510c35c723950ea62521b5e054ce9622235751c59f7d3fadd","first_seen":"2025-12-18T09:47:26.941018Z","last_seen":"2026-07-31T06:10:12.359497Z","times_seen":141,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/wallet_coinbase.svg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/wallet_coinbase.svg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DocrYqTFn%2BWwexzuMlGqz%2BoATlLZ3u3IxL%2FIEcRHs2NKKBEfXCKbFGduUQaOyqb6sQ6HR4IUHBbbX%2BeMLR6nkjoo5jxgGRTDhhhv8YBVnw%3D%3D\"}]}\r\netag: W/\"695f81c8-206\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc559a8e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03d813a0c0c8a475559c8cec40f5d1b3","sha1":"ea4813335e225371c30a56027e2f7e54e247e5d5","sha256":"eb728f9afa3b934f43dc77e99914c2fe62124c056fa6b1c3d00c8b80c917acf4","sha512":"9444c473e807bbc985a03cf74ad5b06cab25237d848c1fbdb6a1b2622a6dfdfc1271adc19df88b0b503d60b5004c54dcbe4c357b9929e735bc112a4d8e61af5c","ssdeep":"","tlshash":"e6f0246f7438a191093cdf786e3ae6c8cc07db4886c5c6ddd3202f055202f851909a86","first_seen":"2024-09-19T20:57:03.484662Z","last_seen":"2026-07-31T06:10:12.392472Z","times_seen":156,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/wallet_tokenpocket.svg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/wallet_tokenpocket.svg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9JyjVAodlxgTCbFeqPrI7ScX3VZ%2BOYwdtWzJj%2BjXkbwdV%2FB8z6fBFRO3TFlfynBRXQiyKOP6u94Xm0tW1xRk8tfpjtSIGMxxcqayaVokFQ%3D%3D\"}]}\r\netag: W/\"695f81c8-8ac\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc559a9056c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2220,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8b05a7db1289009d5b1cff1fce3c318","sha1":"2960c5887c4fc46e03b54edd9c3a814930adae58","sha256":"8639f1b554805fc4f701a8629deddd603c18f622b60d35f63ad686032b91b549","sha512":"adef4da670e5e225fefa46f3f37dd92a6d92a7414b71b07a208c218bdfbfe349ed4cd022884da8caddf62bdb55aabf6f42b5578fc5f492c2961057833ef552ab","ssdeep":"","tlshash":"a84111e93b94d4505114979b7f7874bcc42bc2c6a98588d1d0517f1f64981fe2d2efc1","first_seen":"2025-12-31T12:24:56.570544Z","last_seen":"2026-07-31T18:03:20.915458Z","times_seen":128,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/2anPRC6DasQmoun5WehqQe1YgcqYMBcCpi1ZKiQwpump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/2anPRC6DasQmoun5WehqQe1YgcqYMBcCpi1ZKiQwpump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=X.0_kw8mmlQAZ1ysu19pT2WJR3DjdtkvllDKoK62g.U-1768316138630-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a1b5932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"db24e74cd43b86c58c9efcd84036f187","sha1":"77ee92319c32a0670e1be4012105b2929fbd2ef2","sha256":"11c1e3507a60c2124eca30986b638e5d4bb44bb5f55a23d5042c5d26452eb483","sha512":"cb88e78c74f2ff954464a347fe4f58f196397ce91c69c255d38456abc6af3d63922b4feea44887a2711827b5555b00095b580839dafae5fe13046bd71f288540","ssdeep":"192:1j9jhjYjqK/kaa7lVzzHzMf/PMWa0Zrl9ieJGD:c/hgVQfXMWxZrl9ieC","tlshash":"0dd1a863f5f8257b019382a23059772979e58023eea704f5b69ec4761f8df91fe07181","first_seen":"2026-01-13T14:56:26.449658Z","last_seen":"2026-01-13T14:56:26.449658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":52,"dns":4,"connect":5,"send":0,"wait":56,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/3V8zCc38PbvjF452rvoDu4FxgjeWVM5w5UgxArwppump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/3V8zCc38PbvjF452rvoDu4FxgjeWVM5w5UgxArwppump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=GiRwPXm5dq_fPBjEBciD78pyG3dQL8N1xbQ0S8.PC2U-1768316138627-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a2b7f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"ae6b5a9a6278be7cb85f3481fd8d0f48","sha1":"0e80a1b3f412ea1b793ee84a0f3150038caf9c70","sha256":"b565e70f12c969cf04860fb6408c268b57f9fdcaa34bd66540bea83f94162a24","sha512":"c0f83b521f2b07f30141b6a3b4e7d1c2410a03ea091d135bbb11200eeda487bef304fd329b93fa55a6dd66de413f64a606f3a020f25161b6c3cc134ce9985799","ssdeep":"192:1j9jhjYjqK/kaa7lVzzXzMf/PMWa0prl9ieJGD:c/hgVwfXMWxprl9ieC","tlshash":"6fd1b763f5f8257b019382a230a977697ae58023dea704e5b69ec0761f8df91fe07180","first_seen":"2026-01-13T14:56:26.451397Z","last_seen":"2026-01-13T14:56:26.451397Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":60,"dns":1,"connect":4,"send":0,"wait":44,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/2anPRC6DasQmoun5WehqQe1YgcqYMBcCpi1ZKiQwpump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/2anPRC6DasQmoun5WehqQe1YgcqYMBcCpi1ZKiQwpump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 4540\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5c7d7c8deb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfbb81NkSKJ9Sm7uU-owwVhWRcQLqyszcoZn7faW5HDQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-images: internal=ok/- q=0 n=18+24 c=2+21 v=2025.11.6 l=4540 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4540,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6ab506c37b9dbf8d151bb0ae60b21441","sha1":"2a2248d36f09b42a23074d1ed0ce11e3af2a614d","sha256":"dcda2409b60fd8636614313d97f01c30318f9b74b83418d6aad778c09bb70c68","sha512":"3cd6ce11fa4fac5538ab2005ad6c481ac9d12938e3a627eaf019c60300a44aad16a68951ee817f08f8ff01d7fd9d8720eac28b57b93bd41cc7f6f8fbb6a4c3bf","ssdeep":"96:20z8y5KsGVBM38E0ApRnr5W1ZCn7bg5Ya9hQ/lPa4GWnhBcqJ5ARv+:2O8hBE1zr5W1K7bgYftPabKBcQ5AB+","tlshash":"01915e2c2b180c64f9d922335e1fdf137963c02861338a5a795db81ac5a53e2a979f07","first_seen":"2025-12-31T12:24:56.56164Z","last_seen":"2026-01-13T14:56:26.453244Z","times_seen":4,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":60,"dns":2,"connect":3,"send":0,"wait":27,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/3V8zCc38PbvjF452rvoDu4FxgjeWVM5w5UgxArwppump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/3V8zCc38PbvjF452rvoDu4FxgjeWVM5w5UgxArwppump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 3963\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5c7d8e8deb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 315589\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfHN_PoVBIo_Y2EMtUlMBNOL0jQLqyszcoZn7faW5HDQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=19+39 c=6+32 v=2025.11.6 l=3963 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3963,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9046926541f36cb9f024ce24f9becdc5","sha1":"cf2ce6b442409ab558302bd884563e22e13e3b37","sha256":"922f5784947fa0cc69f751a75e50a38c2702d5cc76ed5ca7bcdb629ed3a2ed19","sha512":"18771c376da66263bcd1c9ecf8f310ac793a8f8ccd5a8c05a1e7a6d3cc3570850a12324cd220020ec199b832a85ccd1b70d5793ec42656bd298f841f3d64e16f","ssdeep":"","tlshash":"b9817d673d818a93f518f33db13351a0f64dc026693203927594f27ebc674d6ad0db59","first_seen":"2025-12-31T12:24:56.582877Z","last_seen":"2026-01-13T14:56:26.454398Z","times_seen":4,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":62,"dns":2,"connect":3,"send":0,"wait":13,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::47bq8-1768315348138-b3a5e3b22448\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 789\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s07LtlVIX6DqLbvEaSq6eS%2B0zEOhPzLOl6edWvlziQIgzkYYLZLXsrqFyZBmZw2STRATZmek0fX9tOaCvRTGtODdd37Ss%2BdArm6b5noekMyUIQ%3D%3D\"}]}\r\ncf-ray: 9bd5bc55aea3723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 23 Nov 2025 07:09:58 GMT","end":"Sat, 21 Feb 2026 08:09:55 GMT"},"fingerprint":{"sha1":"B5:C9:29:A1:B9:60:7F:A7:9E:9E:63:3E:DF:4E:05:34:4B:27:D3:86","sha256":"2D:FA:43:BC:F1:83:E4:D9:E0:ED:1A:D1:C5:0E:F5:E0:77:29:F1:F1:23:2F:E3:30:7B:72:49:1E:82:5C:DB:C1"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::jwcjr-1765212281299-f54ecb125284\r\nlast-modified: Mon, 08 Dec 2025 16:44:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 3103856\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BW1ohRqohqwO5jdfyRB0WAQHeyT5UzVWZfQsNRDCUM47AAxs1f0ZycDJU4OaVhHc8M2rlXQ1IRDHeGJMRFWjAc04X6O%2BAjgkIMYY8bA%2BEi%2Fltw%3D%3D\"}]}\r\ncf-ray: 9bd5bc55ced2723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-01T22:44:56.577581Z","times_seen":47715,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/secureproxy?e=ping_proxy","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=not0%2F6yE3CRx67EHRA8RPFAKEkuR2PAXkxnwsdPSuWiwJP9J%2BNl7b%2BTS2gFvJqdh7ch8InG1VMWfUtIF8ebtRROCQSkxCiBKmbxOz9XG1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc57dc6e56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-08-01T22:57:18.908151Z","times_seen":46700,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/GJAFwWjJ3vnTsrQVabjBVK2TYB1YtRCQXRDfDgUnpump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/GJAFwWjJ3vnTsrQVabjBVK2TYB1YtRCQXRDfDgUnpump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=XxJJo6ViF9qCfx4dshPVC6kiVN_BHcsM1Hyih3D8H5E-1768316138634-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a1b5e32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"6a76bb9ac99b8dac62dbb5e5f8c72856","sha1":"7be61fb7c47813299a08581795c8aed4f4fb7c3d","sha256":"a04ba7b1c16a9b2ae1b1cf365a1d2daaee70b334a82adf27968c1a2210bfed6c","sha512":"4a8db951796b8a665c56b8b70c99c7697378748f02f6dfe92e55ccc96a7f1712e53716c5a21cba4eee92338dfcb8b94775387cad28078a68d9754c236ccd7a4b","ssdeep":"192:1j9jhjYjqK/kaa7lVzzjzMf/PMWa0Nrl9ieJGD:c/hgV8fXMWxNrl9ieC","tlshash":"75d1a763f5f8257b019382a230a9772979e58023eea704f5b69ec4761f8df91fe07181","first_seen":"2026-01-13T14:56:26.457144Z","last_seen":"2026-01-13T14:56:26.457144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/Gbu7JAKhTVtGyRryg8cYPiKNhonXpUqbrZuCDjfUpump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/Gbu7JAKhTVtGyRryg8cYPiKNhonXpUqbrZuCDjfUpump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1810\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5c7d788deb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfuVPC_9KczHwbG0i4wRFdtSHiQLqyszcoZn7faW5HDQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-images: internal=ok/- q=0 n=17+29 c=2+26 v=2025.11.6 l=1810 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"92276cd412811dab9947c70f618c84b0","sha1":"67028c98181dcfd82950dc9c1db1f26198375d32","sha256":"f03c37e644d8c0dfac94d06e04adedb50bdbdb4d69a6a0a702f9123749c8b897","sha512":"24e38ebd9430fefcd5760484016388f55878e56a8d6d938161ad1f7087ecef1987157e7c47882079adb6f5b02ba974abda22575abb5a2a02698fddb6c28124bb","ssdeep":"","tlshash":"09310b0477d11c15f135d1ba4c10839826f3e9229662d2d273747b74a92d353dad1570","first_seen":"2025-12-31T12:24:56.577091Z","last_seen":"2026-01-13T14:56:26.458441Z","times_seen":4,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":60,"dns":1,"connect":3,"send":0,"wait":14,"receive":1,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/Dfh5DzRgSvvCFDoYc2ciTkMrbDfRKybA4SoFbPmApump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:54.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/Dfh5DzRgSvvCFDoYc2ciTkMrbDfRKybA4SoFbPmApump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 13 Jan 2026 14:55:55 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9bd5bcbfbbac569f-OSL\r\ncf-cache-status: MISS\r\ncache-control: max-age=30\r\nvary: Accept, Accept-Encoding\r\ncf-images: err=9404\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/3kC6gheQ5fxK8iKWWDHeomHU5Z6U2dUWfqEK6dpLpump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/3kC6gheQ5fxK8iKWWDHeomHU5Z6U2dUWfqEK6dpLpump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/csp-reporting.cloudflare.com\\/cdn-cgi\\/script_monitor\\/report?m=_eJnmgh0Tcoy7gHcjq7wD1TeFaIlzhHhz9LCBaQIqRg-1768316138-1.0.1.1-IpZHhOyFH3gA44TixQKPcmpuuHObjq.ikYP8zWbiiAyjXzjxQ2VftBm08YP9h1BuyAJcLr1w4G3PJrEnEmHpwCBO5hVgxEjbecCd6.GqlGu.QYuPJj.JbZZQeQDH7MwO_Q.VPLL_ZPcG4Nf.eOJFKaN82ggwVOIjwO4Yiyp9FmtgCn.vEyR5aQhmmhRwFlPg\"}],\"group\":\"cf-csp-endpoint\",\"max_age\":86400}\r\ncontent-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=_eJnmgh0Tcoy7gHcjq7wD1TeFaIlzhHhz9LCBaQIqRg-1768316138-1.0.1.1-IpZHhOyFH3gA44TixQKPcmpuuHObjq.ikYP8zWbiiAyjXzjxQ2VftBm08YP9h1BuyAJcLr1w4G3PJrEnEmHpwCBO5hVgxEjbecCd6.GqlGu.QYuPJj.JbZZQeQDH7MwO_Q.VPLL_ZPcG4Nf.eOJFKaN82ggwVOIjwO4Yiyp9FmtgCn.vEyR5aQhmmhRwFlPg; report-to cf-csp-endpoint\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=ILwRvaBIg0CRRFBgXlZBUSGKfqdUbhndLSqYpvrMKZ4-1768316138628-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a3b9932fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"3058ea06c43e123aa4371c22ced5779b","sha1":"3edf8df826efc5b40aaca302b67d46a6d5e910a6","sha256":"14c4eb546d7f46b134d60bfd360e02aee0d40b935873e7c7f45bbfe92f55634d","sha512":"c2e4acc162abe968ea41b2ea01f4048df5b92387368e0ccbcf083500eecb8a0c42b794ff73a7cb42b703de9f5dda9d71183a31adb1cb6e064a60989848c2368d","ssdeep":"192:1j9jhjYjqK/kaa7lVzztzMf/PMWa0Prl9ieJGD:c/hgVGfXMWxPrl9ieC","tlshash":"8bd1b863f5f8257b019382a23059776979e58023dea704e5b69ec0761f8df91fe07180","first_seen":"2026-01-13T14:56:26.459088Z","last_seen":"2026-01-13T14:56:26.459088Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":63,"dns":14,"connect":1,"send":0,"wait":39,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/GJAFwWjJ3vnTsrQVabjBVK2TYB1YtRCQXRDfDgUnpump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:46.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/GJAFwWjJ3vnTsrQVabjBVK2TYB1YtRCQXRDfDgUnpump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 13 Jan 2026 14:55:47 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9bd5bc8dcf3a569f-OSL\r\ncf-cache-status: MISS\r\ncache-control: max-age=30\r\nvary: Accept, Accept-Encoding\r\ncf-images: err=9404\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":316,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/GJAFwWjJ3vnTsrQVabjBVK2TYB1YtRCQXRDfDgUnpump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:54.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/GJAFwWjJ3vnTsrQVabjBVK2TYB1YtRCQXRDfDgUnpump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 13 Jan 2026 14:55:55 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9bd5bcbfbba9569f-OSL\r\ncf-cache-status: EXPIRED\r\ncache-control: max-age=30\r\nvary: Accept, Accept-Encoding\r\ncf-images: err=9404\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T22:52:39.96017Z","times_seen":17662144,"resource_available":true,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T14:55:37.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ZuvXoc12oZDF64R4KohygD%2FgmbYny4eoo1so0ztskXNeYU6G6P1oUoy13wR6Q%2B%2F9pWqXzDH7nkqtiHmoxW4rJA7JE5iFJdQZLGtTjHdVA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc53dcb956ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31799,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (407)","md5":"553d980aecb8f363c858d5a99e1ab8c4","sha1":"86173e6058667f725ab2962d654460a727e6c411","sha256":"4cfc027945cfeab97e4c56038c3b2930f6e23677f8037f24f9a4c9d9a5a4ea43","sha512":"04e76bde99cf9321c42f864c25d127e88989ae944eb78f6cfcb7fc9ca05d4d01c7a04b55a775d88d98101b66e12169e35c93ff9a621550ea09f965ac1d6f8aa6","ssdeep":"384:v0gLCCEU1dur2JNF+6wyut4N0Cpr7jAfKT91U99BoK2oCX0DHHZfaf9pTiW:pL7EU1dur2JNF+6wxuppr3A0iBoK2lB","tlshash":"f6e2b75a6ae3112e2143d2b42bf75b19f6b5d403da0ecd2c7bdc13848f82a95dda724c","first_seen":"2026-01-06T13:47:59.698227Z","last_seen":"2026-01-13T14:56:26.460177Z","times_seen":3,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":66,"dns":49,"connect":1,"send":0,"wait":107,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/react-beautiful-dnd.min.js","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /react-beautiful-dnd.min.js HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5Fcia7ZJdIS1nTGjhJH1j8a93rorVX%2BUxO83rLbHg7NC3RpvtE1jCzmwKc8UjG6losmK3cvRKxVJP7Ny9WEWYp3kSwagoJEeG%2FIkl3r8g%3D%3D\"}]}\r\netag: W/\"695f81c8-6ac1c\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc558a7756c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":437276,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"a042f9571091ec6577847b8c992d7706","sha1":"ec23ccf05a21230c627bb23085ca1bf913c7ad7d","sha256":"970c3323427ca4ced3ee622c9023b6bf83cbc67462ab339c4a3e6aec53d7e509","sha512":"047e165ddfbcddbd0b7f73d39b174a7aba201a82312520b9bda606a01aa3d257e9528dbbd2964524a39ee7885ec1ad8c192bb67396f4c49603e99952e67f5c23","ssdeep":"6144:sXOGxGmWWM8+mnpvkZrWdjNYYu+J284k7IOH9XPoQXcilw:sXO8GmEEQYjNYYu+J284k7IOH9XpXciq","tlshash":"88942e5c12f6135c9f80a123ad63fd4be89b69a1d75a1acbb630f1caf0e417270ed251","first_seen":"2026-01-06T13:47:59.680754Z","last_seen":"2026-01-13T14:56:26.461836Z","times_seen":3,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/wallet.svg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/wallet.svg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOx0Y%2Bth32KDHq1EDHmlaVvufkVFPRCDfOYQ5nZAHSj1pXS0OYnL5n%2BRQuEjQFCleY%2BAPl8iCbLe6ju9Yx03BpkIIPqw8SLCaVu3B5ejiQ%3D%3D\"}]}\r\netag: W/\"695f81c8-3e4\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc559a8a56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"574b9e8c157fdcb1f62db13a3974b268","sha1":"d343204cb47e680b7efba0cad8e7958e07e523fb","sha256":"a27e00c9eae8be042d8ca20180bd1c409f3206739500712b9a1d0a99e59e95b4","sha512":"3ffdf84da9d003dddc8359d894c3979b946c946a6cf4fd0b6061a89e32032154bd8db8fe0cb13b6db177f8ee948076d843829477afe32d8c8e9dc31958deef02","ssdeep":"","tlshash":"2511027f131d11d5f80acfe4d30ba4e37a1254a66628f008806658c2fb08d5c5df6ce4","first_seen":"2025-12-18T09:47:26.932536Z","last_seen":"2026-07-31T06:10:12.366116Z","times_seen":150,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/C2omVhcvt3DDY77S2KZzawFJQeETZofgZ4eNWWkXpump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/C2omVhcvt3DDY77S2KZzawFJQeETZofgZ4eNWWkXpump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=6xhoRsFm7P151mVG.N5U7ZWF8zDUT9UgPbbpwJ5MKtY-1768316138631-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a1b6332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"9b15f87f4e5584ce0700adc9bd46f3f8","sha1":"ed05768379e22b7e0f4a141b441c795545f70bcb","sha256":"cad1afc623a43944131e0c8aad21333fd315a40b09a562165901e9a4f1e92d30","sha512":"b3b34bb3d6a9f2095630d12d774d5dc6014e443687cc27b8e8b07cfb003c2d665b864a10eb51868ba815533b77a9341e349b94766feb35f8a2c1973dc76a5f2d","ssdeep":"192:1j9jhjYjqK/kaa7lVzzMzMf/PMWa0qrl9ieJGD:c/hgVhfXMWxqrl9ieC","tlshash":"11d1b763f5f8257b019382a230a9772979e58023eea704e5b69ec0761f8df91fe07180","first_seen":"2026-01-13T14:56:26.463274Z","last_seen":"2026-01-13T14:56:26.463274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/background.jpg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/background.jpg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 205168\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\netag: \"695f81c8-32170\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQF3MkjXYuZCqxp6J9XmMupOuiVwVwDSHjakI429MrBZBUPO1yjganNeD6HjZF8%2BOQszzH1QN5pSQBuFmS89W8xf2cM6zjALfIs4T5OFzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd5bc59ee3956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205168,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x717, components 3","md5":"8d0ab7ca7e6af1eeae5b58e721f62e67","sha1":"dbd0ca634de2e397b1fc8cbf26eea39b7ad5b7c4","sha256":"8a5a452a52cd93a839a467af4a0fef4051aef6b676d44a84a5ba47db5150bea1","sha512":"dbd8513c09f0c1cfb00b55b311cdd99989bb458d0ff7806b28eea05ae0fe01ddbfaddbffaf51d748a7b2ab97091e81068704875a6ad0731e553e94526f8b11bc","ssdeep":"6144:UNCd5xedjsutoCIVvwiv2Mc50l0cvGaAO:tdzedZpIVoMS0OB4","tlshash":"8b14123f7f49e94bfa39772643c62700a3893a2475208b954c51e6fe2174dee865c13e","first_seen":"2026-01-06T13:47:59.682637Z","last_seen":"2026-01-13T14:56:26.464781Z","times_seen":3,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/wallet_solflare.svg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/wallet_solflare.svg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GHuU75%2B1FcUYn%2BCOKKB7PXGDKLVdh8O%2FcVq9pIC01YnM8KPyxtJKg1oQFBiyIkzS5mY0vPvoyqv7%2B60RKue4t%2B0C0yDhLU2z%2FgQye4F9Dw%3D%3D\"}]}\r\netag: W/\"695f81c8-3fd\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc559a8d56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d559b3c7bf65f2029dd8c0acf2fbfe9","sha1":"9c7d272dfad966afc017026c7cca308f86824e86","sha256":"3657af4bb3ce6c20f8703d7620cd965a6441d0806121cea9c5d013ff793b298e","sha512":"05a78b75739fd9fc440adff181350371dfce5ab8d6f7b3fdf0ef001654657a142bd52ef228fa3bbb248b159b360eaec26a80291797bf168e4f02133ef46ee357","ssdeep":"","tlshash":"a311125a033c3674d6e64d20a528b0c326b2b0c5825471eceab35b722229af244b0a78","first_seen":"2025-09-23T12:59:34.155422Z","last_seen":"2026-07-31T06:10:12.382629Z","times_seen":131,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/wallet_metamask.svg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/wallet_metamask.svg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJymqB%2B0KDHyU1h0wkcvv5hxhfMQtQhZp1lKmyAc64yY0ItFH0eC90Lvof0n4jG5xUTiYaZzHf%2Fla0qLnX0QpsGwrPXXlyAyaTD1cEEjHw%3D%3D\"}]}\r\netag: W/\"695f81c8-676\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc559a8b56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1654,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1515717ec860410450bca1a8ff648326","sha1":"d3add77c919057501b4dcc619a2178c3be401b85","sha256":"fe9211cd30dbcbbbf40bc3dab22c8f29e5e8c9159085c524e93ff0d555a4f7e0","sha512":"f51d8d0d53db239f3d0317bfc6e4405a657e6f406764355a29900c8a05b9726b344e2167fcffefe463a99c700d4b115a2fe16bb1b0d5ffcf6b0ff8f72524f545","ssdeep":"","tlshash":"3d311284e1b90bbd180357f0c528b5e375677cae6b6483e8248843b02107befc4d466c","first_seen":"2025-09-28T19:09:38.680842Z","last_seen":"2026-07-31T18:03:20.927666Z","times_seen":131,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/wallet_mathwallet.svg","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/wallet_mathwallet.svg HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wf6bMVwZzRKdZtMUrZRimnUkLt8StKbZ1Tb%2Bti9hWYK0AuiCkkB1tr9ANPJVvVhaTDt62CtbHNTCAm2QvzkFQJObpTeYP4JWfHaRJgeEcg%3D%3D\"}]}\r\netag: W/\"695f81c8-ff8\"\r\ncontent-encoding: br\r\ncf-ray: 9bd5bc559a9456c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4088,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"966cdb60144e96d360fea48f1b6da1cb","sha1":"c0140bb992ab9793216c882d00a6adda60ec20ac","sha256":"640755393370a815595bd865abefe093026c6e956a4a049cf7e3e8626ea5fbe5","sha512":"0fe3e37da03c760736a9c08aad1a58aea645689943dcd7c6578fb6d171910108933f7e809acb5640c2d7f163e2a976957cb2e60028447367151c0ca553b0fe19","ssdeep":"","tlshash":"0a81e44e77d810192ddf4b1ecc0a894f6e1cb837ed4833948da76ea004ea6f7065ad9d","first_seen":"2025-12-31T12:24:56.576102Z","last_seen":"2026-02-27T07:07:57.558902Z","times_seen":9,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/Dfh5DzRgSvvCFDoYc2ciTkMrbDfRKybA4SoFbPmApump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/Dfh5DzRgSvvCFDoYc2ciTkMrbDfRKybA4SoFbPmApump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=X.0_kw8mmlQAZ1ysu19pT2WJR3DjdtkvllDKoK62g.U-1768316138630-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a1b6032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"ea878d41899200caff6a28bc13b7a2d1","sha1":"341bcce017eaffb85d6d435bdd50c0ce55b879e8","sha256":"1d5ce82a80a4bc7f35caed1387569e5ad1f8aaf6bc4ca93f3bfe55ce00e4049c","sha512":"3a313af5bd6d333ef69f5345c72e6a4e1cd195c1ed5497d658e0809fbdd0d054ee92e02955926779c18cfe42b302d7584d191870688f5b213a2eee3b02724dfd","ssdeep":"192:1j9jhjYjqK/kaa7lVzzXzMf/PMWa01rl9ieJGD:c/hgVQfXMWx1rl9ieC","tlshash":"f0d1b763f5f8257b019382a230a9772979e58023eea704e5b69ec0761f8dfd1fe07180","first_seen":"2026-01-13T14:56:26.468018Z","last_seen":"2026-01-13T14:56:26.468018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/CQywijBT6HQoh7cY6XYrtjLXbqMzBfdwrXm3HQYjpimp/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/CQywijBT6HQoh7cY6XYrtjLXbqMzBfdwrXm3HQYjpimp/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1553\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5c7da28deb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 263268\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfURxQPl1Oxwg1yPp-KSyY0d4uQLqyszcoZn7faW5HDQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-images: internal=ok/- q=0 n=50+27 c=0+26 v=2025.11.6 l=1553 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1553,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5fc64846c38c1ed97701aa64e8bef312","sha1":"b495be992159c403c20ca4a8917b99110232ce91","sha256":"30fc80f48712e2debd09b51af649133e6d33c441f38d57679c35508f185b44c3","sha512":"099f822be05090f469ea59bfa9c3f7643f2c55071a362c0ff23aee673ebf29b67ae0131318b27be772db231e7b7f55cb14e340044a7dbfb0ab0a0b7c1c4f42ca","ssdeep":"","tlshash":"7e31c7a716052f83d6c90271adda079313ed21207c7d0263de22230aac7eca4be6194a","first_seen":"2025-12-31T12:24:56.583633Z","last_seen":"2026-01-13T14:56:26.469077Z","times_seen":4,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":64,"dns":8,"connect":6,"send":0,"wait":22,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/pill.png","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /pill.png HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 510647\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\netag: \"695f81c8-7cab7\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUEnoLJOn5aZ%2BbxYcGyu0qdiM25gUipBYnhLIyj9DlqkUjj5Q0%2FIN%2Bn77Xz02yWkGUBldbASiga5CUspgTI5zWB1H%2BJIxFzeWWLCLSQogw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd5bc558a7956c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":510647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced","md5":"24ebec471450bbe2401c8ccff9798c51","sha1":"9ce01ae7267310e402291073fceda3bf52d171b3","sha256":"d987ddca308e3fc9172e266fe770e1acf5a68246c3406e1eacb07d8749c072cf","sha512":"ec6357688e31e740e3c1a53e3859b2899e1d035e6e8cd85396da6474d63dc76bff0691989c85beb56bfd0af89316fe49408c1b294a1f57453b9eedb2adf2f875","ssdeep":"12288:gFt2CKT1lEnvyhPl/nMiuIMn1r9xeApVTk:gFbcT685RubJveAp1k","tlshash":"aeb4239ee7628a30f95a6134427f27e1e9a4c6b2eed73cd28db5723c5a34386c507143","first_seen":"2025-12-31T12:24:56.558889Z","last_seen":"2026-03-25T16:06:44.022582Z","times_seen":10,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/a3W4qutoEJA4232T2gwZUfgYJTetr96pU4SJMwppump","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/a3W4qutoEJA4232T2gwZUfgYJTetr96pU4SJMwppump HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=o9BtxRtNTy.tvKU1eSTY20DH5tWVZu_Jgjsoe3A6Gjg-1768316138638-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a2b7d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"a5f7f0023a7b217b66e37da9c3e816ce","sha1":"9c784867ab64fde88c7c873e4b29a13feb12ba3d","sha256":"dd496b51f8b36dd500cd3b13c8982e7d2b297915ae21295b22ea4270e7a618d9","sha512":"ade1164be2ed57953a37fa371acdb1ccb2df860800f2bb5d7554f0203c5fe90393ec97990af4352cb43ab22eaef35e0b2d439d5ff9c364955235be9a98b139e6","ssdeep":"192:1j9jhjYjqK/kaa7lVzzdzMf/PMWa0jrl9ieJGD:c/hgV2fXMWxjrl9ieC","tlshash":"53d1b763f5f8257b019382a230a9776979e58023dea704e5b69ec0761f8df91fe07180","first_seen":"2026-01-13T14:56:26.469764Z","last_seen":"2026-01-13T14:56:26.469764Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":65,"dns":6,"connect":1,"send":0,"wait":55,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"frontend-api.pump.fun/coins/CQywijBT6HQoh7cY6XYrtjLXbqMzBfdwrXm3HQYjpimp","fqdn":"frontend-api.pump.fun","domain":"pump.fun","tld":"fun"},"ip":{"addr":"104.18.34.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"frontend-api.pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 07 Jan 2026 22:46:56 GMT","end":"Tue, 07 Apr 2026 23:46:55 GMT"},"fingerprint":{"sha1":"0B:10:54:97:D8:11:18:C7:EA:98:76:9A:29:FC:1C:AB:12:DC:6C:31","sha256":"62:76:4B:CE:79:AC:06:F7:8E:0B:34:79:88:F9:A4:D7:4C:F0:BF:16:38:A4:2E:59:88:33:5C:B3:D0:6E:78:3C"}}},"request":{"raw":"GET /coins/CQywijBT6HQoh7cY6XYrtjLXbqMzBfdwrXm3HQYjpimp HTTP/1.1\r\nHost: frontend-api.pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rakeback-pump.fun/\r\nOrigin: https://rakeback-pump.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 530 No Reason Phrase\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 6595\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nset-cookie: _cfuvid=o9BtxRtNTy.tvKU1eSTY20DH5tWVZu_Jgjsoe3A6Gjg-1768316138638-0.0.1.1-604800000; path=/; domain=.pump.fun; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5a3ba432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"530","status_text":"No Reason Phrase","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6595,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"5a5f1c9b4d5774ac7eeeeb44148e19c0","sha1":"4a4aad7c97473a5f89bd9fcae136a00ed8e0810a","sha256":"7ec587b11466c20301965f0530f9c4142e79d11cc6e1b399c5485dd0e8ecf2e4","sha512":"90f608a5858f008c9d6a855f64512b8bb44097508250cadf3edfb323db820ba69669ee4e0f86257ff3ce20b8b1fff4853f7d81effcd79bddafd551ee915884d4","ssdeep":"192:1j9jhjYjqK/kaa7lVzzwzMf/PMWa0+rl9ieJGD:c/hgVFfXMWx+rl9ieC","tlshash":"5bd1b763f5f8257b019382a230a977697ae58023dea704e5b69ec0761f8df91fe07180","first_seen":"2026-01-13T14:56:26.47063Z","last_seen":"2026-01-13T14:56:26.47063Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":64,"dns":12,"connect":1,"send":0,"wait":46,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/WL1JOIJiM_NAChp6rtB6Cw/coin-image/3kC6gheQ5fxK8iKWWDHeomHU5Z6U2dUWfqEK6dpLpump/128x128?alpha=true","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.3.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:38.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 01 Jan 2026 17:00:35 GMT","end":"Wed, 01 Apr 2026 17:00:34 GMT"},"fingerprint":{"sha1":"AC:E9:99:8B:A4:1F:02:F3:86:8B:00:AE:7E:DC:9D:13:61:CF:5B:82","sha256":"E6:5E:D8:EB:BE:FF:DB:F0:28:43:85:56:36:FC:01:9C:72:72:A4:A5:F0:1F:64:4C:AF:1B:D2:02:91:DA:0A:7B"}}},"request":{"raw":"GET /WL1JOIJiM_NAChp6rtB6Cw/coin-image/3kC6gheQ5fxK8iKWWDHeomHU5Z6U2dUWfqEK6dpLpump/128x128?alpha=true HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 4656\r\nserver: cloudflare\r\ncf-ray: 9bd5bc5c7d968deb-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cfRdyavn1tuZdvPN-L33cKmLxfQLqyszcoZn7faW5HDQ\"\r\nvary: Accept, Accept-Encoding\r\ncf-bgj: imgq:85,h2pri\r\ncf-images: internal=ok/- q=0 n=21+44 c=9+34 v=2025.11.6 l=4656 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4656,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4062cc376110bfca828826d9853dd9f6","sha1":"a820f8f3f56afa871e78c9b6daf8d772831b9d88","sha256":"574c8c293b145f1c928f510206ec7f827db7ec494d748c4c0a4c46d41672d410","sha512":"f7a834ce7a9eacfc3f6446f2ab1908cb2665911edebc343cddc33405c3467c345595ff1975898d6d04ac3b712d4fba392c467dee0a486ad6bc42329d908bd966","ssdeep":"96:2nVH1x/kfsS4c+iEQNbDHcso5RQbpiZYEpyiD+Mipb28cYDktR95BseEA:2RK3PJOD4bpiZbpFMb2EShseb","tlshash":"6fa16d1dffc35a01f455c37d4e6287a60e54eef24d9d66a48f80b024b979997eeb0180","first_seen":"2025-12-31T12:24:56.577848Z","last_seen":"2026-01-13T14:56:26.47158Z","times_seen":4,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":63,"dns":1,"connect":15,"send":0,"wait":23,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rakeback-pump.fun/images/wallet_magiceden.webp","fqdn":"rakeback-pump.fun","domain":"rakeback-pump.fun","tld":"fun"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rakeback-pump.fun/","date":"2026-01-13T14:55:37.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rakeback-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 08 Jan 2026 09:08:00 GMT","end":"Wed, 08 Apr 2026 10:06:42 GMT"},"fingerprint":{"sha1":"F4:B9:CE:61:07:66:39:A9:A8:39:38:7F:89:10:20:78:0E:86:56:72","sha256":"A2:C8:58:E2:44:B3:66:FF:83:0C:63:F5:F1:ED:F1:49:52:6D:EC:8E:6D:19:F8:8A:43:C1:56:B3:E0:C9:15:E4"}}},"request":{"raw":"GET /images/wallet_magiceden.webp HTTP/1.1\r\nHost: rakeback-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rakeback-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 13 Jan 2026 14:55:37 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1602\r\nserver: cloudflare\r\nlast-modified: Thu, 08 Jan 2026 10:07:04 GMT\r\netag: \"695f81c8-642\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gbWMD9YCLFik9MWOisu1SWyXIgH47NpeDKymaN2IbtYntvdyBI0iZkQPj0qzd2Lz0WjfXbSI%2BRqCwytyMiofyVuHqdpR%2BgI1QkeImRAhcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bd5bc559a8c56c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9545f7118bfe56b75fe56c2b67ce762","sha1":"b1dbe54a44548df39418e1979a44a15946a3871c","sha256":"751f8332aea0f7cefabc4c7835cbd69294ca2dad4d8192d77da7123d79f67571","sha512":"0f57266a7d2b388e19e7f70a307c2ae09c228027a68657db737b4b8ab6c369794d469bfc2f08520b11e12d33aad527b1361585884ceed8aa70579f4755d74e0c","ssdeep":"","tlshash":"96312a8c04a873d92a96f6a8679bb6762c480c4ba3d74cf6c074dde00fec1c4b300759","first_seen":"2025-12-31T12:24:56.569709Z","last_seen":"2026-07-31T06:10:12.381615Z","times_seen":121,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"rakeback-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}