{"report_id":"5aea27d9-788c-45f8-bef1-6afea65724f6","version":0,"status":"done","tags":[],"date":"2026-09-11T03:42:29Z","url":{"schema":"http","addr":"bagfumbled.xyz/","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"172.67.189.66","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bagfumbled.xyz/","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"title":"Bags Fumbled — See what you left on the table","dom":{"size":26230,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1109)","md5":"aa27e479cd5231b59284be99ee9e1abe","sha1":"449e7bbb214c3411c59140809c4f76e0c224b1c0","sha256":"8bb9d9c95fd8da8f3e5ac5ecf36be5f86022e36112db741dc1ebcd5d85c44294","sha512":"c8a9bd7b0b2a78393ce9d92bfd4dbc9f188fe7680b6455225f9cad4945aa0aa93ba2aa8d38178b38973144749c73ab329578ab4aff5f507ef94bb560c1d773b5","ssdeep":"384:8cpd+Cnr6z+mGF3bFuDb2caFPNsMvQRxGBGNGKLG2GDG81h:8cpL8+FBoOrPb","tlshash":"6fc283b161f47273018b90d7faa62f6a2ed0d253cb590044b2fd8bd89fa7c86ed17449","dom_hash":"domhashf94df9ffd5b0886043d058de77246758","first_seen":"2026-09-11T03:42:36.256164Z","last_seen":"2026-09-11T03:42:36.256164Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bagfumbled.xyz/","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"172.67.189.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T03:42:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.coingecko.com","ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-09-10T08:15:55.721187Z","alert_count":0,"request_count":1,"received_data":1876,"sent_data":677,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bagfumbled.xyz","ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":17,"request_count":17,"received_data":6040077,"sent_data":8496,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"assets.coingecko.com","ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":509273,"first_seen":"2017-10-11T16:24:34Z","last_seen":"2026-09-07T12:19:01.647101Z","alert_count":0,"request_count":6,"received_data":13896,"sent_data":3463,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":7,"received_data":207422,"sent_data":4147,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-06T23:07:00.048542Z","alert_count":0,"request_count":1,"received_data":306560,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":19554,"sent_data":589,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bagfumbled.xyz/script.js","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"866585650f99cc898608a5ea54fe2a8a","sha1":"ca0078b84ec6d545297bee19067458f80b017128","sha256":"ba8523089e0060dbb0b897733cf7ae18926146d93f6f9a0533b45ee20ee2fd21","sha512":"c298f2dd961be607cff6c2f902654fe1a5bc4a2373ec4c6a8873a55d664e99a9b64114e50dc3cab7cbb12afffa352e8012f90113d1b6fdbe352d7cd58a33dec6","ssdeep":"384:D3ipsBlztWsSPnIJmFR6gKyYo+1eaQgn0BC0a8Gznp/0MjO+XYJE3iqCwEQHpgIc:DB8za5jLct4ceoAF7vCzKS","tlshash":"7823b66dbef735666873307e6baf9204366450434908ed0c3d5cd244dfa0a698bbafd8","size":48928,"data":"","first_seen":"2026-08-28T13:38:10.720456Z","last_seen":"2026-09-11T19:30:00.356629Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bodymovin/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","size":305543,"data":"","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-09-11T19:30:00.368396Z","times_seen":2430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bagfumbled.xyz/bagsfumbled-iphone-hanta-2.png","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.037Z","timestamp":1789098119037,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /bagsfumbled-iphone-hanta-2.png HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-21d988\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwsYaR%2BBQm%2BK%2BoMELr%2BpsUvWjINqsXSsPily7hfRKg73GmueJJDnDjREHXVGmaEGc1yiFQ4Ww5vPtWAwUPfSKlRxVW6qetgrTXsTBMxpGgV9cKjT2HwCFRw7S%2BFrWiu1Ww%3D%3D\"}]}\r\ncf-ray: a393a8ebfb6a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2218376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2218376,"size_decoded":2219309,"mime_type":"image/png","magic":"PNG image data, 1080 x 2340, 8-bit/color RGBA, non-interlaced","md5":"3749c3a1c943c5e0df677fb4091f1f0d","sha1":"6f992c7931ffb0cb83b514dc63b56e0b96d9b623","sha256":"24742ba2d37de288a295267ebc4462c7f93b4587cedfac2a086609b70854f5fd","sha512":"7b7f30569546868241c54e3ec38cd0ffb49533d52771c0f8965eb6970647756e80be936e5b6df331c9ca2993e0a572dd311ce5db9643863e4bdbdf0842add110","ssdeep":"24576:RbhiPgDxwAlWGYuGvpu4/qzLGWrWGVhl9koB93H4fx:VhiHUqucpu8qzLGWrLN97P3H4fx","tlshash":"372533b784d4fbe3fb973761806da9a3c252b6810f3d9325c2f7449b1586318a221e9d","first_seen":"2026-08-28T13:38:10.722689Z","last_seen":"2026-09-11T05:23:33.449412Z","times_seen":8,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/asset_platforms/images/131/small/base.jpeg","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.050Z","timestamp":1789098119050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /asset_platforms/images/131/small/base.jpeg HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1633\r\nx-amz-id-2: 7QdPt/gRev0Ix5LePEdGKn5OXJICks7kaBMDj4Mj2hpT7m83Flhr79bld5lm0t1HWK/Lguzfi9k=\r\nx-amz-request-id: 95KH6XYC9WH9TXG0\r\nlast-modified: Tue, 23 May 2023 01:43:16 GMT\r\netag: \"0e2765a3a70371c22b762c4ca7ecc66b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BXm09yGaZ8WsXPXLT9g47OiUK2iGSQr7\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept-encoding\r\npriority: u=5,i\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:100,h2pri\r\nage: 671999\r\nexpires: Sat, 11 Sep 2027 03:41:59 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a393a8ec9c9756c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1633,"size_decoded":2519,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"0e2765a3a70371c22b762c4ca7ecc66b","sha1":"3e24526a157fb22fabc0d2d35796349f2f82eb17","sha256":"5f05a67e916ed562321ca2d5078090fb270673bbcf886ca25ade7d150794a77e","sha512":"c976a301691d0c29e513643c87f365d56a7cd3aa9b1b87000132bea015d7cc3c02c50583821b2b2ce7b8458d6a69983fa9e489cbca4db0b7214d8158b7c7d362","ssdeep":"","tlshash":"f3319464238ca60cea1d17387a54db20c7693e3ac5ab978a4950825abb390c09d6c396","first_seen":"2026-04-21T08:45:58.929389Z","last_seen":"2026-09-11T19:30:00.379205Z","times_seen":15,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/index.html","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.055Z","timestamp":1789098119055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 06 Sep 2026 21:56:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qzsQn4oViG86eM6TMMzPMvruGGeBThWVeL205rv%2Bt%2FPNqClWRXSYvhVNQSpZSuQma6pcMdsGVnmYxx9bHu3sVz1P5KssT2rBOZ9UGgBKAZO3%2FWkmh%2BZFOXHlVysFX2pXiw%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a393a8ec1b7156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26135,"size_decoded":6942,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1103)","md5":"08a87f1886280f3e80883424de843a45","sha1":"73c5d10c7088a6057b5dd4ec9a0c79d5a89db894","sha256":"bde2d4869db2e17f7b162c431b1a33d28d3746af2d03894dfc02489691d5105a","sha512":"626a57e05784e3d83449d7eaf3bca4b8b658eea980920b778d602cd71c2c45d6331725eab15189276bc20c447552ab5d76e123d1391f3b459169bb992b3e20ae","ssdeep":"384:QVXd+pnr62lRfFuLFJDe2cbF64mMvxbRxGqGdGKrGCGLGa1R:QVX6BlNyXfkfZD","tlshash":"91c283a160f47173018b90e7faa62f562ee0d693cb590048b2fd8bd89fe7c85ee17445","first_seen":"2026-09-11T03:42:36.263439Z","last_seen":"2026-09-11T05:23:33.412001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/bagsfumbled-logo-white.svg","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.032Z","timestamp":1789098119032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /bagsfumbled-logo-white.svg HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKhEaiBayV6B1o34%2BSF0WajavqEXRsDheDEIDIcvWcqJpLqnZcOKlFegUMGjVTz%2FV5Ya5mLJSbdvRIbGZKdguZ7NeauKEdZVlltULIuhy3ThR416e%2BSefVY%2FbsgrMUyRfQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a846a5a-229\"\r\ncf-ray: a393a8ebfb6856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":553,"size_decoded":1295,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"223231182ae1df3072dc7e20b7a98a08","sha1":"2f6115f981b9f71525bd772e312dc89dfd546e16","sha256":"7aff316699f8f88913f03b45dd4eed82d377b4d256cc00d407da9556b1e81a74","sha512":"5ae35e048eb6d7081658aad0316688ccc8e7c8a4e4d1a7be08ce5bea6c796973aa462760da47e66106f94b863b4fd448f7d0d88f6b35feb8545af518050b06a4","ssdeep":"","tlshash":"e6f020a3dd9d3f0fc20e270497617cb2a38dd1d849860198da6d2a31a08d4ab1e612cc","first_seen":"2026-08-28T13:38:10.705423Z","last_seen":"2026-09-11T19:30:00.405346Z","times_seen":12,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/weiland67.jpg","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.040Z","timestamp":1789098119040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /weiland67.jpg HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-25bdc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Siw53hh%2BjfTcOWM4C6yv0t%2B1a5X5CaPXNVTAuO%2FcLygOoN%2Fj0lmzlBHVo5lerTodXEm4t2dLGSitGaLBboVfTuS2r3unxvTEO4kIy3rmgVt5In8HsMRjrz2vSWRAGxXXg%3D%3D\"}]}\r\ncf-ray: a393a8ec0b6c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 154588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154588,"size_decoded":155518,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1100x1186, components 3","md5":"efb83f7f1fefccea0e20ec51315c9df1","sha1":"0faf53ce27c37bfbb0fc31280894e6c0e35abd4d","sha256":"5182e993fb6c66c68ebec4f419c6e9a9cd0ffefb8f8d41eee0b1359e6f292e00","sha512":"ab43778afcd2869de827b7c6d96e067514d8d249fc843680bac8ec56c2d73c496bc0c75544c16936339b1418c7968fa2a78c152768cc07541eca36f4d22ed841","ssdeep":"3072:GfMFpEfV/TvM6nsxCE7CI1p1t1FarVHJe8ejyAK73Sookd/eX76P:IMwfV7vM6UCE7F15ae8D7M0/euP","tlshash":"11e312623a355dad7419556cf7cfc96b4ad980d032bb27e43cd87e419a178ca29840f1","first_seen":"2026-08-28T13:38:10.716099Z","last_seen":"2026-09-11T19:30:00.408733Z","times_seen":10,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/index.html","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.290Z","timestamp":1789098119290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 06 Sep 2026 21:56:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sw2LizcMcoN%2BxlDEUNYqkA%2BpfXcNWOe9d%2FP1rwP8fLhOxAUUJN4SwacwCA5Pbof9G%2F1ORjItyI3gJrjk00k9V07ykvihM%2BYbUqSHV9CKRqkIZ4f3jEbUY5dD7lFIthVyg%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=5,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a393a8ed9b7d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":26135,"size_decoded":6944,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1103)","md5":"08a87f1886280f3e80883424de843a45","sha1":"73c5d10c7088a6057b5dd4ec9a0c79d5a89db894","sha256":"bde2d4869db2e17f7b162c431b1a33d28d3746af2d03894dfc02489691d5105a","sha512":"626a57e05784e3d83449d7eaf3bca4b8b658eea980920b778d602cd71c2c45d6331725eab15189276bc20c447552ab5d76e123d1391f3b459169bb992b3e20ae","ssdeep":"384:QVXd+pnr62lRfFuLFJDe2cbF64mMvxbRxGqGdGKrGCGLGa1R:QVX6BlNyXfkfZD","tlshash":"91c283a160f47173018b90e7faa62f562ee0d693cb590048b2fd8bd89fe7c85ee17445","first_seen":"2026-09-11T03:42:36.263439Z","last_seen":"2026-09-11T05:23:33.412001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.343Z","timestamp":1789098119343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 06:09:22 GMT\r\nexpires: Fri, 10 Sep 2027 06:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 77557\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32244,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-09-11T20:40:05.183847Z","times_seen":18600,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":31,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/styles.css","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.011Z","timestamp":1789098119011,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: W/\"6a846a5a-ea8d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zzlQpwUDGj35W1n51XJobimiN35qeIBfF7fRRiIbQYf6qVm1ln4EcMA3xd4hqb2H94FWVKIySKE%2B4u%2FVD4QR17Mnyua55VM2tzqOGDxgbH34wJDoTNA6D8%2F3dJBcOP7iMQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a393a8ebdb6556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60045,"size_decoded":13365,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0182a111c14ecbb8cbd8e08a21588eaf","sha1":"c857d1a691e53f27776b94cfe4c878ebc88ca6b2","sha256":"e7e3b8cc660fc11d6d4589425310d3838018cff7e6b6657e100bab149c42673a","sha512":"0d81654669d36c69b65779ece437a1a5e4ce042d06af394f53ae17033b41ed1938d2b29dba5204ecccb6fa5b3fb90369ac08668ec3de5ee127c722294661931c","ssdeep":"1536:SmsX6yTjOqyw5kGdD1hCI09kpS/v+ph1/Hvro0LeKlocslRHaHqcCl5kRCKi5O02:SmsKvSCR9+RCGCl5VO0LS","tlshash":"a14376543a6d1448382fe168b597aba8631cd0058d0ecebcb3df156cdfc92e865b27c6","first_seen":"2026-08-28T13:38:10.718126Z","last_seen":"2026-09-11T19:30:00.417251Z","times_seen":12,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/certik-logo.jpg","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.035Z","timestamp":1789098119035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /certik-logo.jpg HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-3590\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eWYF%2FOKjY7PLScQ6hUShm%2FYjzvMKwqo9L6jmOoewgmLnJ6GvTkQAthLJUVB80fU0lVklChheQxm92hsh%2Fd9CZ6UBt9i%2FPxa29z50th0adTqbJVICHpA983IamxVl3ZuZ2Q%3D%3D\"}]}\r\ncf-ray: a393a8ebfb6956cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13712,"size_decoded":14640,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"3cd84d623b137afa277ad068178a3297","sha1":"d94a653c30eb6991f8670db8c12097cc923ead6c","sha256":"b29c4ea4e42434424b476eb555b7a3b1a56be5fd42ab39e2a78dcbee523d2aac","sha512":"9474dbb1e3e32ec81f529120a3e95841dd60bc34664cd3862770095f705288f04681d54419f9fb3a110f688f11e0a0fd87f8fe24f374afc2681b4b9b88458827","ssdeep":"192:sSBuMcfgMGaT/gWprgMgG4Fh1fkgP+Cr3fFqPWhChUeppZ0pyloQP8KWCmm:sEuT7T/gWprZg71fzP9rvFPepSQP82mm","tlshash":"f152cff14deec700f94f9c32a4421ba54355be748613f329e4c30d52736c6e5c9ad5a4","first_seen":"2026-08-28T13:38:10.728543Z","last_seen":"2026-09-11T19:30:00.388587Z","times_seen":12,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/4128/small/solana.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.046Z","timestamp":1789098119046,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/4128/small/solana.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1430\r\nx-amz-id-2: zrJQrzWK6TXupd8NPzGdeO09QgAXyu1fVYwPt17gvAoKK1cWMwQAu8RZJ9ovFNQHqf1CRit1iWA=\r\nx-amz-request-id: 8J611MVZBGQM8TF5\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 19 Jun 2024 04:02:38 GMT\r\netag: \"9f6644b0f146e9c7cad0c5b20b506082\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: cnRoe6CaxjUACi2X2EWAhiEsPtVd4cYj\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: accept, accept-encoding\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-content-type-options: nosniff\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2225\r\npriority: u=4,i\r\nage: 560569\r\nexpires: Sat, 11 Sep 2027 03:41:59 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a393a8ec9c9256c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1430,"size_decoded":2368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"caaae432aba5384b131797a8f9386fe7","sha1":"5594ebc7f633811ab3332d53e7dfd94d9c81a4e8","sha256":"c261f5492b11374ae6a6cfba49718ec139f562122bb4ff534cb4f7abb24d7f42","sha512":"182eff64777b491674afb9134591a1ec4ef187e4385624c80f5fe346daa84aee85e335b93187d2618d5c4b523c40d9fb9cd474d869ff1f70bb1d0e4837610ada","ssdeep":"","tlshash":"f321e6141ac6d88a86fab1a58a608587d47c34ec870cc931c0d2b14a33b044fdfc8b9e","first_seen":"2025-08-06T14:01:03.720041Z","last_seen":"2026-09-11T19:30:00.412219Z","times_seen":105,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/825/small/bnb-icon2_2x.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.048Z","timestamp":1789098119048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/825/small/bnb-icon2_2x.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1746\r\nx-amz-id-2: 3ZalYzKQ4RtQ6A/I8dhK2bA2zx7+2VINnI1S0ATKHAVnItP76yG/nhx32K0CLG8+aQUO6kayOxTrw3lPFQXUZunYDKmeKe0P\r\nx-amz-request-id: CCPWTVY2709W7TYY\r\nlast-modified: Wed, 16 Feb 2022 02:50:52 GMT\r\netag: \"39e39ca433ebda412a810fd724075584\"\r\nx-amz-version-id: v33bpgYG6.VLwv9VTOSZhRGSlcErU9GS\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000\r\ncf-polished: ok, orig_size=3237\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\npriority: u=4,i\r\nx-content-type-options: nosniff\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 67648\r\nexpires: Sat, 11 Sep 2027 03:41:59 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a393a8ec9c9656c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1746,"size_decoded":2628,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"13190e0172162efbc92046d2b3b70127","sha1":"c84f2e5c71aefe20d8db2c18ba060506b8e1e13d","sha256":"74e54f284baf48aae2a5d7d6cd87131c1c3fd2294f4f2c2cc646716e4210a57a","sha512":"b1b7372a973ca60b231d34b204858087ecd912951d9f9accdef337b7ea7ea0943cb1098283eb324f815bc9dd40ad75edde82fc6e9f60303c4e1dca56f87c41cd","ssdeep":"","tlshash":"c1310ddde292ae4d1417c10d13ee045a9c546fc5d425bb7a4d8238db53e40e582ef4d9","first_seen":"2023-05-17T00:21:50Z","last_seen":"2026-09-11T19:30:00.357308Z","times_seen":81,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.350Z","timestamp":1789098119350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 06:09:22 GMT\r\nexpires: Fri, 10 Sep 2027 06:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 77557\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32244,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-09-11T20:40:05.183847Z","times_seen":18600,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":51,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.352Z","timestamp":1789098119352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:33:01 GMT\r\nexpires: Thu, 09 Sep 2027 10:33:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 148138\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-11T20:38:58.120466Z","times_seen":32698,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":23,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/logo.png","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.596Z","timestamp":1789098119596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-dc1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2BCNvXtydjrbl4JBlkj9WCGQUsLg2dgAfdjIDTjKuluVjzQWEcrYvWmrB56tvwViE2bOuwqNvF5HdFXwbCqWi8FlzfvqR10ntbW30o%2FuegPuxxWNF417mUhyHhFzZUXD9g%3D%3D\"}]}\r\ncf-ray: a393a8ef7b8556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56348,"size_decoded":57281,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"bea08e9347fb688092747b6d78a9adee","sha1":"44e5dc0e6124361f5385405be04aeefed38b88b3","sha256":"8873fc6320ebfbffc698c2f649b6bcf7b50a453d5ed3e4c2b7c3458401666f02","sha512":"fd867d9327f58551d57f6c48fff00094504cf3b721d6733432f6a6f47694bf64d535f689a44ddf9e3f3c74ee7b012567938f5f25cb2479fb70cd4a380aefc001","ssdeep":"1536:+dPSVagbUggOIF1MPp5osuhE2bTO3hcc/t:+qrE1MYrbn0/t","tlshash":"7a43f2977fa0ec8d5b4ca83f979c00dfd63caa82405ce065e3e64956820635f26e5e1f","first_seen":"2026-04-18T14:17:41.368946Z","last_seen":"2026-09-11T19:30:00.355162Z","times_seen":19,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/jiawgngpfp.jpg","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.044Z","timestamp":1789098119044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /jiawgngpfp.jpg HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-2cf1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3ToV%2FIXUoD1qqBNswzhgV3%2F4LQcW2DcHEANMyQpWCAJhRvepipumyFOIQNFJcMueze4R2GsTo8Wemrwxhp0uBkp0rJRPE1Ir0e2DD1Dw%2FHDkNf1lcSqeIPcax8KyhjuTQ%3D%3D\"}]}\r\ncf-ray: a393a8ec0b6f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11505\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11505,"size_decoded":12431,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"a172c86925acd8a54a74985a5c5cc9c4","sha1":"bbad453905fc35dd54491f51a150637a55b5ec47","sha256":"3b39e39ba3c5eeafdeb8844b529e2a44bdc33f99b6dd45c12b8077f23b0ba084","sha512":"7088c596994bb2cff5efa98126ccd0492a46d6169db0ca38ac92b0606c77fe83790e17129c10142da114824e6be3403228ef999b6507ab8d718e449c6fe309bb","ssdeep":"192:sn5cbv6uPqm211g+A2F1cmxlKS9NYeLf2BH1LOvcRefeO41JT/4lYWkTivI+j9:sn5oCOb2DNA4tx4S39upEwoP4j/G/j9","tlshash":"4e329e3f334a2c45f29c27b0d4d54ba3af32bf6acf59da270088910993758c95c8c1ab","first_seen":"2026-08-28T13:38:10.72672Z","last_seen":"2026-09-11T19:30:00.414751Z","times_seen":10,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/npcphoto.jpg","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.045Z","timestamp":1789098119045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /npcphoto.jpg HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-85f1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DslhLpdKz8eTXxtdbN9swPirolPc1eLpck1%2B%2BaU8WO6R73gMTD24nwwijECX6LciR2viB6OhmDBdthV5kWCOnu1sWtCvXOexFq7aNlEElq02lf%2BjxCBYd9TNb2NvJTkeHQ%3D%3D\"}]}\r\ncf-ray: a393a8ec0b7056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34289\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34289,"size_decoded":35215,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 680x680, components 3","md5":"73e7c480489cc484c87931a1c23e91a3","sha1":"61801100d8f1945c64f90330f7238219cd840957","sha256":"9453f5cf35a1bc38df3c96035eab56b8fcc56f1754c7f56471ea9bd51ff296af","sha512":"ea82d81ea194c8d4e21ebb9633df5e7bba7b8d9a1e089e4282ee21fdb63cee3b7b344dabf803c98bceac18f2157ac36dbfafad4987ce35fd40b7e6247b787c68","ssdeep":"768:S+BKeZc34N3HTUVAhvIo9aupZ1qtqr9g63y1GHQbx:VBKeey3HYVAhgDGhbydbx","tlshash":"6bf2e02a8f04161cc0be6e324f0c106257176e6dec7319d58b8fb6716bee9be1e68174","first_seen":"2026-08-28T13:38:10.692072Z","last_seen":"2026-09-11T19:30:00.366772Z","times_seen":10,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.341Z","timestamp":1789098119341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:33:01 GMT\r\nexpires: Thu, 09 Sep 2027 10:33:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 148138\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-09-11T20:38:58.120466Z","times_seen":32698,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":20,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.357Z","timestamp":1789098119357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 06:09:22 GMT\r\nexpires: Fri, 10 Sep 2027 06:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 77557\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32244,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-09-11T20:40:05.183847Z","times_seen":18600,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":55,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/logo.png","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.598Z","timestamp":1789098119598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-dc1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WkEsLgsUDmRUxgz6ummGnst0VkJXf7Siro65UhFaAICWfVDIXQPLBiq1WRL1gMrTwgS9anVmHsl0lvnmc%2F6mDVfzyzVSQ7Mlanto%2FlHb%2BmEmllvWkkX5XyvwOJgzWw%2B3g%3D%3D\"}]}\r\ncf-ray: a393a8ef7b8656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56348,"size_decoded":57285,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"bea08e9347fb688092747b6d78a9adee","sha1":"44e5dc0e6124361f5385405be04aeefed38b88b3","sha256":"8873fc6320ebfbffc698c2f649b6bcf7b50a453d5ed3e4c2b7c3458401666f02","sha512":"fd867d9327f58551d57f6c48fff00094504cf3b721d6733432f6a6f47694bf64d535f689a44ddf9e3f3c74ee7b012567938f5f25cb2479fb70cd4a380aefc001","ssdeep":"1536:+dPSVagbUggOIF1MPp5osuhE2bTO3hcc/t:+qrE1MYrbn0/t","tlshash":"7a43f2977fa0ec8d5b4ca83f979c00dfd63caa82405ce065e3e64956820635f26e5e1f","first_seen":"2026-04-18T14:17:41.368946Z","last_seen":"2026-09-11T19:30:00.355162Z","times_seen":19,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/bodymovin/5.12.2/lottie.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.016Z","timestamp":1789098119016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/bodymovin/5.12.2/lottie.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4984821\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 09 Jan 2024 01:38:56 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qso6IaGCQ1c1Tc%2FHeB8MqZKcreeeN2g7xbqrWfAKCHgplXa0MQgoes4ab9lbcxuwHyCDLQb2H1FdWGSnbrAoe1Dem1KdGz65TFHz7becLg2FF2bSincBDBQil5nTkR9%2FgiIGPISK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a393a8ebf8ec5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63677\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305543,"size_decoded":64694,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"55bf86203909151984bef8cbe4739d64","sha1":"543e646b2ff86405b77bd2514b1aede8a8b4cbd8","sha256":"a0757321f974527bda3cc2593bf56cc7ffe4578421249ced6ae49ffb1c529f90","sha512":"8c49ee0edea37de7028ed850009f9e774313540fbee592a69547260c606fdaf508fd1127e85b88762c4b367413faf2aeb04da18539368acddc16fbf9c00f9282","ssdeep":"3072:xnEwejqNqAvPSIoPayIYzfq526QGK2y0mbsZmml+39xzKMTlB6k:xUjqNqAvPSIoPayIYzfq52tU1l4fRRBl","tlshash":"a85419597254343805c540a9806f0a4bb736292e246ac49cb76cf4ffacbde8d31beb75","first_seen":"2023-07-18T12:10:25Z","last_seen":"2026-09-11T19:30:00.368396Z","times_seen":2430,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/script.js","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.023Z","timestamp":1789098119023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: W/\"6a846a5a-bf38\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFweATyGfiZgeoQIX%2FiS1iKGXamXOehiBVH%2FT8k3io0pyQb2JOp0lrCdukQ7NO0q6e5H5z9o9N1dRXzHuY9jKf699gqcmZrqrTulplWv4X839Pd8fbHer0XcUWttNpm%2FaQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a393a8ebeb6756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48952,"size_decoded":14867,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"866585650f99cc898608a5ea54fe2a8a","sha1":"ca0078b84ec6d545297bee19067458f80b017128","sha256":"ba8523089e0060dbb0b897733cf7ae18926146d93f6f9a0533b45ee20ee2fd21","sha512":"c298f2dd961be607cff6c2f902654fe1a5bc4a2373ec4c6a8873a55d664e99a9b64114e50dc3cab7cbb12afffa352e8012f90113d1b6fdbe352d7cd58a33dec6","ssdeep":"384:D3ipsBlztWsSPnIJmFR6gKyYo+1eaQgn0BC0a8Gznp/0MjO+XYJE3iqCwEQHpgIc:DB8za5jLct4ceoAF7vCzKS","tlshash":"7823b66dbef735666873307e6baf9204366450434908ed0c3d5cd244dfa0a698bbafd8","first_seen":"2026-08-28T13:38:10.720456Z","last_seen":"2026-09-11T19:30:00.356629Z","times_seen":10,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/weilandpfp.jpg","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.038Z","timestamp":1789098119038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /weilandpfp.jpg HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-6eb8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIgP8gh%2FVAY9tEwYToCTHcGnlRzHENepGCpp2H9KeEAU%2Fwn9Cvu6d0tNGuipdXyOYUWo%2FGmNyx1sjhz8tsSOWh6CW6xdx9gNKmMi4ky%2F2EmL1IpF4Cg2%2FjYekREXbpRLxA%3D%3D\"}]}\r\ncf-ray: a393a8ebfb6b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28344,"size_decoded":29274,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"da0cc5b8b13bc0d9a0c64f8750d2b84f","sha1":"954d68f3415df8256c8ac9535b05aa5d4672316c","sha256":"10de1fee121d18d2d7a1caa25df1b329fd2c73c3326f02adfa4efc195a59d16b","sha512":"8afc551c4f5878de0207ad10837641812bef7d1a4ab7878b888eeb90abdaf68a757cf92ed990eefcbc2748920318a6c93bf913bcc2e525c5cf318f54640979ca","ssdeep":"768:d3i+NkamX2jw4qWgdsiH1HufI+bPg7oj16ZQdeY4Bid/hJfngWO:1aNXb44siHAjP36ZIeHsvnO","tlshash":"88d2e164aa416e7dd4dc1cb2a2649bb7abf7fc6ac849293bf061f035370150b5bec160","first_seen":"2026-08-28T13:38:10.684763Z","last_seen":"2026-09-11T19:30:00.37109Z","times_seen":10,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/16547/small/photo_2023-03-29_21.47.00.jpeg","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.052Z","timestamp":1789098119052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/16547/small/photo_2023-03-29_21.47.00.jpeg HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 1561\r\nx-amz-id-2: w0nkrhpDonK2Ai0HaQeQFH89dLSiMJOYHJcSKGan+8mkpjVGBu/I1FkT9At129+N2Q4PlkI3afc=\r\nx-amz-request-id: V41PGCXEX5MQDRRD\r\nlast-modified: Wed, 29 Mar 2023 13:47:12 GMT\r\netag: \"cce1144500c017fb8cc1a19baa16a946\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DmxZ4Zxj35pbMBlIw.pBhXHksF0vmJgW\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000\r\npriority: u=5,i\r\ncf-polished: webp_bigger\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept-encoding\r\nage: 403596\r\nexpires: Sat, 11 Sep 2027 03:41:59 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a393a8ec9c9856c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1561,"size_decoded":2447,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3","md5":"cce1144500c017fb8cc1a19baa16a946","sha1":"8465b8cc3621af67c64e8bb12df1dfff43825487","sha256":"68a60033191503e9335a3b0389022929b59e893eaf9cf591420f26b53439ad62","sha512":"9fd8ddba41f1d4f9b8fca078cf251d6ae609c09911ecd3e6ff9db240e53b00a888009b188dcf50555265bcbde48a00d4e76da1f8d57fc3dd7a19edf03c0864d6","ssdeep":"","tlshash":"8731b5fbba2e9fc2ccd5e531403e7348e42cad8ac8210b4c0a116e50a2b5ed6ec51d5a","first_seen":"2026-02-28T15:44:19.51601Z","last_seen":"2026-09-11T19:30:00.382724Z","times_seen":28,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/logo.png","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.056Z","timestamp":1789098119056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-dc1c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bn0G6wHuG9aWwzD00P7b4UFMNV8j9%2FW5pMUJAFA1nD1XPAkLozJ8zeaVCV61HEO2DeYxmc3J6fp805sXF1yYm4KK22HEdJRVb7xsheJvv7yMkLd139NoISDlkUULP5psrQ%3D%3D\"}]}\r\ncf-ray: a393a8ec1b7256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 56348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56348,"size_decoded":57269,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"bea08e9347fb688092747b6d78a9adee","sha1":"44e5dc0e6124361f5385405be04aeefed38b88b3","sha256":"8873fc6320ebfbffc698c2f649b6bcf7b50a453d5ed3e4c2b7c3458401666f02","sha512":"fd867d9327f58551d57f6c48fff00094504cf3b721d6733432f6a6f47694bf64d535f689a44ddf9e3f3c74ee7b012567938f5f25cb2479fb70cd4a380aefc001","ssdeep":"1536:+dPSVagbUggOIF1MPp5osuhE2bTO3hcc/t:+qrE1MYrbn0/t","tlshash":"7a43f2977fa0ec8d5b4ca83f979c00dfd63caa82405ce065e3e64956820635f26e5e1f","first_seen":"2026-04-18T14:17:41.368946Z","last_seen":"2026-09-11T19:30:00.355162Z","times_seen":19,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.344Z","timestamp":1789098119344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 06:09:22 GMT\r\nexpires: Fri, 10 Sep 2027 06:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 77557\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32244,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-09-11T20:40:05.183847Z","times_seen":18600,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":38,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/bags-fumbled-ada.png","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.043Z","timestamp":1789098119043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /bags-fumbled-ada.png HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-3081ca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9owXIyMZnP%2FvLMevOjSoy%2FKPg2Uzfo8g6fwTmueIkwhEonGHeCYH0v%2BjoFaHY%2Fgrl1tL3bsqSCLr3PtwRkorND3crSZv3vzNDl4O8Ui6rshvx5IP3ecIn9Pxj0yI8vtCGg%3D%3D\"}]}\r\ncf-ray: a393a8ec0b6e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3178954\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3178954,"size_decoded":3179885,"mime_type":"image/png","magic":"PNG image data, 2160 x 2700, 8-bit/color RGBA, non-interlaced","md5":"cbcd6a14271bca9e40b417b3359d2137","sha1":"c613ba3b20d11ec63bdf71dd6422b2ced6e0606b","sha256":"d403768d93ac993f04eb3f9b088bff68e04f828b6c3ce1092f060b66f1bf81f2","sha512":"907fccf5bcac1143463e08d37055d5d07ba9b6598fe53cc6afbe767a53696f4efb49750b744060e1a1f19ed242b9df0c1ff558001c77611de11aacae1a044255","ssdeep":"24576:jT6OQuH1JPznOEYiiBV8PI/4d6Viv9ygzaI6heSoyjHN8:jmst6EIBV8KTVivVzzbh","tlshash":"cc252396c0f260b6b453957e7d72a548438c3aeadf2863738ab0c6ba75d5d50c062fcc","first_seen":"2026-08-28T13:38:10.676353Z","last_seen":"2026-09-11T19:30:00.409584Z","times_seen":10,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700;800\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.013Z","timestamp":1789098119013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600;700;800\u0026family=Space+Grotesk:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 03:41:59 GMT\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18870,"size_decoded":1638,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63f9dd9f449d4a227f4d22682573a612","sha1":"be9523153083223af6ab9b184cde52c3dbe189cd","sha256":"8000ea228de0657bcd2b821199d0acdb306db1b3350d56f631b28e20f021c139","sha512":"690d4682d2af871f87e001110c22b373ca50362d08415513cf7d184a24b415adc5fc627a8dae8ebd4007c5c736210e17b36b13401b89cad8f158185e4fed248c","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCFGbep3g5XxAGyvp3lcXEWcGGDZx/GiZC4g:fOGC6CmOK22KDgRt","tlshash":"4082eee1041b9404ea472cc633cebe35bd8ea1066081d9b9dfff18989daac72233475d","first_seen":"2026-02-13T03:15:33.479048Z","last_seen":"2026-09-11T19:30:00.364399Z","times_seen":22,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/vmooklpfp.jpg","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.042Z","timestamp":1789098119042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET /vmooklpfp.jpg HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncast-mode: default\r\nlast-modified: Tue, 18 Aug 2026 14:21:14 GMT\r\netag: \"6a846a5a-6c4d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qce8DT4cyoJab3YeK1NQgY6T6ssy74IBT2lD4n62IqQnkAukShLgjQDfxqGmm2NxPsFXRVmxERFDrRRmJm2NzgQx5zNJz3Pi2%2F5Qp4mEhk3N8UNBhhaFpt0g%2FRfRtvsLaw%3D%3D\"}]}\r\ncf-ray: a393a8ec0b6d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27725\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27725,"size_decoded":28649,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"e63f2431e1e7c468376b16c77bd2b943","sha1":"0d65c61f15fc72983d10fc5ce0ed0e8239729367","sha256":"405b9fda1963cda009143167c35fb7fe1d3fea58073f7a618c54c66c790ddb9c","sha512":"3db33241134fb8ffdb2942714361c0983842f574f075887011bc97fc35e8587ebb544d445bacb7b96ad9b4754882cfdfbd529ea980ec3b5b651e0f4caaf36a8b","ssdeep":"768:5q/DVKDpZ5T2sylRU0tE0xLJsLySo5grufB:5wV45T2TRyo+5QQufB","tlshash":"cbc2e0e793247c26c47ee3794dd7bf9667032c78c45befab2a321da213a21105c99348","first_seen":"2026-08-28T13:38:10.688808Z","last_seen":"2026-09-11T19:30:00.365872Z","times_seen":10,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/279/small/ethereum.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.047Z","timestamp":1789098119047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/279/small/ethereum.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/webp\r\ncontent-length: 948\r\nx-amz-id-2: qiKzw2+1j6QbKhh/apuyXDxv7ot8j/Ctjhfp+ErNvlZUb2spjoJ3SqH0rW1GoruJZHrL/CBsfsI=\r\nx-amz-request-id: Q805GTDV9B8SQJH7\r\nlast-modified: Tue, 21 Jul 2020 16:28:02 GMT\r\netag: \"19758c6da516f95d9fad2a210c525ee7\"\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000\r\ncf-polished: ok, orig_size=1887\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\ncf-bgj: imgq:100,h2pri\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 258726\r\nexpires: Sat, 11 Sep 2027 03:41:59 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a393a8ec9c9456c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":1782,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31e1aba01328ea90f32d232f715ed6ee","sha1":"78bc3af43f1f851a185985e3eb68c3592be97978","sha256":"8f45cd0b346a8c0f81f590955b0543d96e811e03c85166854aed6cd498ac095f","sha512":"0f618acb05c9f7b4eb219d2c794d189826bfbf8c61bd9a1a59dc6eced364cf5dd154f870a54e227ba14f7c95a218e6d48c8d7d84d7de1e83b7db52361cab138a","ssdeep":"","tlshash":"921194644260a0268abbb00036db414a0134d8e4ee56c54e49b28f07094833e2c84775","first_seen":"2023-05-07T22:03:16Z","last_seen":"2026-09-11T19:30:00.418157Z","times_seen":145,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bagfumbled.xyz/","fqdn":"bagfumbled.xyz","domain":"bagfumbled.xyz","tld":"xyz"},"ip":{"addr":"104.21.9.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T03:41:58.148Z","timestamp":1789098118148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bagfumbled.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 13:52:38 GMT","end":"Sun, 29 Nov 2026 14:51:21 GMT"},"fingerprint":{"sha1":"DD:AE:C7:4E:71:68:EC:CD:36:0D:93:E4:3F:35:9E:B5:9F:65:84:AF","sha256":"78:24:E1:71:95:83:44:1C:52:E6:94:9D:97:F3:5D:D2:3D:43:F1:C5:4A:F0:7C:15:8A:6B:DD:48:89:08:46:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bagfumbled.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 03:41:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 06 Sep 2026 21:56:16 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4sdv3ghYL0XVHrtsV3GPoEzGDDVsv4VZ5vDjewMMuIcvo9l9avAPfvB7rgsm22CN9%2F1mDuAOIq7ZR%2Fp2S9%2F46aIgpuaM8U1FR2%2FpUg59spD0IN72spFCkUdInfh2kMsKQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a393a8e73b5b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}],"data":{"size":26135,"size_decoded":6939,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1103)","md5":"08a87f1886280f3e80883424de843a45","sha1":"73c5d10c7088a6057b5dd4ec9a0c79d5a89db894","sha256":"bde2d4869db2e17f7b162c431b1a33d28d3746af2d03894dfc02489691d5105a","sha512":"626a57e05784e3d83449d7eaf3bca4b8b658eea980920b778d602cd71c2c45d6331725eab15189276bc20c447552ab5d76e123d1391f3b459169bb992b3e20ae","ssdeep":"384:QVXd+pnr62lRfFuLFJDe2cbF64mMvxbRxGqGdGKrGCGLGa1R:QVX6BlNyXfkfZD","tlshash":"91c283a160f47173018b90e7faa62f562ee0d693cb590048b2fd8bd89fe7c85ee17445","first_seen":"2026-09-11T03:42:36.263439Z","last_seen":"2026-09-11T05:23:33.412001Z","times_seen":2,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":105,"connect":16,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"bagfumbled.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.coingecko.com/coins/images/12559/small/Avalanche_Circle_RedWhite_Trans.png","fqdn":"assets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.5.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.054Z","timestamp":1789098119054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 13:33:00 GMT","end":"Sat, 21 Nov 2026 13:32:59 GMT"},"fingerprint":{"sha1":"4D:29:68:A9:EE:0E:59:4F:5D:B5:F6:DA:1D:E4:87:83:21:39:91:4E","sha256":"FC:54:37:15:4C:0F:32:EB:9B:D7:70:B5:21:42:8E:2D:6F:B6:63:09:90:12:AC:29:3D:53:DF:77:E0:4E:48:92"}}},"request":{"raw":"GET /coins/images/12559/small/Avalanche_Circle_RedWhite_Trans.png HTTP/1.1\r\nHost: assets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bagfumbled.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1252\r\nx-amz-id-2: wLhVjfkACW79+dkcGLOexPAntnwGKt3SYMZgBiGgJjBiLEYJ5lDhxzvwekYaTIz2Ko7RkvfYwtQ=\r\nx-amz-request-id: AKPDEG1PDVFEXG79\r\nlast-modified: Wed, 14 Dec 2022 04:36:16 GMT\r\netag: \"b96ca6f624d7e517b9b0bcf7d4c70a06\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HC_Ey0u5QoRsg7G_3rFd3SrEP7lTkrR5\r\naccept-ranges: bytes\r\nserver: cloudflare\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4,i\r\ncf-polished: ok, orig_size=1966\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept, accept-encoding\r\nage: 785515\r\nexpires: Sat, 11 Sep 2027 03:41:59 GMT\r\ncache-control: public, max-age=31536000\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a393a8ec9c9056c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1252,"size_decoded":2152,"mime_type":"image/png","magic":"PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced","md5":"de75850bfc901792578485f0f5e0e23d","sha1":"a58fe09c6c650a5464f2d5aa9565f3aca0437c98","sha256":"73f99738b2bbc3d3fe834936dc3638733bde9a54fe53824ada882e7d3f2cc253","sha512":"2dec5c6bd9d54e43bd36869a92bbc0a69b946e40b2fbde81d328f286efa95e9d9b80afee7a06541cd010e7d1b66888142015fcc90844e98e71b25ddf64ff64f2","ssdeep":"","tlshash":"7d21e75b2a20cf1090ae3cbdb41eac61e0a3155926a20435351daea9811b7e3c49e3a4","first_seen":"2026-02-06T18:57:36.496215Z","last_seen":"2026-09-11T19:30:00.389425Z","times_seen":42,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":24,"dns":0,"connect":29,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.348Z","timestamp":1789098119348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 06:09:22 GMT\r\nexpires: Fri, 10 Sep 2027 06:09:22 GMT\r\ncache-control: public, max-age=31536000\r\nage: 77557\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31432,"size_decoded":32244,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-09-11T20:40:05.183847Z","times_seen":18600,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":44,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=solana,ethereum,binancecoin,avalanche-2,jupiter-exchange,bonk,dogwifcoin,raydium,pyth-network,orca,jito-governance-token,book-of-meme,popcat,helium,msol\u0026vs_currencies=usd\u0026include_24hr_change=true","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.20.41.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bagfumbled.xyz/","date":"2026-09-11T03:41:59.375Z","timestamp":1789098119375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 31 Aug 2026 17:41:37 GMT","end":"Sun, 29 Nov 2026 18:41:33 GMT"},"fingerprint":{"sha1":"AF:2C:42:9A:79:10:B8:27:14:C9:00:42:5D:31:6A:C2:E6:36:52:D3","sha256":"E1:48:0D:AE:71:35:F2:0C:8D:1B:58:67:01:07:1A:9F:9F:40:1E:A9:80:CD:29:A0:0C:EC:4C:75:20:A6:EC:40"}}},"request":{"raw":"GET /api/v3/simple/price?ids=solana,ethereum,binancecoin,avalanche-2,jupiter-exchange,bonk,dogwifcoin,raydium,pyth-network,orca,jito-governance-token,book-of-meme,popcat,helium,msol\u0026vs_currencies=usd\u0026include_24hr_change=true HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bagfumbled.xyz/\r\nOrigin: https://bagfumbled.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-xss-protection: 0\r\nx-runtime: 0.020087\r\ndate: Fri, 11 Sep 2026 03:41:59 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\ncf-ray: a393a8ee38784e4c-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\ncontent-encoding: gzip\r\netag: W/\"9676b6a011b51636df0374580d037531\"\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\naccess-control-request-method: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-data-source: 2.0\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-request-id: 06c8bf46-06a7-4b88-acb2-cea2b0dd8cb4\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":893,"size_decoded":1400,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5f33db70f6418e7672a54626861dc965","sha1":"c8bec4de51307a3c70c7dc38a5f1082a00bafd93","sha256":"37c8c78d002e5d91f63451f03959b61013f764b7b6254295ea9280f4ae9edc84","sha512":"b32913a1b02d065dbb2f2b9a2ce970cdb2bfc7dd67fc128e16f4a5e19a64738004baf81145d3d031957a2257bcd90488868bec6095bdd598992ca314224663da","ssdeep":"","tlshash":"6911b2930270c2a78cb48b734ac423a0ee5b59f09c5d8254072fd9e804582af170e887","first_seen":"2026-09-11T03:42:36.292386Z","last_seen":"2026-09-11T03:42:36.292386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":5,"connect":13,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}