{"report_id":"71eb1aa3-6aeb-46ad-83ce-670c89e09f9e","version":0,"status":"done","tags":[],"date":"2026-06-11T15:29:59Z","url":{"schema":"http","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"104.21.21.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"title":"Airdrop Live | Claim Solana Token Airdrops","dom":{"size":3132907,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52456)","md5":"1d94370e14ab58a1e7e86c6a5248fa72","sha1":"fa7b8bc28f14e8f7b62b297b676871e9c6c9c666","sha256":"42071d68a97acf3d0f0ae918028a67107e10253fc5f4b4d6bcad42924891cf96","sha512":"233c9ea159a8d6f9cf9a38d2d2ed8d0d762f3bcf9e08aca35fce7ec821e5c8ff7a740004e2865ecc2eb957c2b7b889348fb5be479dc38f1deaf63bb5b0688be9","ssdeep":"24576:vzXqhdmf3ICANUl1vbiOl9V8c/8xvXEdlsMuLUFz9qiHkbnoLhzX1WEgrSn5Zcg3:vzqQvWPdHSRm667R5k","tlshash":"59e5e8b9917b25846b52b4a1130721506f1cf61bc408cc6cf6ce7aafdfc6251deae68c","dom_hash":"domhash4caee4a4bd8321e69e7c9611a04be7af","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"104.21.21.49","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-16T15:29:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"chad-pro.fun","ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-21","domain_rank":0,"first_seen":"2026-06-11T09:50:27.238357Z","last_seen":"2026-06-11T09:50:27.238357Z","alert_count":15,"request_count":5,"received_data":4159626,"sent_data":2452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.coingecko.com","ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":442226,"first_seen":"2018-05-18T12:16:11Z","last_seen":"2026-06-07T19:14:57.900065Z","alert_count":0,"request_count":2,"received_data":2425,"sent_data":1004,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chad-pro.fun/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fshaka-player.compat.cjs.js%3Ft%3D29686529%26u%3DV_PQrC8LSUiLD1NqGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMQCVp-IuxI3vffotmQ","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-23T11:39:09.351163Z","times_seen":2594,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35de11bcf1c6325a26d781be3192e9c4","sha1":"dd42a4e2d74e70b29726da1784c533688d726c44","sha256":"c10d26ba5e2117c916a383a4d0b9cf0ecaa5a3fa8c5b2c33b9138a0869297b19","sha512":"9e15dd6cb5939e36b894427d66877c08a26f544fb8f6b3eb6ae0575003d1812e85dd8ab76a502255917ed194487f4138326a42bdcc2901eda09e29ab9887d4a7","ssdeep":"","tlshash":"9d115927222233707cd9d5dca9b6d98e39bb500ae40a0090b08e944c1e34bc944f7bdc","size":863,"data":"","first_seen":"2026-06-11T09:50:31.530872Z","last_seen":"2026-06-22T09:07:56.547497Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbb466a065a51c4bfa1e98c63fb2b28d","sha1":"7388e7cdbee2934c7ef707bbb81f7de5f1697405","sha256":"f8c2375721e6b578cb9a7e218d3de60a6362ceb9e303a1d1c82577471ca29717","sha512":"e72185e771573a0a327e3282cb0ceb7d23cca5d3a0b2159d5bb70905d4b9b5a0a5dec7d2ac84850061426eef0a33bb1277f1563d8aeb3630ebde1748542118d5","ssdeep":"192:1nwq9MLji4ycUrC97JAuVnra4A+ecr89ChWtY3+BRDmibUvvD9ptI7x1D:WX3pyc37X3+BhmXvD7Ob","tlshash":"d912856e6aa3203a6403a63dcfef911436eda4031a0edc09780cd6d15fe1d1495bbfe5","size":9565,"data":"","first_seen":"2026-06-11T09:50:31.531719Z","last_seen":"2026-06-11T15:30:01.672551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/p2.slim.umd.js","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14705dd0279252d3457cf87f7b5252dd","sha1":"fd8b4043e6b08c2d2c37a4fb080368ca03a486b3","sha256":"23ce240cb55db91646ac4c5f8b4591a5c72756511b64fe426397e74dc65f5775","sha512":"22cb9dac15e7c9f601923ed8ef112ec70be234fc2cd8a1d8b62a0fe9a84df72bb1adc0f0cae6068c3e3c14e3609b38fe5f3679c53718c9d6c064793cc128fe9e","ssdeep":"6144:r/2hrEJqaZGVgQkZ2diu7NSOTiKiBf6Np:r2hYgaZGjkZ2diu7NmoD","tlshash":"82744e65109dfaf78b904f94a62541cbe4482b380e413b27a3f7ff96a1e5b4df0e6091","size":364080,"data":"","first_seen":"2026-02-06T22:38:09.234577Z","last_seen":"2026-06-22T11:22:44.410277Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"893fc64b7e1379e29e4b82d0105432c1","sha1":"9960d3439508b1d000f8a0613b3fba3913a44c68","sha256":"6a65d1b063a3fe42946be2bb4aa942e20568ffcacefcb2f64e494167633b038e","sha512":"99e433221635967121d101241c3b9394d615bc0d182504c66ad1f2c0917cc2d5eee2159f1e7546ba178eed6ea7d189dac9ad4340f59007d7325dd93b87ec07a1","ssdeep":"3072:RV8Y/Ytx9NgolPWx7uMC8rNtDwmyQKq+kCJJD3YOTikkQYvVsgyP:RViS6TotDwnQKR3YOTikKvVsp","tlshash":"52742d64149efaf78b915f98a62582c7d4482f380e013b2762f7ff92a1e574df0e6091","size":356837,"data":"","first_seen":"2026-02-06T22:38:09.255187Z","last_seen":"2026-06-22T11:22:44.42151Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"35de11bcf1c6325a26d781be3192e9c4","sha1":"dd42a4e2d74e70b29726da1784c533688d726c44","sha256":"c10d26ba5e2117c916a383a4d0b9cf0ecaa5a3fa8c5b2c33b9138a0869297b19","sha512":"9e15dd6cb5939e36b894427d66877c08a26f544fb8f6b3eb6ae0575003d1812e85dd8ab76a502255917ed194487f4138326a42bdcc2901eda09e29ab9887d4a7","ssdeep":"","tlshash":"9d115927222233707cd9d5dca9b6d98e39bb500ae40a0090b08e944c1e34bc944f7bdc","size":863,"data":"","first_seen":"2026-06-11T09:50:31.530872Z","last_seen":"2026-06-22T09:07:56.547497Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bbb466a065a51c4bfa1e98c63fb2b28d","sha1":"7388e7cdbee2934c7ef707bbb81f7de5f1697405","sha256":"f8c2375721e6b578cb9a7e218d3de60a6362ceb9e303a1d1c82577471ca29717","sha512":"e72185e771573a0a327e3282cb0ceb7d23cca5d3a0b2159d5bb70905d4b9b5a0a5dec7d2ac84850061426eef0a33bb1277f1563d8aeb3630ebde1748542118d5","ssdeep":"192:1nwq9MLji4ycUrC97JAuVnra4A+ecr89ChWtY3+BRDmibUvvD9ptI7x1D:WX3pyc37X3+BhmXvD7Ob","tlshash":"d912856e6aa3203a6403a63dcfef911436eda4031a0edc09780cd6d15fe1d1495bbfe5","size":9565,"data":"","first_seen":"2026-06-11T09:50:31.531719Z","last_seen":"2026-06-11T15:30:01.672551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"No CA provided","filename":"https://chad-pro.fun/","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"chad-pro.fun/secureproxy?e=ping_proxy","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chad-pro.fun/","date":"2026-06-11T15:29:33.820Z","timestamp":1781191773820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chad-pro.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 18:11:12 GMT","end":"Mon, 20 Jul 2026 18:11:11 GMT"},"fingerprint":{"sha1":"10:02:39:BE:28:79:0B:CF:B0:30:20:5E:82:90:3C:C8:7E:1B:5C:8C","sha256":"7A:7A:F5:F8:67:96:94:AB:FA:BC:D7:7A:2D:BB:A0:30:10:B6:DE:81:3E:10:94:94:0C:31:83:63:80:28:8E:F9"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: chad-pro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chad-pro.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 11 Jun 2026 15:29:33 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IsA%2BsYcmjhKUpYmw3OIeRIIMOzD2f5%2BzGUa3G%2FZylRs7bkC7Qe8gq%2BwUgjnx6bBl6J4X6lsa0%2F%2FjiDOIX63FgFkX0wWbbrNeGco3iaFZbbG2BsA2u%2FPJ5ucyi6SEtTY%3D\"}]}\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 20373\r\naccept-ranges: bytes\r\nlast-modified: Thu, 11 Jun 2026 09:50:00 GMT\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-length: 4\r\ncf-ray: a0a1a6ea6ea756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":1191,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-23T18:48:50.359465Z","times_seen":8845,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=solana\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chad-pro.fun/","date":"2026-06-11T15:29:34.230Z","timestamp":1781191774230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 17:29:28 GMT","end":"Sun, 06 Sep 2026 17:29:27 GMT"},"fingerprint":{"sha1":"61:90:E7:C0:28:52:74:D9:CE:D4:5C:35:8E:DB:58:B2:86:66:FC:8B","sha256":"58:68:AB:7D:AA:CE:E4:C7:EF:19:E3:61:CF:6A:D2:AE:7A:EA:C0:FE:48:47:AC:B9:68:7A:EF:9C:9F:0B:37:EE"}}},"request":{"raw":"GET /api/v3/simple/price?ids=solana\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chad-pro.fun/\r\nOrigin: https://chad-pro.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 11 Jun 2026 15:29:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"7beddd1f4e3c4d9f36fc34a05d559188\"\r\nx-request-id: 7a2b7944-3b3a-4835-a139-96d19994e3e5\r\nx-runtime: 0.003184\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=600\r\ncf-cache-status: EXPIRED\r\npriority: u=4,i=?0\r\ncf-ray: a0a1a6ed2d19b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24,"size_decoded":1236,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"188bf3c8c6fdeb2e15bd9c28b0b6d199","sha1":"d2c9ceb8ab9f47b1e01db4d65214b48e332bbb79","sha256":"b584babbe405fbd41720bd49029d6a756f35e6c40df03480f93a42093bc0c08b","sha512":"5b6a940c86814ed5088faf8b8f38947175bfe8ae40caa43f2cf4d6e95e8c4a659c9fe115119a57779c26cd76dd3a0cc10a5b12b8be8296ba135c3dd5b6f43feb","ssdeep":"","tlshash":"8d70000220e008a32e08022208200200e2c300232028020c2a08a200082c28a20008e8","first_seen":"2026-06-11T15:30:01.665955Z","last_seen":"2026-06-11T15:30:01.665955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":9,"connect":18,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun//secureproxy?s=%2Fjmpd%2F","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chad-pro.fun/","date":"2026-06-11T15:29:35.578Z","timestamp":1781191775578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chad-pro.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 18:11:12 GMT","end":"Mon, 20 Jul 2026 18:11:11 GMT"},"fingerprint":{"sha1":"10:02:39:BE:28:79:0B:CF:B0:30:20:5E:82:90:3C:C8:7E:1B:5C:8C","sha256":"7A:7A:F5:F8:67:96:94:AB:FA:BC:D7:7A:2D:BB:A0:30:10:B6:DE:81:3E:10:94:94:0C:31:83:63:80:28:8E:F9"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: chad-pro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chad-pro.fun/\r\ncontent-type: application/json\r\nContent-Length: 2191\r\nOrigin: https://chad-pro.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 11 Jun 2026 15:29:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"cb-bsgJf1nN0/+CGxsy+ijURvoCfwE\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1781191835792\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/11/2026 15:29:36\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: b4e607673b9511da97d28355573db047\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=csL2WyicOrGr79qrn6S4bvRFyr8f3Vz3uYGF0vH1QoWINIlkIQpOMayYVaUkBO2NW89JmVeAUKGn8ZM4D20Tr3pimFIlQp7%2Fjz%2B5X2sy27K1Gd33BKl1xv%2FK4BMrFKo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a0a1a6f55f9f56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":203,"size_decoded":1721,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"345a99eba4df5336ea20c41abf0bf15c","sha1":"6ec8097f59cdd3ff821b1b32fa28d446fa027f01","sha256":"6eae185b4eeb40101ec235fabd32b62903a45aff547140a0e28c7deb8be28824","sha512":"4d8f7107c29b0f9c69c70c875fcce7ec3f0a837a32836a4d015a9e0e7cd1b37d359c10401a359bd1bea1321c5553f358af18abea710f23f760efd1cffcc163f4","ssdeep":"","tlshash":"a2d023b53743ba402ddb4472857504941ddde00b90950702d516cdb0e713d1063124f4","first_seen":"2026-06-11T15:30:01.667283Z","last_seen":"2026-06-11T15:30:01.667283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/p2.slim.umd.js","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chad-pro.fun/","date":"2026-06-11T15:29:33.578Z","timestamp":1781191773578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chad-pro.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 18:11:12 GMT","end":"Mon, 20 Jul 2026 18:11:11 GMT"},"fingerprint":{"sha1":"10:02:39:BE:28:79:0B:CF:B0:30:20:5E:82:90:3C:C8:7E:1B:5C:8C","sha256":"7A:7A:F5:F8:67:96:94:AB:FA:BC:D7:7A:2D:BB:A0:30:10:B6:DE:81:3E:10:94:94:0C:31:83:63:80:28:8E:F9"}}},"request":{"raw":"GET /p2.slim.umd.js HTTP/1.1\r\nHost: chad-pro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chad-pro.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 11 Jun 2026 15:29:33 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 21 Feb 2026 14:58:22 GMT\r\netag: W/\"6999c80e-58e30\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 20373\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eguSSJDmY4%2FzjK3cJRZ8o6V3bJjKbL%2BbM9g9lXFH3gIJvU8osCnhR7CQOwblQe3sYJlmoV4w63AfRKNKUjU9WN%2BXmum6S%2B5sYDt01VwMiVkxCV%2BxZcoPJy8QTDgHS2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0a1a6e8de9856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":364080,"size_decoded":95502,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"14705dd0279252d3457cf87f7b5252dd","sha1":"fd8b4043e6b08c2d2c37a4fb080368ca03a486b3","sha256":"23ce240cb55db91646ac4c5f8b4591a5c72756511b64fe426397e74dc65f5775","sha512":"22cb9dac15e7c9f601923ed8ef112ec70be234fc2cd8a1d8b62a0fe9a84df72bb1adc0f0cae6068c3e3c14e3609b38fe5f3679c53718c9d6c064793cc128fe9e","ssdeep":"6144:r/2hrEJqaZGVgQkZ2diu7NSOTiKiBf6Np:r2hYgaZGjkZ2diu7NmoD","tlshash":"82744e65109dfaf78b904f94a62541cbe4482b380e413b27a3f7ff96a1e5b4df0e6091","first_seen":"2026-02-06T22:38:09.234577Z","last_seen":"2026-06-22T11:22:44.410277Z","times_seen":109,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fshaka-player.compat.cjs.js%3Ft%3D29686529%26u%3DV_PQrC8LSUiLD1NqGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMQCVp-IuxI3vffotmQ","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chad-pro.fun/","date":"2026-06-11T15:29:34.242Z","timestamp":1781191774242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chad-pro.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 18:11:12 GMT","end":"Mon, 20 Jul 2026 18:11:11 GMT"},"fingerprint":{"sha1":"10:02:39:BE:28:79:0B:CF:B0:30:20:5E:82:90:3C:C8:7E:1B:5C:8C","sha256":"7A:7A:F5:F8:67:96:94:AB:FA:BC:D7:7A:2D:BB:A0:30:10:B6:DE:81:3E:10:94:94:0C:31:83:63:80:28:8E:F9"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fshaka-player.compat.cjs.js%3Ft%3D29686529%26u%3DV_PQrC8LSUiLD1NqGDY5MjU2NDRhMjhjZmYzYzM0MDI3Y2YxMQCVp-IuxI3vffotmQ HTTP/1.1\r\nHost: chad-pro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chad-pro.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 11 Jun 2026 15:29:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=shaka-player.compat.cjs.js\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/11/2026 15:29:34\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: bebb19ac8c36029df7f42c208afcabef\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TykBtRZ7gtIRjb3vuDFz%2FNazh1K6it9mm3wDys4S%2BYsClqxt%2FbhdQxsNK%2BuWbourkMRIIU4K1wCAMatoKPLR6%2FJR9ORxabN5swWfSMkHhsELqBvMYuHkiO%2F64fQPouo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0a1a6ed0eba56bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":215212,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-23T11:39:09.351163Z","times_seen":2594,"resource_available":true,"data":null}},"time_used":969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":858,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chad-pro.fun/","fqdn":"chad-pro.fun","domain":"chad-pro.fun","tld":"fun"},"ip":{"addr":"172.67.196.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-11T15:29:33.233Z","timestamp":1781191773233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chad-pro.fun","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Apr 2026 18:11:12 GMT","end":"Mon, 20 Jul 2026 18:11:11 GMT"},"fingerprint":{"sha1":"10:02:39:BE:28:79:0B:CF:B0:30:20:5E:82:90:3C:C8:7E:1B:5C:8C","sha256":"7A:7A:F5:F8:67:96:94:AB:FA:BC:D7:7A:2D:BB:A0:30:10:B6:DE:81:3E:10:94:94:0C:31:83:63:80:28:8E:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chad-pro.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 11 Jun 2026 15:29:33 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 21 Feb 2026 14:58:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 20374\r\npriority: u=0,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=poEeLDmote9C4q8eY6T2q%2B2hfcG%2BEHm8IaWHfkRAag9boudH0oXsaTTlM9hq%2FlKtCo4Ux%2FEQ5VgUyZzvAJgawTlDCCtpI1PssNglZvIOS42hNTenwlPPhyCT9Qm3%2Bsk%3D\"}]}\r\ncf-ray: a0a1a6e73e8656bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3132570,"size_decoded":1166570,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (52456)","md5":"ea305ab477aa3e53d4ab871b2c96b5b7","sha1":"4e4c35707a6b6840109bed297d09dc86ad7474d6","sha256":"21d6ff8c14140785e19dcc678a242b406b6bf76e9ba1ff14e109f354406167ad","sha512":"87b021985364af893ca12a69ac9b871bc6ab2e70ea0e800af7068fd28e3f6d4808c6bcdb1032876ed8f89e6fd54c6a2eab786937e4a2a98c3e38588b80aba27a","ssdeep":"24576:9zXqhdmf3ICANUl1vbiOl9V8c/8xvXEdlz:9zqQvWPm","tlshash":"ac2572b991af15c45b12e460130622406b2df627c908cc1cfacfba9edfd6155ceea6dc","first_seen":"2026-02-06T22:38:09.231974Z","last_seen":"2026-06-11T15:30:01.669992Z","times_seen":107,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":58,"connect":20,"send":0,"wait":36,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-11","alert":"Sinkholed","trigger":"chad-pro.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coingecko.com/api/v3/simple/price?ids=solana\u0026vs_currencies=usd","fqdn":"api.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"172.66.172.219","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chad-pro.fun/","date":"2026-06-11T15:29:53.923Z","timestamp":1781191793923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.coingecko.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 17:29:28 GMT","end":"Sun, 06 Sep 2026 17:29:27 GMT"},"fingerprint":{"sha1":"61:90:E7:C0:28:52:74:D9:CE:D4:5C:35:8E:DB:58:B2:86:66:FC:8B","sha256":"58:68:AB:7D:AA:CE:E4:C7:EF:19:E3:61:CF:6A:D2:AE:7A:EA:C0:FE:48:47:AC:B9:68:7A:EF:9C:9F:0B:37:EE"}}},"request":{"raw":"GET /api/v3/simple/price?ids=solana\u0026vs_currencies=usd HTTP/1.1\r\nHost: api.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chad-pro.fun/\r\nOrigin: https://chad-pro.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 11 Jun 2026 15:29:53 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS\r\naccess-control-expose-headers: link, per-page, total\r\naccess-control-max-age: 7200\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: max-age=30, public, must-revalidate, s-maxage=60\r\naccess-control-request-method: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\netag: W/\"7beddd1f4e3c4d9f36fc34a05d559188\"\r\nx-request-id: 7a2b7944-3b3a-4835-a139-96d19994e3e5\r\nx-runtime: 0.003184\r\ncontent-security-policy-report-only: script-src https://accounts.google.com/gsi/client; frame-src https://accounts.google.com/gsi/; connect-src https://accounts.google.com/gsi/;\r\nstrict-transport-security: max-age=600\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nage: 19\r\ncf-ray: a0a1a7680c2ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24,"size_decoded":1241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"188bf3c8c6fdeb2e15bd9c28b0b6d199","sha1":"d2c9ceb8ab9f47b1e01db4d65214b48e332bbb79","sha256":"b584babbe405fbd41720bd49029d6a756f35e6c40df03480f93a42093bc0c08b","sha512":"5b6a940c86814ed5088faf8b8f38947175bfe8ae40caa43f2cf4d6e95e8c4a659c9fe115119a57779c26cd76dd3a0cc10a5b12b8be8296ba135c3dd5b6f43feb","ssdeep":"","tlshash":"8d70000220e008a32e08022208200200e2c300232028020c2a08a200082c28a20008e8","first_seen":"2026-06-11T15:30:01.665955Z","last_seen":"2026-06-11T15:30:01.665955Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
