{"report_id":"78e9bfdc-51e5-4e14-afed-79c974d9b012","version":0,"status":"done","tags":[],"date":"2026-06-16T07:09:24Z","url":{"schema":"https","addr":"puump.sbs","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"puump.sbs/","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"title":"Feed The People ($FTP)","dom":{"size":3897575,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (553)","md5":"df18ca913e3e5d8f2a3337a32dcf2d60","sha1":"5b3477d2c6a236376d69ee801d1279ee2b6df5d9","sha256":"8a38f567d8145d44401228f04e557a7dd9e41a25a80aa296c359c8c15ff6cda5","sha512":"e530849675577d3179b5e7a0ad6bf00823e8bb9ef193a6ae00d39905ef96d094ededa2058ba18dcbe9a226e327b4b012888913b16fbd7711116690c0c9fcb93f","ssdeep":"3072:TYIQ0nxph1LHzFTkSUJ8GuLTdLbAiNbs8ihMuum0ZYkvlyubjD3TnUle2oK7wcOA:TYIQ0jvLGP8okl48Bfju","tlshash":"610655f152b453e60087ca75fa31da1ba793f9bbed1ba20473ec87906f4a8d2cc12554","dom_hash":"domhashf3b45aa3cdfd3cf0710f1069170b620c","first_seen":"2026-06-16T07:09:33.79527Z","last_seen":"2026-06-16T07:09:33.79527Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"puump.sbs","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-21T07:09:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"puump.sbs","ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-08","domain_rank":0,"first_seen":"2026-06-16T07:09:28.360903Z","last_seen":"2026-06-16T07:09:28.360903Z","alert_count":183,"request_count":61,"received_data":17600935,"sent_data":34512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.dexscreener.com","ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":1560830,"first_seen":"2023-07-13T11:22:42Z","last_seen":"2026-06-09T00:32:53.379268Z","alert_count":0,"request_count":2,"received_data":30562,"sent_data":1499,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.dexscreener.com","ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-06-09T00:32:53.29719Z","alert_count":0,"request_count":1,"received_data":12436,"sent_data":512,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"puump.sbs/index_3.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ea568cefc9e34bc227a9df0d9654a98","sha1":"4813dd734ef3fb3b31dd4adf52d89d2227b36b5b","sha256":"1df77d9ca2cfca406be6743a64d5d9ca7db3b4e7c28bcd87bb5eb23d6e6ac758","sha512":"1e446208c475ead7e2221e119b1ab19489d95c72dbdf12bd8a0d547cdf3bf08fa63d3e626103a79c24b3088e6fca14c4551ab9b23bd129faff41b29f097fe632","ssdeep":"","tlshash":"591100793b2a5934c6c5808b317ee7a93d3260317a06a144c3accc285d18e8314efcbe","size":902,"data":"","first_seen":"2026-06-16T07:09:33.87907Z","last_seen":"2026-06-16T07:09:33.87907Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8844d577a1887edddc525a9f9918d014","sha1":"ea75737f5aa0897ab3436bd691a6115dd1580f38","sha256":"6b4c22be9f7c1f9fb2ab02baf7701909f1aa534adbc12b48585a4ee9a7b7489b","sha512":"e92beb22d1d0fd57e52839d3ceac2807900f2439408b37a6ba8b6e320dbec7b503a468d085bbe3f399736c733fad759feca6be9880ef65365a619532367f7964","ssdeep":"384:PQ1wHlv/wN2+lGJF34ofssPl8GYHZayq3h+PQDr1Yyfmt+yvYau:P0wV/wN2+EXtfss2DayA+YDmamtHg","tlshash":"b9a2c7ee78e1702c771634b020776dc7769fbc41209f405cd250a9efbc327b59aa69a8","size":22561,"data":"","first_seen":"2026-06-16T06:17:07.151632Z","last_seen":"2026-06-16T07:09:33.86067Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/index_2.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59aa77ea364a5890387a7381553fd246","sha1":"79c6b68c8f8da71758ec3fca26db4e39980606eb","sha256":"4b32072d243f2dfa6e706532125d74c7b95b932db72a579c9256c0dceee8d79d","sha512":"96e3a3570e9a47dbb03b8d345bce5683d764c363af774676eef011e9c20cb8d0115d7699f386998b1d6e5d3b85ab8e1e011d354fc5498a101fe7b9b5d8933a4f","ssdeep":"","tlshash":"5411c0793b2a5534d6c9418b317ee7a93d3260717a06a144c3accc285d18e9714efdbe","size":902,"data":"","first_seen":"2026-06-16T07:09:33.884401Z","last_seen":"2026-06-16T07:09:33.884401Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1de715658b8041a50a7447e2327b2d97","sha1":"c82297908dafe7e5e582c5842f5e8efc18a55ac5","sha256":"21165928418425243b1f74c989655d1ac25590ffb3491a43f4eadd939a3bb0c4","sha512":"017af1d25135fea7cd02b39fe745958eb7485ba7a610550b283255d6bd11448bd320c84784e73657ac6d93798646df09da1afd56cfb589112b6616cad4129b3c","ssdeep":"","tlshash":"31d023991d75cc30739d0146907dd3d57570316067256304c2cccc2f6e20ed304f1e58","size":217,"data":"","first_seen":"2026-06-16T07:09:33.890133Z","last_seen":"2026-06-16T07:09:33.890133Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2eaeb0ab13ee0d25d847b8d8bfc4a29","sha1":"1a4e44ea060197290f18404ee083adc8c3481ec6","sha256":"35f394761f51f2cf68670c526ffcb0546d1dd1f8e13ac19b661dd8c464bf0fc2","sha512":"842f02e653ff72dbc9dce788ef9cacc99cdb3dc94c34233c9195d10b23e7813105c85f1ade2f900eb19a8e5d4686ef15642760532cd9cdf3be4b15604808008e","ssdeep":"","tlshash":"47d023d91d758c30729d0156a0bdd3d57570316067216304c2cccc2f6e20fd304b1958","size":217,"data":"","first_seen":"2026-06-16T07:09:33.89746Z","last_seen":"2026-06-16T07:09:33.89746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"008676df90d08e0f517e67c7b4db8447","sha1":"5fc044dd85eed3c92a2e8be4d4a618de597f6ab4","sha256":"bd1d965eed21016a0ee63eaa0cd689ae597a560386c0e6db64d5fe7c3dc93b23","sha512":"9ae905f641fdbe475e66c73fabf1fdef7aab5e1f729dddbfda33c64fe8df0285004c5559768a17e396ec9a83ebf2ed3ca4db312b379d9b43d72d6c3434bac35f","ssdeep":"384:PpLUwZPNmQbeIebNX8A1eezvjKvTGNZJzkWy4PXUV7KRM/JiCC8hKE2RjgRC2hGy:PDRNmQ6RX8AnzvjoaPzw5EAzl","tlshash":"24a2b9eabcd1702c77656078107b3dc735abbd49202f4428d150adfa7c3277a4aea9d8","size":23198,"data":"","first_seen":"2026-06-16T06:52:58.054059Z","last_seen":"2026-06-16T07:09:33.803518Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/secureproxy?c=%2Fipfs%2F7qHmf1Z65kl3EQdYKUj80Qd8393730babb632847bbdca1878df123%3Ft%3D1781593730417","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c23f7ecfdea16e9693c99821b8de3d1","sha1":"def01bc9478738542e3ebeef80753d316e2b7aab","sha256":"a23d2a76230ea971173b726ade3e6db91db9ce066fcf11040e516a758140f3d4","sha512":"7a0b5d6a1bb183f20789e53f526e58ed182a75d02414aa0de7faf528828bce442a14d0f48ac78cd0d20a857bca8b3882f1e82c91678c5cb6098b838ee016c125","ssdeep":"6144:4hQxq7Ih/Uy7O3sTHDLEbYRI6t4ModTzvqrIf3285JdPPiiVMIu3uh8zP:DuIBH7WsT/+yt58BaR","tlshash":"e2c4c1c0a3c95db345c0b2b624b3696fcfba0f5a054be99073c21ea353497a3d1ed568","size":587280,"data":"","first_seen":"2026-06-16T07:09:33.80252Z","last_seen":"2026-06-16T07:09:33.80252Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3f8da13fc089d32e348923f2bcf0b93","sha1":"9b8b9b5ce66c59b41db35dfa9d9be63eadee5cb8","sha256":"4b93359cce53c1ac3588533cd92b0f242b0d7138ec2d8fbaf1867b7e5e721840","sha512":"4cffdb4be1b67e1f9c0d7ffad17c13215e5abb05e073b1be6287ab99c158a14b05700bb420e66e07a9f50f14782177470df2d25cf7782834141959da8ccef7ed","ssdeep":"","tlshash":"5ed023ad1d758c3072d8024750b9d3e9757021a067316344c1ddcc2f6e30ed384b1658","size":217,"data":"","first_seen":"2026-06-16T07:09:33.898421Z","last_seen":"2026-06-16T07:09:33.898421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/index_1.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"685ab7dac584ee0065502057c257673a","sha1":"1612d459d531d54b2ef0698ee1959fa91ef67dc2","sha256":"be02ca7427cf207ec0762c7e023fb61fa13abad77e2997568ab2cb987f65d75d","sha512":"dc1e9a7ceaef24ed77edde3804575f749d8b9ac607bd8d29f329e16e9e51dbd1da3e7abd930904a1e56edb77849be97127245777ebe344bb677ef8a3b7f5a6f6","ssdeep":"","tlshash":"ee11c0793b2a5534d6c5418b317ee7a93d3261717a02a144c3accc285d18e8714efdbe","size":902,"data":"","first_seen":"2026-06-16T07:09:33.900038Z","last_seen":"2026-06-16T07:09:33.900038Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/index_4.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d53902c29d7cdf0a07fa8924b885ab55","sha1":"282489b3be66599132dafb8361e39ddcdcd0d5d5","sha256":"3e99e7cd07b4642eb1623fe178a0918a6545e09101aec603e8bd4defbf9d88d5","sha512":"f7e159ab509295d7f577c4970c5c46e3799fd8ff56b94d24df11aa632392a0c5b5f8cfaae7cfe5080916ef1a9a819b899eebafe7adec31efa406fe817f09d43b","ssdeep":"","tlshash":"6011c0b93b2a5534d6c6418b317ee7a93d3260717a02a144c3accc285d58e8714efdbe","size":902,"data":"","first_seen":"2026-06-16T07:09:33.901056Z","last_seen":"2026-06-16T07:09:33.901056Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8597be0e148975101a1886403b17acba","sha1":"6aa5302b5943c3f0d458bc3cf1143e7a5d5a27d9","sha256":"61e76c44a7fea10b82473f4f943637addbbb2a4c977532bd1ea22fc2b2e99491","sha512":"1e5fdf5dbe362e28cb3ca9c32c16af29d2be72a89f449dcecabf2f66e417b29f1c4cacae27cc7d0d79d42a8f1050ed75368da03f90c4adf5d2fc69112f1f6f7e","ssdeep":"","tlshash":"95d023991d758c31729c01469079d3d97570726077216304c2cccc3f6f20ed304b1d58","size":217,"data":"","first_seen":"2026-06-16T07:09:33.902066Z","last_seen":"2026-06-16T07:09:33.902066Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"008676df90d08e0f517e67c7b4db8447","sha1":"5fc044dd85eed3c92a2e8be4d4a618de597f6ab4","sha256":"bd1d965eed21016a0ee63eaa0cd689ae597a560386c0e6db64d5fe7c3dc93b23","sha512":"9ae905f641fdbe475e66c73fabf1fdef7aab5e1f729dddbfda33c64fe8df0285004c5559768a17e396ec9a83ebf2ed3ca4db312b379d9b43d72d6c3434bac35f","ssdeep":"384:PpLUwZPNmQbeIebNX8A1eezvjKvTGNZJzkWy4PXUV7KRM/JiCC8hKE2RjgRC2hGy:PDRNmQ6RX8AnzvjoaPzw5EAzl","tlshash":"24a2b9eabcd1702c77656078107b3dc735abbd49202f4428d150adfa7c3277a4aea9d8","size":23198,"data":"","first_seen":"2026-06-16T06:52:58.054059Z","last_seen":"2026-06-16T07:09:33.803518Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e224857bd0fa7bbadc01beb034805209","sha1":"846070fa66e9f8146b17fa8e2dd767e8ea443ba1","sha256":"904ab8d97b52d9d71e27b8d7f5d0f28f96fb985f9035020df17e280dd2189161","sha512":"c57e084838f54cb96d71b4fda926adb2ed99c5d8c98feaf9dc6397cbd47b5fbebd833fefa746ad7417bd1fc88537c7312427b092c5fba54e913d6bc951893bc0","ssdeep":"","tlshash":"34d023991d75cc3072dc01469079d7d57570316077756704c2cccc2f6e20ed304f1958","size":217,"data":"","first_seen":"2026-06-16T07:09:33.903069Z","last_seen":"2026-06-16T07:09:33.903069Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb0b9c3abb3363e32c34271180bbb7e8","sha1":"c62633af6faabe37c0f8b8f4af9296251f076ea3","sha256":"8a8267e7b93c5c9bcb5f621ad3c59ccbcc8977e97f9007750ab6c3138774f7ea","sha512":"936e64f618444dcf6035f47130ac267914e76e52b01ac0b08934386f04d9fe8b5a3d31fe469839dbe7308a8a0e1e0032448ab4bcaeb2bb3b0fbbb3508ca388e5","ssdeep":"384:SuwYlXwNTjJXO7Z1s4JAHP//5yhS37T02BhUSO1rJ6UTyIXDPQ3bB/ep3jZ/:SylXwNvlqQPHJ7dA1V6H2DPQ3bB/E","tlshash":"bcb2f9afbce5702c7325a9b414777cc7766f6c04206a042cc150d9bebcb372989e6da8","size":24545,"data":"","first_seen":"2026-06-16T07:09:33.863918Z","last_seen":"2026-06-16T07:17:19.893724Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/app.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cd269ab002d45810e2ae40729d1ee2d","sha1":"e76ff0caccce76c4b92b934f2ab5b11a15e81891","sha256":"7fa27ffe0c80b02b1a107ec16af9e5b93e3003d6e793230990baac6d4697c765","sha512":"33f983c2df377d71038bd0b0bf728541422e4331d6e3cc96d71f87e6d39b864948f80ef46533cf6819a1f553ae32dc395cb0359ff24143006e194431d42577e1","ssdeep":"96:jKK6vlsuidzNAh3nNM4OVfmm8ljfxs+sGQzRsiB3CfTQsgznrLPdM4ABDg0GA:jKHiG3NMnVfmTlVQR5B3EQ7brLPyls3A","tlshash":"90f1743d25ba34327122e46ecb8722197659344b328de206344c77ea1fed721c5b6af6","size":7762,"data":"","first_seen":"2026-06-07T04:18:21.522866Z","last_seen":"2026-08-04T01:24:53.103384Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[token] address:J2eaKn35rp82T6RFEsNK9CLRHEKV9BLXjedFM3q6pump","filename":"https://puump.sbs/app.js","line_number":0,"column_number":0},{"level":"log","text":"[token] ✓ loaded:map[actor:server1.conn0.watcher14.process7//obj207 class:Object extensible:true frozen:false isError:false ownPropertyLength:4 preview:map[kind:Object ownProperties:map[logo:map[configurable:true enumerable:true value:https://cdn.dexscreener.com/cms/images/164d467aa047f358ec10d2c270b8b2826fab117059528c694db347611e8764e2?width=800\u0026height=800\u0026quality=95\u0026format=auto writable:true] marketCap:map[configurable:true enumerable:true value:80107 writable:true] name:map[configurable:true enumerable:true value:Feed The People writable:true] symbol:map[configurable:true enumerable:true value:FTP writable:true]] ownPropertiesLength:4] sealed:false type:object]","filename":"https://puump.sbs/app.js","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"puump.sbs/index_4.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.433Z","timestamp":1781593731433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wcx9JLXJBPNYaTpchDEdfrwV9t%2BcJX61E%2FRISFAaOOytkKH72Phu6s8PXNcXg1Xs%2F5ByRvGJMtLfmc2aDI8WQcN1EbdIdZM8%2F%2BwDFPCcIaheN%2B4ol3TL6r%2FAWMs%3D\"}]}\r\ncf-ray: a0c7fc557a8956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1061,"size_decoded":1469,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (1061), with no line terminators","md5":"f918342b0f2805e6bae86c3e1ed45dbe","sha1":"2398b81488f4c88586fe3096a79bd8343a41e9b5","sha256":"50fdcc0754ac497aee841851364a48fd9a63d5aa91f4ff28a3aee749fe721f19","sha512":"70ba594689b1ce739f068e2350635d507cfcf86010ba9a33a6841d259b603fc42454f5e4b80c34cf5f4ab26340704821149a7399be3c3b1690ec1649ced5d809","ssdeep":"","tlshash":"131112753e1545349ac54187327ef7e83d3260347a129044d2accc289d58e9304afcae","first_seen":"2026-06-16T07:09:33.796545Z","last_seen":"2026-06-16T07:09:33.796545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/stream-video.mp4","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.786Z","timestamp":1781593731786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=2686976-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-2c6b4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 30145\r\ncontent-range: bytes 2686976-2911051/2911052\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O0495Mh92cTakHgNuj1pngc%2FlDWiwsicGwc2xQNDb7XHh3FqpGuMjFLS4B1UrAjIcT5MRwaQyMvbGKI6khcrkXxoygUPjHYsicndIF80cLp2VpesohUojC2gQmk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 224076\r\ncf-ray: a0c7fc57aaa956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224076,"size_decoded":225030,"mime_type":"video/mp4","magic":"data","md5":"50be76425bd97896c6ca5ce8b47e0344","sha1":"a1eef451690ac6aa0a5931d9baa34adb398f1bb3","sha256":"fd6873b4eff5bc8529370dc61c4f50d5191fc0539427a8bbaa74fb234724f459","sha512":"7ad7130ef487ae590125bfd488cf30814f34f73b6538cda43272c9bc9befcd95c11ef235415f71fc7727466e1eb6f04ce80172471ae9ed3b40ce6ebff3cea5c9","ssdeep":"3072:iHVTKivHN7GBDZpBX6SoWOpTthBM6GlyXFKDVF6vK3OgZBrncJwnRCf5R8Fd1xTr:WTKi17wDBE5+Qrt61QFF8l","tlshash":"eb248f9dbb04803bd6a15372e8f107243372d4a817d7034f4aaca73d4e993a86eb6dd5","first_seen":"2026-04-12T23:10:39.54337Z","last_seen":"2026-08-04T01:24:53.100217Z","times_seen":26,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/QmNa1AZq4wdhJpVEt5D5kDriNPAUFFP5PjhehT36BquQqi.jpg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.403Z","timestamp":1781593730403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /QmNa1AZq4wdhJpVEt5D5kDriNPAUFFP5PjhehT36BquQqi.jpg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-6b3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 30144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnRnso8Ngz3FEhr8KP8h7B%2Fz0EziQxQ1oEmq7wJn%2BgzXQx0j6dR1XOGx1%2B2teO8xU1CcLOThTtE3hGb9OMb9R8uoiXpqnOAr%2FunVBenfRCbKER4UUVaeT3uf7UA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1715\r\ncf-ray: a0c7fc4f0a3556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1715,"size_decoded":2644,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x63, components 3","md5":"1d23c0100a797fb2c494136293958d79","sha1":"c22b2396d8081a29fdc70f867d278e523e4f7919","sha256":"25541c2e919c1130cde9b1844eb21786a942dfdbf592c70155c2cfed4f2422f6","sha512":"6ea445d656a550e104e0457a2dacb027fb87e47ef99b2fba1afd3373452549aeea2e4733b71f28b89ddbb9ce7cea70c13912cdd01f8cd5065497bab521fcf787","ssdeep":"","tlshash":"3031f82aaf1393e2f8ccc3b06ba3275bf69458bbc3b247015e40226608e72519740759","first_seen":"2026-04-12T23:11:38.130434Z","last_seen":"2026-08-04T01:24:53.108301Z","times_seen":24,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/Inter-Regular.woff2","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.585Z","timestamp":1781593730585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /Inter-Regular.woff2 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/b1ceb54df6a409e5.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-1b2a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eZU%2F5o0J7fxvSbT4pC1tgDDO%2FXfEyNjtIfpXRCpMeCJv9C1JvtQUxIJvLiu%2Fj5FOWgFk4y2thGXZXJUhY%2FKWoAN%2FuQgb40mhEX8VRUbfz%2Fyu22uiqVsxRas1g0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 111268\r\ncf-ray: a0c7fc502a5356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":111268,"size_decoded":112211,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 111268, version 4.66","md5":"3875f83574973c732136a45f628e64a6","sha1":"b7a0b6fbebc40eb29b76cf135c4b7be50b981b4b","sha256":"e06f6b1bc553aaea4e4668023ed0ab0a147129c3107f511bc7d03d361b0ae085","sha512":"c4d06c4d73f83f3bc150ec5c3fc792af04161ec98c298a526b717b09e0f10597c688ea1827c1b54324b809cccd7c8a51e637eb822f192744f16556d0fd5b2efb","ssdeep":"3072:oSVIcbST1rITm6KORAGB/6lp7l8MBrVAPg:oSVIcEwm6xlB/6lp7lzBJ/","tlshash":"2ab312cd46ab0e22c7db93b491ea634d5ab188f8e3b630358993ff31155093723e615d","first_seen":"2024-11-19T20:50:46.185622Z","last_seen":"2026-08-09T05:47:25.884733Z","times_seen":75930,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/stream-video.mp4","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.602Z","timestamp":1781593732602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=1343488-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-2c6b4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 30146\r\ncontent-range: bytes 1343488-2911051/2911052\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1rgxTMUJJWyLfiSnPRvKtmpSmlS7Sjig8RDpnE2smE9qSnX%2F3lGfZO8i29Db5cNWAMEjqEMaI%2Fct%2Bb9YoF9fb2oMiBSud26Tikw39%2FJnbxEPxk0QgLWke8eGg0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1567564\r\ncf-ray: a0c7fc5ccadb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1567564,"size_decoded":1568525,"mime_type":"video/mp4","magic":"data","md5":"f7edf0217dec148b92544eaff113d37e","sha1":"2c15692c60e83064187111349822b1536f999153","sha256":"8dfbed1546dffd691bd3b57dede23299c85040ad78d5cd1e505109133b5c3ef8","sha512":"19b3d27cc2a33f7d5dc47eecbcc0ad7317f300b47a7e4df5b6b00641d4d45636a27962dbe80a07ea25e2e9acb335ee0a58a872e91ff0c7889ac9a713edb19c61","ssdeep":"24576:35/+DL5OQNZSsDZH8T2F4DNeZ8ZkQCOQmW4jX:35WDl9jj4D0Z+kLY","tlshash":"0a25014a21e83734ea59233b62ec6d2397dbf115cbfa4b17814c546a86874c3fc9ad07","first_seen":"2026-06-16T07:09:33.799492Z","last_seen":"2026-06-22T11:24:56.800924Z","times_seen":3,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/index_2.html","date":"2026-06-16T07:08:52.784Z","timestamp":1781593732784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\ncf-ray: a0c7fc5deaeb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/5e76b3fbfdc7e54e.css","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.337Z","timestamp":1781593730337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /5e76b3fbfdc7e54e.css HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-cb0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30144\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8j8RirNesBNQwNUounuIvO7JhhzpXgNHGh510gt5H1FDZxcoY%2FpDClswVD853t7D46SOjFiocc7fX2SM0gdvFQAx2DDuuuHLj1%2BWzzkVS1gJvN%2FpbHykxPP%2Bt%2Fo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4e9a2956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3248,"size_decoded":1853,"mime_type":"text/css","magic":"ASCII text, with very long lines (3247)","md5":"ff62e2f01eb791a568c3033cb87d3961","sha1":"af58e2e1d26931dc68d1016942c26beeda3835b0","sha256":"0d789746e233b154f39f0ab97ad2fa51de10c03a624b6b70245faa7c3b08c23d","sha512":"6322263c83123d8003f97fc94c8e79a5c8a7d42de8b2794c30d1a762dd5f8a0b8c97c27595ff44e8ae6c156373cddfe467b7a264329e1ca54ba0b6170664ffe1","ssdeep":"","tlshash":"f7617d24f17269a3531b847e80c6fa86b291520d9f3fabf37f90c424708c65707e967a","first_seen":"2025-12-20T19:39:47.581885Z","last_seen":"2026-08-04T01:24:53.139541Z","times_seen":146,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/dialog-clickwrap-cover.webp","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.410Z","timestamp":1781593730410,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /dialog-clickwrap-cover.webp HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-c0f8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=db1WsOGCGlcB79WIy2ajyo5JHv5SJ3KvKK5Zt2fV%2FT34%2BCfvtOV69bnAJ6HouNoXb9RWhYqKin0ZwNf1nN7VQg%2BqmCrU%2F%2FjhtP7kQMwhQAZJnLLpQGUJ8OgGgLQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4f1a3856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49400,"size_decoded":50364,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1278x718, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"34a5a0b4ae583e61c7a129c4c7266ed0","sha1":"efd38ddabe4742c1ab3afe38117b53883d68f488","sha256":"614032d71f5b75053629744dae4f3a2b4cebb8640c703700d1a84a0171c93f1c","sha512":"ccbc426b8420c3e0979980d1c900bb0a65e6a90e77b0f63443fddbbc21f55f5f684626860f1eea86e46c12c0e1d14ad5a66d04a6446bae54744e02dc9e81b138","ssdeep":"768:FT+5/vKVdYTzU+QBJ2lbqpt10XDlJrkxSI16Hb27cuKAxKEHpml:h+5nKVmUBJoqpczl5USAQbig5EJml","tlshash":"6a2302a078a33433c80f50419adf5fab9df965803bde13b3087fa9c080cb55b16a914e","first_seen":"2026-04-12T23:10:39.455476Z","last_seen":"2026-08-04T01:24:53.128627Z","times_seen":29,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/secureproxy?c=%2Fipfs%2F7qHmf1Z65kl3EQdYKUj80Qd8393730babb632847bbdca1878df123%3Ft%3D1781593730417","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.438Z","timestamp":1781593730438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /secureproxy?c=%2Fipfs%2F7qHmf1Z65kl3EQdYKUj80Qd8393730babb632847bbdca1878df123%3Ft%3D1781593730417 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 5966451\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"8f610-3vAbyUeHOFQuPr7vgHU9MW4reqs\"\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=XRv0geA7uAtqVTBpdRefGQ.js\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/16/2026 07:08:51\r\ncdn-edgestorageid: 1332\r\ncdn-requestid: 4ad61118a3c1399e6fb72c9b080e4931\r\ncdn-cache: BYPASS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUvDKrQf4wPScAJyNyTRKrWTYiDpBrogezeQjYLbEgODgK8MOAS%2B3zbFWpPehLqj%2BJC6t0OVwbRGfBRBH5JawCh7VJNTByUWiRbQZLGokWvAPqAo%2BuBZm%2B0cSzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0c7fc4f3a4756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587280,"size_decoded":124120,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (49418)","md5":"4c23f7ecfdea16e9693c99821b8de3d1","sha1":"def01bc9478738542e3ebeef80753d316e2b7aab","sha256":"a23d2a76230ea971173b726ade3e6db91db9ce066fcf11040e516a758140f3d4","sha512":"7a0b5d6a1bb183f20789e53f526e58ed182a75d02414aa0de7faf528828bce442a14d0f48ac78cd0d20a857bca8b3882f1e82c91678c5cb6098b838ee016c125","ssdeep":"6144:4hQxq7Ih/Uy7O3sTHDLEbYRI6t4ModTzvqrIf3285JdPPiiVMIu3uh8zP:DuIBH7WsT/+yt58BaR","tlshash":"e2c4c1c0a3c95db345c0b2b624b3696fcfba0f5a054be99073c21ea353497a3d1ed568","first_seen":"2026-06-16T07:09:33.80252Z","last_seen":"2026-06-16T07:09:33.80252Z","times_seen":1,"resource_available":true,"data":null}},"time_used":797,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":720,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.264Z","timestamp":1781593732264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\ncf-ray: a0c7fc5aaacf56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.594Z","timestamp":1781593732594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js? HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc5cbada56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23198,"size_decoded":10868,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (23198), with no line terminators","md5":"008676df90d08e0f517e67c7b4db8447","sha1":"5fc044dd85eed3c92a2e8be4d4a618de597f6ab4","sha256":"bd1d965eed21016a0ee63eaa0cd689ae597a560386c0e6db64d5fe7c3dc93b23","sha512":"9ae905f641fdbe475e66c73fabf1fdef7aab5e1f729dddbfda33c64fe8df0285004c5559768a17e396ec9a83ebf2ed3ca4db312b379d9b43d72d6c3434bac35f","ssdeep":"384:PpLUwZPNmQbeIebNX8A1eezvjKvTGNZJzkWy4PXUV7KRM/JiCC8hKE2RjgRC2hGy:PDRNmQ6RX8AnzvjoaPzw5EAzl","tlshash":"24a2b9eabcd1702c77656078107b3dc735abbd49202f4428d150adfa7c3277a4aea9d8","first_seen":"2026-06-16T06:52:58.054059Z","last_seen":"2026-06-16T07:09:33.803518Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/index_1.html","date":"2026-06-16T07:08:52.776Z","timestamp":1781593732776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\ncf-ray: a0c7fc5ddae956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/index_3.html","date":"2026-06-16T07:08:52.782Z","timestamp":1781593732782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\ncf-ray: a0c7fc5deaea56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/secureproxy?c=%2Fjmpd%2F","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:53.538Z","timestamp":1781593733538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"POST /secureproxy?c=%2Fjmpd%2F HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://puump.sbs/\r\ncontent-type: application/json\r\nContent-Length: 1408\r\nOrigin: https://puump.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=u9BTsuz4Q9p7O_CMfdznDhhofUiEeWZcVzZ2tLATW.g-1781593733-1.2.1.1-t5ZHcqkAya1LbV4oK.yyvKObWiowDZ_gz.togIQVi8h.AWr3t_CabnFl_NLsrZjZOSq0TK96E1tH7hYiUI.E4kmddazVrtiUyU_92qQbZVXo_0HfIhl7_YFnKrMPnpUzrXvwZlr_DHCWvEuJMTTt6kt9Q1Lqz4aqk3jx7vn_BNf8QHW0oQTcV4RnbkdO69xK.k6VIlFiWYtXnJx5oFvO3u4UNb1VyDtFgzhzrB0pcwgBva8z7EBA5DFvndqdS_kAwtbIzr0t7gms_eqHJXJeJfLTbytLqnCJJYDfWfkJpJBnKMdYClgx_3pwuLjAKzaXWvixsUJLZo1W.hCsGHgnIA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:54 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 5966451\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1781593793739\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 06/16/2026 07:08:54\r\ncdn-edgestorageid: 1329\r\ncdn-requestid: 4b6330d183ea2d3705daca3a6b0ceaad\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPMdRVGctL9PDPFnxavCTcDPBhNVsYDh8whmkUApyAY4CvPCk52J2kJBjUoMdnw6O3Ku%2Bll9Yk%2B6nECB4ZwdalbS35ElFa26Rn0EZe5xHE1WyHVasmhZ2qWgeyQ%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0c7fc62ab2556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":3768,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":12239,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/b731d5a1fd2592a1.css","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.342Z","timestamp":1781593730342,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /b731d5a1fd2592a1.css HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-c3d4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30144\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwkW7Z6g%2B4qwMw7DyGIXaQ2xJDAZ6i8aTQbxkfORXWD6V1M8r9rehZtcvev11FknCQtOa3tnm5xUojaADESg6tpertlLyzsqLmiPlt7h0cUINFpZL70G00%2BV65A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4eaa2c56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50132,"size_decoded":12046,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (47995)","md5":"337ce5ab722c2ccec8c586343a0dffde","sha1":"87ea45d0d03ed6ba76ab67c422740684864f2fe9","sha256":"2b0f56f296550c868629d8e893f80f2285622be5427adf900e04102a45624712","sha512":"1787db460e83854d9437e40b44c1ae8837decf634eabf8e7706a49f701e39313cc26ace2e4748ebf67dab66e50728d6d158f78e539601b85d749b9bf2ac190ec","ssdeep":"384:peyoBoIUcYPWuOV8Q+cmOzFkR5E2iCsn+D7MJf+EhKRhOrFzR04NZO6QePLlDZbR:gKc5uOR6MJzKjOpRT6qm7C","tlshash":"943345e8ee8ca13aa813615d178c958d922dfe00afd35a98e9d17138cdc7be31578744","first_seen":"2025-12-20T19:39:47.5671Z","last_seen":"2026-08-04T01:24:53.137469Z","times_seen":124,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/QmeSzchzEPqCU1jwTnsipwcBAeH7S4bmVvFGfF65iA1BY1.png","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.401Z","timestamp":1781593730401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /QmeSzchzEPqCU1jwTnsipwcBAeH7S4bmVvFGfF65iA1BY1.png HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-96a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 30144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QaRMeSgIbyT%2BimdjU5tArh0q0n9r66j6BsKLVlmnWrpfqcKbq4LavdTQ1tFQuYoiBLdfeQX%2BR0Qj0xohV%2F6c3SRSYEbyc2b6U1VXJmVCoY4YDK4AmbNDODqejY0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2410\r\ncf-ray: a0c7fc4f0a3456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2410,"size_decoded":3336,"mime_type":"image/png","magic":"PNG image data, 64 x 51, 8-bit colormap, non-interlaced","md5":"01c0a2dbdcd2087be395e8a4eab047ed","sha1":"fa18c291f3d8fc828ac36825b3f7de19d82516e2","sha256":"41a4a5021384c0b0beb0c21b2842a98e75452ad80066d9825d7222687f653aea","sha512":"f5ea4f58624cb2a14d125d834771778d8b58caed981050c8348cea897244f20429232cd3d74701da4c73917a72c626d7409ff6e121dec86bb7cd8816bf4b2d85","ssdeep":"","tlshash":"fd411d165e533db98d2945d903a3a32dd339f1a8d25c47c0dd97d75381358cc8384ea9","first_seen":"2025-08-29T22:10:37.991619Z","last_seen":"2026-08-04T01:24:53.131045Z","times_seen":135,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/index_4.html","date":"2026-06-16T07:08:52.958Z","timestamp":1781593732958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js? HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=yh3khR1oeldPb2ifuc_9YXJ_K3pseriupRcMQguJKDo-1781593732-1.2.1.1-XacEGBUJzyMMnJKo81sUhpaLs7HwKvaBlEJJ3hhdeT.p2LBEpXKbXJ4PV9zLwKSav9kdkV6tK5cL59wFuLEpvU5G2RnIvMZ4CE221lJnESoH7FD7QzZ_cZ1R0SCPc3lj8NluaWcKTlgwvNAfOOwtRMSl5R.PabFvFPSfk0abU6h3IL9JNpVMA8Mw.QQQqYdkh8S76F46TnL8uWVM5FM9iKs9QUUes27KulP4s7IUgxRUBN2ZT52fuGeUXlyHzsn3ahktV7JzujQJElLhVhqY0jOlrTwHfrN8vwcs6jYuSOMiDdMevzqW7or5pK_c29U8tfPbeaH870FsPQR7Lc8iUA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc5f0afe56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24223,"size_decoded":11243,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (24223), with no line terminators","md5":"a4de33bf4e7b8fd80f685afb03c5d862","sha1":"17d8608228da46a9b7f77725f2c00cbc184c57ed","sha256":"9933cb1f27e752734d609c0ec575dda7792e5598e06f913a835958bf93645618","sha512":"02b01f8f5213c44766cd68d6f1d117241a30b081f5f0526483170cf5baf47923e12affe03c0ad677aa764da2af8545a501f7bb927648d6d72dc5732fdab4f3bf","ssdeep":"384:fsejFl/Noq+Zov1sTuEdVzWH4E4cD0L4lSOLxNWAyTRZkYd6dEWrRDAY/4I8o:fsIFl/N/+aO7mD0L4lSoTynfQdpF78o","tlshash":"b6b2d7db39c9702c7716587c20777cc7796bbc40206b486cd110eafab8767a616ea8d8","first_seen":"2026-06-16T06:56:21.293642Z","last_seen":"2026-06-16T07:09:33.808409Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/164d467aa047f358ec10d2c270b8b2826fab117059528c694db347611e8764e2?width=800\u0026height=800\u0026quality=95\u0026format=auto","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:53.531Z","timestamp":1781593733531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 06:42:34 GMT","end":"Sat, 22 Aug 2026 07:42:20 GMT"},"fingerprint":{"sha1":"46:14:88:C6:44:E5:BC:78:59:8C:7D:E3:6F:49:A1:56:EF:03:83:DE","sha256":"55:31:24:42:9C:20:1A:E4:73:A4:E9:DD:52:42:C5:5D:1B:FF:3E:42:FF:2C:13:98:96:59:79:9E:1E:7B:79:31"}}},"request":{"raw":"GET /cms/images/164d467aa047f358ec10d2c270b8b2826fab117059528c694db347611e8764e2?width=800\u0026height=800\u0026quality=95\u0026format=auto HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nCookie: __cf_bm=8rLT7IkRJjIX1g6bYuLMghu76s4tmYkA7_RKVDyTxDY-1781593732.9667366-1.0.1.1-8ECICaEIDz8NL82JjyhUGO15VSVAJ5rjh_3wJvWHOqBZ_OWnjlMR36FTLIGYULHFOTjMS42mLbQbrpEAfmIHY.TSZ5lr43E0rJi19ZJThFIIvqGpjw5SIlDnM9.TJpz.ClD_qMOG9DQW_xs1cf4N_Q\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 16 Jun 2026 07:08:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14334\r\ncf-ray: a0c7fc62984c5a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1783815\r\ncache-control: public, max-age=31536000\r\netag: \"cfNupNXOTYEz5g3ZhiMrsBCAvRoXS35aQuSdpn5VnlDQ:a18e11ab9963d093cd1f06a189aa9329\"\r\nlast-modified: Fri, 12 Sep 2025 18:46:05 GMT\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nx-content-type-options: nosniff\r\ncf-resized: internal=ok/h q=0 n=36+369 c=0+0 v=2026.5.8 l=14334 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=5,i=?0\r\nwarning: cf-images 299 \"original is 8670B smaller\"\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14334,"size_decoded":15109,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"a18e11ab9963d093cd1f06a189aa9329","sha1":"e5d2ab05410687a4b8ae2a26edb1aad302638d83","sha256":"1c0a70bb397dbc791fd8e2c5784ebe26e706f82050dd7a76c32b7860b6b80c3a","sha512":"dc9452298fd028444e08d70edc721664b6460ef971674f1efa2066e949c190b3820dacf9d0367b481b1721f6739d1dca8f698c0a091f9c6104d63dcc94ceb3c8","ssdeep":"384:Asg5e5tDJqLfal1zU/kNdFxF1dsn3nJYnh:piW1zzU/Qdnh","tlshash":"0d52ae9579aa69858fafdef00047426b82915115ede1fe2e0c03ae78b6c9f4e571330b","first_seen":"2026-06-07T04:18:21.531196Z","last_seen":"2026-08-04T01:24:53.105273Z","times_seen":18,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/mobile-upsell.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.355Z","timestamp":1781593730355,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /mobile-upsell.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKoknsGKV8sP6TYxQKzivCS2k23H%2Bb8j1A%2BrffYRNQadMLdUIjl81eNJ8rXRozH0MN7WH5bJ61vxekDZibSFyiYLoo6X1a5DrO2fMLYl98w6qYYPlrNUSmWZU%2Fc%3D\"}]}\r\nage: 30144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-ec48\"\r\ncf-ray: a0c7fc4eba2f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60488,"size_decoded":23381,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20e346583b6756a13559f1583009b9e2","sha1":"9b7703a462a9c20fb947cc1fd724a75d61ba3238","sha256":"d2161f883307c949aa8149a3de14fe1571e050c577c8af6b38a4a3b56c3cba83","sha512":"ede21f2d59a546e212d8dedd1afdde210ddcbb5706a55325bbb4ca132f96b848fefedaa394b97e4b8843792cc031fc53614e501378a620f4acea8146bab9ca3c","ssdeep":"768:hFj6oZjZWzlcH6iVbSCqjew8xrGfKsqaI4:1ZjZS2RMSRxriH","tlshash":"7c43ab30778c1509d270abdd831ca496e833a0839a1b0594cb433dea5f6a795fd7b1ee","first_seen":"2025-08-29T22:10:37.955387Z","last_seen":"2026-08-04T01:30:28.111887Z","times_seen":227,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/QmbViKxCrG8e9jdWPcQNqLBYDY18xvvgYrx61ZP8HuFYPd.gif","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.407Z","timestamp":1781593730407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /QmbViKxCrG8e9jdWPcQNqLBYDY18xvvgYrx61ZP8HuFYPd.gif HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/gif\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-7a62\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 30144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkRuqI%2BdnGY3V2HfWXDbIXBpEighvzv1JbynvlL%2FCy7OVvcLnxwLJya9AeTQiX6CuLEhTgmwQl%2FWqVeNWBfO7GxqKITVpoUtqx83N1zZ%2Be74V9%2Fq5HvmhWRAraE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 31330\r\ncf-ray: a0c7fc4f0a3656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31330,"size_decoded":32262,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"303c540c9d97f0670bd5632d2806d301","sha1":"16d0319eccace15d6b135e25b5304213819c7a80","sha256":"34ce4f2790d31d512d2b5b34501b445d5123385a4c47573731abae9e2817e4b6","sha512":"a31cc9f0b8411e4866da0cd39d92a2718b0dead4cade0825c1325cb702412214c5c7b0bb5a406955b0dfe2d42501df71ef8e132cc2b1f236eb2627bf310a86af","ssdeep":"768:L5z2/TRvjQxpDaD6uevgsiLZa8shIw2KwZq0PYW+onwZ8/C:L5z2bCvJvpNIw2dPYVonZC","tlshash":"a7e2d09be40674a9f8590bb253d04abd2990bae8704ad3429f4438babd4c5fc371c1fd","first_seen":"2026-05-02T21:27:14.121076Z","last_seen":"2026-08-04T01:24:53.131719Z","times_seen":23,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/wallet_phantom.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.416Z","timestamp":1781593730416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /wallet_phantom.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bk7gkmTpw6GhTFlcRnSfsVZOP%2BF1oTUwiHs7BVZNjkcbNCWiS7B5ZdnFDQLodyDCFFZ7ertGIWNYD7TKql59VXR3vQF040Xc0yojWOqMTgk59bYvFVxDJIU%2F%2B7k%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-455\"\r\ncf-ray: a0c7fc4f1a3b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1109,"size_decoded":1424,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c03cefef7d2f9c744962ad68f1a8fac","sha1":"078a264cd05cec66acb42574be3caa03bcba5441","sha256":"f0568a024a8290d744ee7a548839ab9db336357a3fe1b8efcd881d8da1e57013","sha512":"d32da9d18f95111d9185a1ac32bb754aa91af1e3767e168d3acaa272e6c32f62a3346e85380b68682403637407ba104cc6621414563f0b22710fb5ffb677e97e","ssdeep":"","tlshash":"f811ccd53747d375c447eafd0a262dd06c1754f66725b47fc2813c0aa8560a53ca48fe","first_seen":"2025-07-22T14:10:16.992352Z","last_seen":"2026-08-04T01:24:53.124165Z","times_seen":139,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/pump-logomark.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.260Z","timestamp":1781593732260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /pump-logomark.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bf029SoeGXwx4hsbAceGrHEMdP5PbSneI6xXLvBm2%2FTvu8r4IkWTOIuVaiTw2Vuc3lLADJTKYxvvXZ7dd8MPkIasZdccfL6hsJhM8N5isap1X1orU3BGvZssjxY%3D\"}]}\r\nage: 30146\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-a62\"\r\ncf-ray: a0c7fc5aaace56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2658,"size_decoded":2014,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f63fff8de4385a3e5a132656e5343cd","sha1":"860a2077e73020e3898bbdb847ddbb6a252b8da6","sha256":"b51b06b474d5110c9dd864aa915624a6f4b2d128a289ac48621f69fa42bc6db8","sha512":"c5d475efd0538580110d932ce792335bfa95c9e02fad6bde4e4e4fc11956070a81cc2951eadb6cdf0bb56b14a6feec6349f742db6fef03ced9514797121d047f","ssdeep":"","tlshash":"fa5172ff6b444de5de86c2f8eb252ad7782a24d97120464193d43f2a740236c4d8ac93","first_seen":"2026-04-12T23:10:39.468926Z","last_seen":"2026-08-04T01:24:53.109079Z","times_seen":29,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/latest/dex/tokens/J2eaKn35rp82T6RFEsNK9CLRHEKV9BLXjedFM3q6pump","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.553Z","timestamp":1781593732553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 06:42:34 GMT","end":"Sat, 22 Aug 2026 07:42:20 GMT"},"fingerprint":{"sha1":"46:14:88:C6:44:E5:BC:78:59:8C:7D:E3:6F:49:A1:56:EF:03:83:DE","sha256":"55:31:24:42:9C:20:1A:E4:73:A4:E9:DD:52:42:C5:5D:1B:FF:3E:42:FF:2C:13:98:96:59:79:9E:1E:7B:79:31"}}},"request":{"raw":"GET /latest/dex/tokens/J2eaKn35rp82T6RFEsNK9CLRHEKV9BLXjedFM3q6pump HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://puump.sbs/\r\nOrigin: https://puump.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: __cf_bm=enM1f8fIztw4LsO._D.T3Q985zzs04RhUMsRpizRh9M-1781593732.5865195-1.0.1.1-BhmNUc0R3ZQd0mic3HuvPAiKHXEzLHcaiXYldx4OMucMgosEg7EUenmzel0A33NAKKhOitxlGN2t9plyZAg5S5hezAt7ZGEegpET7WpndUjWcAF2BhXIIYPUEADZNx6zqplartNSznrWhl8BPyzoZA; HttpOnly; SameSite=None; Secure; Path=/; Domain=dexscreener.com; Expires=Tue, 16 Jun 2026 07:38:52 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"2d51-Hy2N2LZ9XLXJV0Gg3/0TmV7s590\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\nexpires: Tue, 16 Jun 2026 07:09:22 GMT\r\ncache-control: public, max-age=30\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\ncf-ray: a0c7fc5cac255688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":11601,"size_decoded":2718,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"794f492b531487635cb508ebe8661160","sha1":"1f2d8dd8b67d5cb5c95741a0dffd13995eece7dd","sha256":"f2213e08835e30890352eafad51652b8aa6da364c4f76d91118a9dafab2cf964","sha512":"058133389d6a08810966e41198cbd6be1f7be1b54b81027285c4359ac8f5ab207e1f35f36c6e4419a1e94b545e7b96d6af1d735e6dec599364c2770a8369b1f1","ssdeep":"192:9dkXUYALmv0BSI7XUYALmv0BhEJVXUYALmv0BrXUYALmv0B4XUYALmv0BPzAiXUK:9dkXUYALbYI7XUYALb0jXUYALbFXUYAT","tlshash":"9d32457f43ed79bfc3847ad1349e781ea082700b8f98d54bd144ce5f01e879a661d998","first_seen":"2026-06-16T07:09:33.813554Z","last_seen":"2026-06-16T07:09:33.813554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":4,"connect":26,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-16T07:08:49.851Z","timestamp":1781593729851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=neUYSfc0XnTMbHHNydk2fQ1pVfMSU4CFBiFro7%2FXlcXqFpnUFcrpMvdKPhsI%2BF34ITk6xdffr8Zxwg1Jft%2F79TpqVjrQxU96fCZUplL3IhYxckj2Gxjq%2FQIHDoc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a0c7fc4c1f88b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4308020,"size_decoded":87681,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (553), with CRLF line terminators","md5":"05e921d1face2004e6ab35c5a7a20030","sha1":"e507943e423a3db1d39988dd47258c0a8c77deca","sha256":"93d36b95f18eb40f0287d0292a367bb8a60d0ace26f324d9befff9a00a763d35","sha512":"0dca9d3146a625ea2576af3e1709b74e8c9e8820cb9c93ebe86cc9ca168016ba00ef67e1b3d1c9ecc42c8c291667b6dcf57e2f0fd43d45ca94110ecdddbdc68e","ssdeep":"1536:lqZNUM2moOJfx4jv7SgtycSJ/DlaeSK79fIJ3zujxCk9F43ut/q2GyHnLr:kZN12tycXe7hQx6gKq/yHLr","tlshash":"502565f1129042e600b7cb75ea31d759f293a5bbee1be20473dc97825f7a8a6cc13158","first_seen":"2026-06-16T07:09:33.814707Z","last_seen":"2026-06-16T07:09:33.814707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":62,"connect":1,"send":0,"wait":179,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/icon2.png","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.258Z","timestamp":1781593732258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /icon2.png HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-29c20\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZ5pmihQTG3s0Sg%2BsZqKr4ArD2cUz8JdJj03kJX2LxvfCKMpNysFc%2B57eS5krUwV9LayATiupCo3HiirDudyEXMKUONhfH0nwZTZRAAhZp5a0wNoXlhCEgnbCqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 171040\r\ncf-ray: a0c7fc5aaacd56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171040,"size_decoded":171960,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"f1bd488f76adea521d1cfd37122ca30e","sha1":"1bbb7d1e1f5307bc38c179d1da114edebf2cc75e","sha256":"7dc9c4c4c538d66db7cb3a92f6481c57cb1d435742ec651e6db3d3953431707d","sha512":"c03166a137e07787b923e1683e7b02199be51f7e41d9497c6f33bc9ab0ccc4111895692be41c36f9c1810d76e1c761d3397e35fa72e4267c73d4aaaad48c66cb","ssdeep":"3072:Cd5h51rQK4TzyXx20z6RqAicPFqIcM5gRy1xNfXE0wBBLhO0y+0pVxX1Hilw:C/1EtyX40z6Y4PAVSCsxNfXElBJ/y+iL","tlshash":"d3f323da1e689adceb1302917db05ded37a670e45ba1b640fcc80d14b5d3379a891bf0","first_seen":"2025-02-16T19:20:16.384713Z","last_seen":"2026-08-04T01:24:53.12926Z","times_seen":201,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.dexscreener.com/cms/images/164d467aa047f358ec10d2c270b8b2826fab117059528c694db347611e8764e2?width=800\u0026height=800\u0026quality=95\u0026format=auto","fqdn":"cdn.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.960Z","timestamp":1781593732960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 06:42:34 GMT","end":"Sat, 22 Aug 2026 07:42:20 GMT"},"fingerprint":{"sha1":"46:14:88:C6:44:E5:BC:78:59:8C:7D:E3:6F:49:A1:56:EF:03:83:DE","sha256":"55:31:24:42:9C:20:1A:E4:73:A4:E9:DD:52:42:C5:5D:1B:FF:3E:42:FF:2C:13:98:96:59:79:9E:1E:7B:79:31"}}},"request":{"raw":"GET /cms/images/164d467aa047f358ec10d2c270b8b2826fab117059528c694db347611e8764e2?width=800\u0026height=800\u0026quality=95\u0026format=auto HTTP/1.1\r\nHost: cdn.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 16 Jun 2026 07:08:53 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14334\r\ncf-ray: a0c7fc5f0c4a5a0f-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1783815\r\ncache-control: public, max-age=31536000\r\netag: \"cfNupNXOTYEz5g3ZhiMrsBCAvRoXS35aQuSdpn5VnlDQ:a18e11ab9963d093cd1f06a189aa9329\"\r\nlast-modified: Fri, 12 Sep 2025 18:46:05 GMT\r\nserver: cloudflare\r\nvary: Accept, accept-encoding\r\nset-cookie: __cf_bm=8rLT7IkRJjIX1g6bYuLMghu76s4tmYkA7_RKVDyTxDY-1781593732.9667366-1.0.1.1-8ECICaEIDz8NL82JjyhUGO15VSVAJ5rjh_3wJvWHOqBZ_OWnjlMR36FTLIGYULHFOTjMS42mLbQbrpEAfmIHY.TSZ5lr43E0rJi19ZJThFIIvqGpjw5SIlDnM9.TJpz.ClD_qMOG9DQW_xs1cf4N_Q; HttpOnly; SameSite=None; Secure; Path=/; Domain=dexscreener.com; Expires=Tue, 16 Jun 2026 07:38:53 GMT\r\ncf-resized: internal=ok/h q=0 n=36+369 c=0+0 v=2026.5.8 l=14334 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\npriority: u=5,i\r\nwarning: cf-images 299 \"original is 8670B smaller\"\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":14334,"size_decoded":15453,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"a18e11ab9963d093cd1f06a189aa9329","sha1":"e5d2ab05410687a4b8ae2a26edb1aad302638d83","sha256":"1c0a70bb397dbc791fd8e2c5784ebe26e706f82050dd7a76c32b7860b6b80c3a","sha512":"dc9452298fd028444e08d70edc721664b6460ef971674f1efa2066e949c190b3820dacf9d0367b481b1721f6739d1dca8f698c0a091f9c6104d63dcc94ceb3c8","ssdeep":"384:Asg5e5tDJqLfal1zU/kNdFxF1dsn3nJYnh:piW1zzU/Qdnh","tlshash":"0d52ae9579aa69858fafdef00047426b82915115ede1fe2e0c03ae78b6c9f4e571330b","first_seen":"2026-06-07T04:18:21.531196Z","last_seen":"2026-08-04T01:24:53.105273Z","times_seen":18,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":3,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/wallet.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.425Z","timestamp":1781593730425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /wallet.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZPpIq6HlNucFHMqqnyTfucPC04hQOzM9rIrGSEkwvYP%2BM7qIfkkMD2dRs%2BmYWp57jWF5t7bWDv62rMXEalRHehAGDgM%2FjyaFraA4mfPTX1cP9SpCRVvAwn%2Fick%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-3e4\"\r\ncf-ray: a0c7fc4f2a4656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":1400,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"574b9e8c157fdcb1f62db13a3974b268","sha1":"d343204cb47e680b7efba0cad8e7958e07e523fb","sha256":"a27e00c9eae8be042d8ca20180bd1c409f3206739500712b9a1d0a99e59e95b4","sha512":"3ffdf84da9d003dddc8359d894c3979b946c946a6cf4fd0b6061a89e32032154bd8db8fe0cb13b6db177f8ee948076d843829477afe32d8c8e9dc31958deef02","ssdeep":"","tlshash":"2511027f131d11d5f80acfe4d30ba4e37a1254a66628f008806658c2fb08d5c5df6ce4","first_seen":"2025-12-18T09:47:26.932536Z","last_seen":"2026-08-04T01:24:53.13542Z","times_seen":152,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/QmdELH6irxDS6E6ByxtHyDZxJbLoPXq9vqVipc3r1nbnvv.png","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.398Z","timestamp":1781593730398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /QmdELH6irxDS6E6ByxtHyDZxJbLoPXq9vqVipc3r1nbnvv.png HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-d7f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 30143\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bodu4N8CTnqbX2YpJyuWLhNuS06GSqLVN1rhWGL%2B6pjmupxEYhZf9oty5ojY9Lt%2BUtqAUXlEF42BBBRYQQTFY0gR2FALKpEbpEPIbqnHQ5uNTMVYvpUqT37h%2F%2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 3455\r\ncf-ray: a0c7fc4efa3256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3455,"size_decoded":4383,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"c0cfdfdf600e26de3f1c44cc727a0ad0","sha1":"7834fe1a4ae0130d00b5c8eb0c980be3a9cd9a21","sha256":"a6c376fb1612879c8f3f787447b08121d136425b8a12f4c8609197d0265ae36c","sha512":"ba50d13329091d8e9866aaf34b97e958c183510daaaf93ff7550afcd7e17e30017349e571cf39b931c7c02c930570b160893f16576934385f650445708656b7b","ssdeep":"","tlshash":"45617e585d76f804484775ef3d544260b97c44289fc18f5a98ced583290fa63a03f90d","first_seen":"2026-04-12T23:10:39.545531Z","last_seen":"2026-08-04T01:24:53.138206Z","times_seen":25,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/stream-video.mp4","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.603Z","timestamp":1781593732603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=1441792-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-2c6b4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 30146\r\ncontent-range: bytes 1441792-2911051/2911052\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kwc%2BvotgRR90vILQQimHxDMUhMUEzR0wPKiNPrUsTAmOYoOJBY%2Ft8ryN8V3L1awogDQaqYRIWmzjX1FJXxgLbxIvH9lw9kA0P03FpXICPwwaox7oz6LyiLCfDEc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1469260\r\ncf-ray: a0c7fc5ccadc56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1469260,"size_decoded":1470217,"mime_type":"video/mp4","magic":"data","md5":"9f2c8263dc130ddc60a525d6373997e9","sha1":"564cd30791007e13aac9802c1e31a27b0400f28e","sha256":"5240cad606a12517072d63d955e1e4f639f18fe334728171f1793c15470aeb22","sha512":"6fe8b73ab9af4bf237c767fe637bc203f7c5c16628879ec2a867e93202cc88b85296b31c5e9a71168c9030aed54cd1498d9fe206454526980b0eb89863a3bb48","ssdeep":"24576:++DL5OQNZSsDZH8T2F4DNeZ8ZkQCOQmW4jRePKj:NDl9jj4D0Z+kLKew","tlshash":"0f25024a72e83774ea59233b61dc6e2387dbf115cefa0b17814c546a819b0c3ec9ad17","first_seen":"2026-06-16T07:09:33.846989Z","last_seen":"2026-06-16T07:09:33.846989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc554a8656b7","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://puump.sbs/index_1.html","date":"2026-06-16T07:08:53.078Z","timestamp":1781593733078,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc554a8656b7 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13250\r\nOrigin: https://puump.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/index_1.html\r\nCookie: cf_clearance=yh3khR1oeldPb2ifuc_9YXJ_K3pseriupRcMQguJKDo-1781593732-1.2.1.1-XacEGBUJzyMMnJKo81sUhpaLs7HwKvaBlEJJ3hhdeT.p2LBEpXKbXJ4PV9zLwKSav9kdkV6tK5cL59wFuLEpvU5G2RnIvMZ4CE221lJnESoH7FD7QzZ_cZ1R0SCPc3lj8NluaWcKTlgwvNAfOOwtRMSl5R.PabFvFPSfk0abU6h3IL9JNpVMA8Mw.QQQqYdkh8S76F46TnL8uWVM5FM9iKs9QUUes27KulP4s7IUgxRUBN2ZT52fuGeUXlyHzsn3ahktV7JzujQJElLhVhqY0jOlrTwHfrN8vwcs6jYuSOMiDdMevzqW7or5pK_c29U8tfPbeaH870FsPQR7Lc8iUA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: 8NpQqSxNg3v7Nk6sEai7S84Kxh7UWfhmmQ0cp0w4/igblaW/ZMsCNPUy6xXuVSORnC4i1kri40U4wH2uSQHKDgkxyJas+6mqQKP+AkhIfIh+pX/uZ1CLUuc3IHFVssfeRwtZ9O2pyXdRwoTHPOh9nAXjzWQcZCDW1Vy5Eto2L1GYUCwq0CeNPWneepHxsIBjR2xYgjkB8uNnjei0OPg7Y5bgLE6w+E/Ofe9zoVbnCr/AjeZ4GQLMJTglM/21YWvBwlNwjO4BKpQs6nek0KIhAQ==$fIq3xLA39K9buyUk/CNMTw==\r\nset-cookie: cf_clearance=r_2FF5tGWktSDOWUl1PLdEPgKDL7aWq6f77P6BS48HA-1781593733-1.2.1.1-rQXRUJlEuf6gb8WzIUxziorLTbXSQefh8CTXnJl_OR4dXq2L0An2YksPWKYnj2O7AV_Bnz3XQKFQx6R6c0cHY2u_3bye3q4CzIEeMElNq6qYLtu6nAo9Ruogl28Wllt_7O6yI60Lld5faV7tFOVpEZuiae70KFB.uwka04gqgRIMLQmjq7C5vym4ZBBMXtR89ys5lRpXknujpgMST1hjllAmCAdZjifXi2RJFTZUYulsmavMpSjyvO8pHvk2L1KrmHjjIHcvgwa9zAUEJ50mMzeHQ2u.k_PfiHrP_r8rgnivT.I.uWrS3hJDfJduCLIF2LuHxF6oDfLTabSMjQfTrQ; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=puump.sbs; Expires=Wed, 16 Jun 2027 07:08:53 GMT\r\ntiming-allow-origin: https://puump.sbs\r\ndate: Tue, 16 Jun 2026 07:08:53 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc5fcb0756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15449,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc556a8856b7","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://puump.sbs/index_3.html","date":"2026-06-16T07:08:53.141Z","timestamp":1781593733141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc556a8856b7 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13250\r\nOrigin: https://puump.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/index_3.html\r\nCookie: cf_clearance=r_2FF5tGWktSDOWUl1PLdEPgKDL7aWq6f77P6BS48HA-1781593733-1.2.1.1-rQXRUJlEuf6gb8WzIUxziorLTbXSQefh8CTXnJl_OR4dXq2L0An2YksPWKYnj2O7AV_Bnz3XQKFQx6R6c0cHY2u_3bye3q4CzIEeMElNq6qYLtu6nAo9Ruogl28Wllt_7O6yI60Lld5faV7tFOVpEZuiae70KFB.uwka04gqgRIMLQmjq7C5vym4ZBBMXtR89ys5lRpXknujpgMST1hjllAmCAdZjifXi2RJFTZUYulsmavMpSjyvO8pHvk2L1KrmHjjIHcvgwa9zAUEJ50mMzeHQ2u.k_PfiHrP_r8rgnivT.I.uWrS3hJDfJduCLIF2LuHxF6oDfLTabSMjQfTrQ\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: cMsYos7PNt78ClE6+jJUttNal5Xgw8MITbdEwMi+3K2NzBXHekI5xI6JQIcmTgpFn/IQvYqkBYn2In+ccSdFY8n36SVKYPr3x8I/NFiDrwP0+Wphh0EGDDVnPhq8m654XWBCeHi1f8j4TNlsnklIVaO+QxxIxkxTY3oeFUG7CBOLUKIGIeoIFKDqAEZXF0+jsqVcQh6EsFNJRkziTxFednIpmgckxN7yEaKb+64e5fPKosSNVsCBtu9WoQYj9AW2on7Kfckcr1wYgN/fgSU4uA==$JXwaKfYJOCytNQlpul3InQ==\r\nset-cookie: cf_clearance=3KfbupYFErzc8aoE6iQH7hXXDjuXbVfpkZtvQRLDGos-1781593733-1.2.1.1-boAR0OMQUDC1iY0DqR_fu0rq6t8BOzxAN1RVUnfvwOzAE_Za5bW6mfUD_kRCbbcUlLmpnZAbq6ryeyeJroaD5E2XaIkdSLuzv5e8Ef0HzzteAqAE_.L7dAKbqG0GXO4XfT03Xrn2dXSzwMchkc7E7W_mbU8GkPPtpmDWfwTC33slV3yjyjIfLoWwNLqFxlY9UzvwWgCPRYOSWoBQrTfPRLxDuIJz.MJ96jbydMv_Du76M4sFCKMMiWl33KOqMxZqWuZsyUG4vEBYv4egBmqsabasKakfBgNXVl99_96oa7Jwl8eTRgsB58LnZl_znGiDRAjR8cR_rktdtr7ia1hs7w; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=puump.sbs; Expires=Wed, 16 Jun 2027 07:08:53 GMT\r\ntiming-allow-origin: https://puump.sbs\r\ndate: Tue, 16 Jun 2026 07:08:53 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc602b0d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15449,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/b1ceb54df6a409e5.css","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.333Z","timestamp":1781593730333,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /b1ceb54df6a409e5.css HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-2b80\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30144\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1G5sg2tABCOEpH5tzrbtj%2F3x2Ccfsa1StrcytPOuMSpAozvRazpTFswoJrt%2BT8gIZEEYRWAXp2WT5ibSuR02tqZ8oaR%2BpiCHstpwPC%2B8zeB62QAUpmTo4L9oBbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4e9a2756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11136,"size_decoded":3497,"mime_type":"text/css","magic":"ASCII text, with very long lines (4808)","md5":"4c376c0b3d4ff89c29a839d79a68ee63","sha1":"6a988cb659ecb1de8a1df6a2d10258273fc04f28","sha256":"e2d77f1ac5e7001ef39d20e6476d4c1f05899e2460a6462de0999e179c35365f","sha512":"0afdf5e075996fb522ccd2b9d4c05101c953e863c7f0562f62f5aa1be1c070af7ffa1ff5aab0c2b6f2303c550429ac818aaa49dc0ca9c35bbc50ee91449d3283","ssdeep":"192:R+Xuj1zxMi7ttEtfKmw88YtOkKTuaGXYF:QXs1zxMi7ttEtfKmw88YtiTuab","tlshash":"d83222b1b0b01333661f2402f18b5809efc1a6d58a622fe5e97d93e84ad315522fef17","first_seen":"2026-06-07T04:18:21.474158Z","last_seen":"2026-08-04T01:24:53.126083Z","times_seen":21,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/db808e5b83343dd3.css","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.335Z","timestamp":1781593730335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /db808e5b83343dd3.css HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-30e85\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30144\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2MCc0hFcBKNROXTVqX3KN2YJHOmOoL6%2BPVUHfzzuK7QDIY6XJt56ThY2JctJ3fsDkw%2FVbGYXiet3DsqDQxZ3LKmowzm87CoQp6uW6ZqW18iy0jptaQq8iPL7ph0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4e9a2856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200325,"size_decoded":38630,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"80ba684b5a3e800810c797d40a1de559","sha1":"947a1f50491c338e8828e2e1a05332180d3ac876","sha256":"89555ccff6e6f9d7ca76b6b26d67ac3570584b9d45c484f8b84bbdb427bf14f1","sha512":"2455a20d86117c4fd7baf96dd09731a235652498990236bb91a73e1ac9e41ff57e2346450730c3a35551bd3ffe82da0a768b305318b287799ed279f0eb7c1a31","ssdeep":"6144:GGQ1hflhQZaLAb0MesXbTaHkPSVI2EEJaGF+ChfViJEExfPuh/4AVgO4eEWAinZL:OIQWo","tlshash":"6914a26da765443f3c27a0f9d29cbcad911ab1c0ef3a56eafc42511097e17f62ca7600","first_seen":"2026-06-07T04:18:21.526014Z","last_seen":"2026-08-04T01:24:53.107652Z","times_seen":25,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/wallet_magiceden.webp","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.420Z","timestamp":1781593730420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /wallet_magiceden.webp HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-642\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FxXTjoc2iQ3actrdZ2i0JcHRSQSkwP76fmAzaTuzkOtKPMFDLbRaR6O4ahIk1Y%2FQDdJVSlP0Ui%2Fva8m%2Flbw0gTIHa4MkP2cVsf6Sokg3Zg7%2F4QsoRFdIjdpkwc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4f2a3f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":2555,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9545f7118bfe56b75fe56c2b67ce762","sha1":"b1dbe54a44548df39418e1979a44a15946a3871c","sha256":"751f8332aea0f7cefabc4c7835cbd69294ca2dad4d8192d77da7123d79f67571","sha512":"0f57266a7d2b388e19e7f70a307c2ae09c228027a68657db737b4b8ab6c369794d469bfc2f08520b11e12d33aad527b1361585884ceed8aa70579f4755d74e0c","ssdeep":"","tlshash":"96312a8c04a873d92a96f6a8679bb6762c480c4ba3d74cf6c074dde00fec1c4b300759","first_seen":"2025-12-31T12:24:56.569709Z","last_seen":"2026-08-04T01:24:53.106495Z","times_seen":123,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/index_1.html","date":"2026-06-16T07:08:52.953Z","timestamp":1781593732953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js? HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=yh3khR1oeldPb2ifuc_9YXJ_K3pseriupRcMQguJKDo-1781593732-1.2.1.1-XacEGBUJzyMMnJKo81sUhpaLs7HwKvaBlEJJ3hhdeT.p2LBEpXKbXJ4PV9zLwKSav9kdkV6tK5cL59wFuLEpvU5G2RnIvMZ4CE221lJnESoH7FD7QzZ_cZ1R0SCPc3lj8NluaWcKTlgwvNAfOOwtRMSl5R.PabFvFPSfk0abU6h3IL9JNpVMA8Mw.QQQqYdkh8S76F46TnL8uWVM5FM9iKs9QUUes27KulP4s7IUgxRUBN2ZT52fuGeUXlyHzsn3ahktV7JzujQJElLhVhqY0jOlrTwHfrN8vwcs6jYuSOMiDdMevzqW7or5pK_c29U8tfPbeaH870FsPQR7Lc8iUA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc5efafb56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23198,"size_decoded":10853,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (23198), with no line terminators","md5":"008676df90d08e0f517e67c7b4db8447","sha1":"5fc044dd85eed3c92a2e8be4d4a618de597f6ab4","sha256":"bd1d965eed21016a0ee63eaa0cd689ae597a560386c0e6db64d5fe7c3dc93b23","sha512":"9ae905f641fdbe475e66c73fabf1fdef7aab5e1f729dddbfda33c64fe8df0285004c5559768a17e396ec9a83ebf2ed3ca4db312b379d9b43d72d6c3434bac35f","ssdeep":"384:PpLUwZPNmQbeIebNX8A1eezvjKvTGNZJzkWy4PXUV7KRM/JiCC8hKE2RjgRC2hGy:PDRNmQ6RX8AnzvjoaPzw5EAzl","tlshash":"24a2b9eabcd1702c77656078107b3dc735abbd49202f4428d150adfa7c3277a4aea9d8","first_seen":"2026-06-16T06:52:58.054059Z","last_seen":"2026-06-16T07:09:33.803518Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/stream-video.mp4","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.379Z","timestamp":1781593731379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-2c6b4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 30145\r\ncontent-range: bytes 0-2911051/2911052\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tpLnSfxG4v4xy7xyP8jqTaeh1Ot4tb42rrjWIGmBQD3dNwvON8u7SQEnUY5lO3CISxAx%2F07LBkaPPWCBNa4uwKl4jkxTw95HVohCajEpL1rNTIhPlCXQcNFfa3Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2911052\r\ncf-ray: a0c7fc552a8356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1451331,"size_decoded":1452280,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"7d0cf68fe3a5186fba5097615532eae2","sha1":"1bce7c232f8f012e8c31f4bd291c541e762c4986","sha256":"225c37f087287ae6c320d2e76a5739426574a2ef6dbd527b94a4ba2e8aabd0fa","sha512":"3bbc1e75c348fd8e8e9b9e1bf149ec6deea5d974c9359f0cd8b1a6c3858a308715f1e32ec3a6b04b5d58d6e11c668f3ef1b776e6b8e0cd312072e57b9fef55ff","ssdeep":"24576:IWeJxcPJMQohgp507DxGhuFBz1I/3C2bJDAeDqNaZ:pbhmIPuFF1I/3KeWNaZ","tlshash":"9625128960f53330ca69277b21ec6d03a7c7f526cafe1b2b554c44a691874c3edda943","first_seen":"2026-04-12T23:10:39.531445Z","last_seen":"2026-08-04T01:24:53.136088Z","times_seen":23,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":390,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/image_d343204cb47e680b7efba0cad8e7958e07e523fb.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.418Z","timestamp":1781593730418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /image_d343204cb47e680b7efba0cad8e7958e07e523fb.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PkPeofF9ht5tn58XzvagNSpw6eyPG30TFXqlDwVUr9QRX2%2FWyFQo240kCknvFT67%2Fo%2B%2B7PQLn%2BkXaQLc%2BwjkPpYCsT0wzZlRUCITsEZ1rptXG7MjlfYNYiPPilA%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-3e4\"\r\ncf-ray: a0c7fc4f1a3d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":996,"size_decoded":1404,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"574b9e8c157fdcb1f62db13a3974b268","sha1":"d343204cb47e680b7efba0cad8e7958e07e523fb","sha256":"a27e00c9eae8be042d8ca20180bd1c409f3206739500712b9a1d0a99e59e95b4","sha512":"3ffdf84da9d003dddc8359d894c3979b946c946a6cf4fd0b6061a89e32032154bd8db8fe0cb13b6db177f8ee948076d843829477afe32d8c8e9dc31958deef02","ssdeep":"","tlshash":"2511027f131d11d5f80acfe4d30ba4e37a1254a66628f008806658c2fb08d5c5df6ce4","first_seen":"2025-12-18T09:47:26.932536Z","last_seen":"2026-08-04T01:24:53.13542Z","times_seen":152,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/c43a4607efe63bdf.css","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.338Z","timestamp":1781593730338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /c43a4607efe63bdf.css HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-33ee9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30144\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajKZU5LQ9VecFZtF34TtFjxxxkVdYmihupvjn2VyO6xDyeUDn%2BcYdWPKcS0CiCWh3fjYS3Gn5CiirjmDA0mcAYT40ar7aR3Ms%2BUNOXEm%2FrBOtnaZDyem4W%2FjCzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4e9a2a56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":212713,"size_decoded":41534,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4bf5177e8fc18cb70d7f1c178cad3d88","sha1":"609a177d9d66c9dcbf362ff847d1a4d6e063085d","sha256":"cdd104a91682a2e1f06864a906ee540ae4d6f3d51f1f03dc743fcec6d6629547","sha512":"f98c935761603ee6a22393b4a33d3436f8eaa0f64db2a93303e2ff880c85fe977a23c247fa0ac552eaf256004b0bf2b3f9f51961d2a2e77545989f879ef4fa44","ssdeep":"6144:GXWQ1hflhQZaLAb0MesXbTaHkPSVI2EEJaGF+ChfViJEExfPuh/4AVgO4eEWAinf:IoIIQWo","tlshash":"9d24a36da765443f7c2760f9d29cbcad901ab1c0ef3a1aeafc42511097e17f62da7600","first_seen":"2026-06-07T04:18:21.512977Z","last_seen":"2026-08-04T01:24:53.129903Z","times_seen":25,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/35907fda4c28fba3.css","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.340Z","timestamp":1781593730340,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /35907fda4c28fba3.css HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-4b85\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30144\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ei%2BNmhOMGQYsL%2F2ytyBOgqmwjosscmJBpsDCBTGDwlV3mQWWhi1UWJdmzwhsd6fm9HRn0bRqgOjbq094OJbZ7kJUzJDNHwLmFGzPgQwjuiCecMYuAet%2B5UyNI6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4eaa2b56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19333,"size_decoded":5809,"mime_type":"text/css","magic":"ASCII text, with very long lines (19332)","md5":"42875ef18ebb0e99a71ad1b8b17844ea","sha1":"bc843fb81c83ae9a849feb83daf273e81c945e14","sha256":"2c27a675d98de5722db706d01f648740a913cdd7a82ea9fd6382a1dd191e5df2","sha512":"595e29ad1bd4115f20abfc539a1f6e44237f1a3de3594877e75951e57bf76156075a80cf8fd174477eaba1b43e8d9e55e481b43d692a45e4f564887d1f6ea9c4","ssdeep":"384:vvQAz/wArLLymtEttAhrNHDRW8xQIj4d27UseF2:LLyftANDRW8aIj4DseF2","tlshash":"8592a6bb2530a3fcbd6792076ac985cc6234f1c4da3115ede5a7a2b005cb6d13b26e53","first_seen":"2025-12-20T19:39:47.56599Z","last_seen":"2026-08-04T01:24:53.14022Z","times_seen":124,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc4c1f88b1b8","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:52.856Z","timestamp":1781593732856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc4c1f88b1b8 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13237\r\nOrigin: https://puump.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: NSpJC0pXWCGyxeNts7NSuJmgAZJEvvFhxm7K1GJLRKMaSTKV4c8bQP4MV4uxFWwMs2eLfaR89BzQOcK+gVIz0cLeLHV//Z9GccFu3aehsCu9fyDA8mlvbclfyVru2wzXaWIqhB0ziRZarpuQszk0PHMsr2TsI+mEahy6VfY6KawL3QsxHwjPrrOAcDV1eQrugQcDOD4rb+DNShv7l/O4VDECxY6qG1FRnta78Qxh8PbgrbZrvLc7kFJa77H8sloe2ISs32vJG+4QQR8AJ7cimA==$C1WxT4MeDwchR5zLMuuA7w==\r\nset-cookie: cf_clearance=yh3khR1oeldPb2ifuc_9YXJ_K3pseriupRcMQguJKDo-1781593732-1.2.1.1-XacEGBUJzyMMnJKo81sUhpaLs7HwKvaBlEJJ3hhdeT.p2LBEpXKbXJ4PV9zLwKSav9kdkV6tK5cL59wFuLEpvU5G2RnIvMZ4CE221lJnESoH7FD7QzZ_cZ1R0SCPc3lj8NluaWcKTlgwvNAfOOwtRMSl5R.PabFvFPSfk0abU6h3IL9JNpVMA8Mw.QQQqYdkh8S76F46TnL8uWVM5FM9iKs9QUUes27KulP4s7IUgxRUBN2ZT52fuGeUXlyHzsn3ahktV7JzujQJElLhVhqY0jOlrTwHfrN8vwcs6jYuSOMiDdMevzqW7or5pK_c29U8tfPbeaH870FsPQR7Lc8iUA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=puump.sbs; Expires=Wed, 16 Jun 2027 07:08:52 GMT\r\ntiming-allow-origin: https://puump.sbs\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc5e5af756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":14996,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/app.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.400Z","timestamp":1781593730400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-1e52\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5f3aKpTW4xT9ZL4Xz4jmYCgPtNFqz6%2Fs%2BCZkrOTzbZBOtltGCeLV%2B4nrRHHec3ZboPrm32210lnROsyHgbOBjSAZNCg4DfN97ikURhxId15g3sXXotDLUKC%2Bw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4f0a3356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7762,"size_decoded":3912,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"9cd269ab002d45810e2ae40729d1ee2d","sha1":"e76ff0caccce76c4b92b934f2ab5b11a15e81891","sha256":"7fa27ffe0c80b02b1a107ec16af9e5b93e3003d6e793230990baac6d4697c765","sha512":"33f983c2df377d71038bd0b0bf728541422e4331d6e3cc96d71f87e6d39b864948f80ef46533cf6819a1f553ae32dc395cb0359ff24143006e194431d42577e1","ssdeep":"96:jKK6vlsuidzNAh3nNM4OVfmm8ljfxs+sGQzRsiB3CfTQsgznrLPdM4ABDg0GA:jKHiG3NMnVfmTlVQR5B3EQ7brLPyls3A","tlshash":"90f1743d25ba34327122e46ecb8722197659344b328de206344c77ea1fed721c5b6af6","first_seen":"2026-06-07T04:18:21.522866Z","last_seen":"2026-08-04T01:24:53.103384Z","times_seen":14,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/index_3.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.421Z","timestamp":1781593731421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9XuDaz1920m2DSbDxCHvqyUgiS5m%2BZ3B3%2BJLu2Nffe%2BZkQsATGIL6BJi%2FFL%2FDuObyEsz%2F9iVnky3Fp5C3ILn2CKT7fNUsmRVErHuKc%2FraG4by12aWUbZKAwKVXk%3D\"}]}\r\ncf-ray: a0c7fc556a8856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1061,"size_decoded":1466,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (1061), with no line terminators","md5":"d59496e5c7670ec9fcafee6a17d8cfc6","sha1":"cd214536d747d100440786b00362c14556268da3","sha256":"af47466e2d0e257eed0fb29fbf7a5e481a7cb53174e864152b073ef9757ff75b","sha512":"35a63dd517399734b1f069c699014ad9c0eb8eca49f666920f18ade4893512522192a5aabb9d67e14c946dc5355533205d53a6589aa7c0dfa2e1c0d80efc9d4f","ssdeep":"","tlshash":"001112757e1549349ac58187227ef7e83d3260347a129044d2acdc289d18e9304dfcae","first_seen":"2026-06-16T07:09:33.858281Z","last_seen":"2026-06-16T07:09:33.858281Z","times_seen":1,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/solana-logo-square.webp","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.791Z","timestamp":1781593731791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /solana-logo-square.webp HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-3d4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30145\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CTO2JdAUlvagBbUOiJnzG33IzosvNiOp91YG8BWArOmXXQ8JMgYrzI9NPk59um8o7lVqFp6hMtpcob8WXwcS6NuM0beG6sA4%2ByCdxwjWh40jMZKs%2BfbC1jDOZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc57baaa56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":980,"size_decoded":1933,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0cbc759a1b712af205cf8c917417197a","sha1":"397d6cb5137d6f300c91602f7302f594c26f63ff","sha256":"6acf5ab7c9dc0bcb852b17056f6407ba60fb12680d0537f058928c2db6e4aef4","sha512":"042f0e379a47039e67720bb23fb417c4881b25ad40eb6cae55cb2e2fdb1c5b3885707e84f7866225e5764bf2ca0815b57f2ee8cee8747307c78da7b96a1bcafa","ssdeep":"","tlshash":"1811a540f19444908017a218589b24a3e93a54c051b6a27e5bb8bb8190b2535b8ed1fc","first_seen":"2026-02-02T10:11:27.507559Z","last_seen":"2026-08-04T01:30:28.112902Z","times_seen":41,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/index_4.html","date":"2026-06-16T07:08:52.786Z","timestamp":1781593732786,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\ncf-ray: a0c7fc5deaec56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/index_3.html","date":"2026-06-16T07:08:52.955Z","timestamp":1781593732955,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js? HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=yh3khR1oeldPb2ifuc_9YXJ_K3pseriupRcMQguJKDo-1781593732-1.2.1.1-XacEGBUJzyMMnJKo81sUhpaLs7HwKvaBlEJJ3hhdeT.p2LBEpXKbXJ4PV9zLwKSav9kdkV6tK5cL59wFuLEpvU5G2RnIvMZ4CE221lJnESoH7FD7QzZ_cZ1R0SCPc3lj8NluaWcKTlgwvNAfOOwtRMSl5R.PabFvFPSfk0abU6h3IL9JNpVMA8Mw.QQQqYdkh8S76F46TnL8uWVM5FM9iKs9QUUes27KulP4s7IUgxRUBN2ZT52fuGeUXlyHzsn3ahktV7JzujQJElLhVhqY0jOlrTwHfrN8vwcs6jYuSOMiDdMevzqW7or5pK_c29U8tfPbeaH870FsPQR7Lc8iUA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc5efafc56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22561,"size_decoded":10714,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (22561), with no line terminators","md5":"8844d577a1887edddc525a9f9918d014","sha1":"ea75737f5aa0897ab3436bd691a6115dd1580f38","sha256":"6b4c22be9f7c1f9fb2ab02baf7701909f1aa534adbc12b48585a4ee9a7b7489b","sha512":"e92beb22d1d0fd57e52839d3ceac2807900f2439408b37a6ba8b6e320dbec7b503a468d085bbe3f399736c733fad759feca6be9880ef65365a619532367f7964","ssdeep":"384:PQ1wHlv/wN2+lGJF34ofssPl8GYHZayq3h+PQDr1Yyfmt+yvYau:P0wV/wN2+EXtfss2DayA+YDmamtHg","tlshash":"b9a2c7ee78e1702c771634b020776dc7769fbc41209f405cd250a9efbc327b59aa69a8","first_seen":"2026-06-16T06:17:07.151632Z","last_seen":"2026-06-16T07:09:33.86067Z","times_seen":6,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc555a8756b7","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://puump.sbs/index_2.html","date":"2026-06-16T07:08:53.386Z","timestamp":1781593733386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc555a8756b7 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13250\r\nOrigin: https://puump.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/index_2.html\r\nCookie: cf_clearance=3KfbupYFErzc8aoE6iQH7hXXDjuXbVfpkZtvQRLDGos-1781593733-1.2.1.1-boAR0OMQUDC1iY0DqR_fu0rq6t8BOzxAN1RVUnfvwOzAE_Za5bW6mfUD_kRCbbcUlLmpnZAbq6ryeyeJroaD5E2XaIkdSLuzv5e8Ef0HzzteAqAE_.L7dAKbqG0GXO4XfT03Xrn2dXSzwMchkc7E7W_mbU8GkPPtpmDWfwTC33slV3yjyjIfLoWwNLqFxlY9UzvwWgCPRYOSWoBQrTfPRLxDuIJz.MJ96jbydMv_Du76M4sFCKMMiWl33KOqMxZqWuZsyUG4vEBYv4egBmqsabasKakfBgNXVl99_96oa7Jwl8eTRgsB58LnZl_znGiDRAjR8cR_rktdtr7ia1hs7w\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: OS3e89foyLKQSDEkwydv7kSdTi2GteoewM9hxXDOoWANvSMEMjuQ7wQwjK5DlZbuCSx9oauDS9psSkBxpUV2BN68i5e5GLLm/sAst8ZY6jof0+ZSVnb78KfNEpaYNC7MXGdiiiTuNQ8ISmgZsQQYlmRul6pZeQaoHBQcrKtW6NKxPfVeFZd/C3jncewXcc7GgSvhZjd4r96KJlOJpfI72Mdiw09fAje8SAsEvngc2NEe7G7lzwhGsamKf8gmKtiIgrhkaPht6Hr92xSz0O5ztA==$2IRL4IZjEDFpCV/i8nPIXg==\r\nset-cookie: cf_clearance=aXrLlAkrO6czH6hb9ifWqkjz.Gm9egBZtZOUtvKWHxw-1781593733-1.2.1.1-QwycdpCcoPHnmyURkvCUrcyp0xZsj.bgphWF0HMZdnOICUKklI1ft7ghqcOzwg93zKyhdtps0CBRUnF_rGxX49EAZMD4zk_pmxGaIPGUeJCUWLSy8c.r1e2TJvXc_2Q5tPLXjjMNkfN1OVBiVlYPI1mu.TGMc.gDcUJX51J3O5Sk60N68PswHVPL6t3pKQDHV4qyNPyuDlupdZXSnG4O9_pBOBRy7j.YPvkWPHaG50fERI31qG8WIdnMuyfN2dGHFfKKHYQkGaATxgxD7EsBy8hylTU9w.AJYS.o6tv8WkJzWWglcJqYbJd1XMq24Z3SBMuNCmIbQMhUUYQoNRB97A; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=puump.sbs; Expires=Wed, 16 Jun 2027 07:08:53 GMT\r\ntiming-allow-origin: https://puump.sbs\r\ndate: Tue, 16 Jun 2026 07:08:53 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc61ab1f56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15449,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/pump-logomark.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.353Z","timestamp":1781593730353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /pump-logomark.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xdNTdqRFjZTp8Y9j8wAonO8SKr6y33WH45uXKG7ZgKiXPFNJsVH%2FoucPhsriumprVWOW8ZRP2I%2FslA6Zqfh6J9qyD%2BormSWDfak89nfuNjHNCvEkRGzfVGFZpI8%3D\"}]}\r\nage: 30144\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-a62\"\r\ncf-ray: a0c7fc4eba2e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2658,"size_decoded":2013,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f63fff8de4385a3e5a132656e5343cd","sha1":"860a2077e73020e3898bbdb847ddbb6a252b8da6","sha256":"b51b06b474d5110c9dd864aa915624a6f4b2d128a289ac48621f69fa42bc6db8","sha512":"c5d475efd0538580110d932ce792335bfa95c9e02fad6bde4e4e4fc11956070a81cc2951eadb6cdf0bb56b14a6feec6349f742db6fef03ced9514797121d047f","ssdeep":"","tlshash":"fa5172ff6b444de5de86c2f8eb252ad7782a24d97120464193d43f2a740236c4d8ac93","first_seen":"2026-04-12T23:10:39.468926Z","last_seen":"2026-08-04T01:24:53.109079Z","times_seen":29,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/index_2.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.415Z","timestamp":1781593731415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apOm%2F8N4mqCWNqNKWhv4faMEc5SfwBInDbOx5qAmz4lXrRN28Bo8S%2FinS1ratkdtuPE8YWS%2F4n7MGPEwngGwKlHrotL7DFKvSYWIEmb88mxb%2BILVB40DDw%2Fc2Ic%3D\"}]}\r\ncf-ray: a0c7fc555a8756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1061,"size_decoded":1462,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (1061), with no line terminators","md5":"655203b666dc7150008bd4253f278175","sha1":"85f697ecd2e7070359a0ce98c6250e00e01ff5f3","sha256":"20b7f01751c3470ba74d60338b73b717b32fb661a0e927838d11cf2e794f4803","sha512":"3c225bad96b6a7f4deed968ca3565b49aeb14c6d5df110910a907d48a2d9d8543edc7ef3b672aff0d818f34eb09f8292248b25e4514ccfac14ee4d4f9a74b066","ssdeep":"","tlshash":"ba1112753e1545349ac54187227ef7e83d3260347a129044d2accc289d18e9304dfdae","first_seen":"2026-06-16T07:09:33.861328Z","last_seen":"2026-06-16T07:09:33.861328Z","times_seen":1,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/css2.css","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.344Z","timestamp":1781593730344,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: W/\"6a2daffe-1dcc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 30144\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pk6mymggeaPa2UbyTB72PssyU9J0lXwjvEboddqtqr6gVeomwlqbje6ihXI9h%2FT43aI4P01s6HKZEA4NUAFONHIIlgXCCoaTqk97788iFu1pelw78IhWmbqh7eQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0c7fc4eaa2d56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":1604,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-08-08T06:10:42.864095Z","times_seen":627,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/image_6499a8936200143cdbce9dd84f628c77ed25c7cd.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.415Z","timestamp":1781593730415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /image_6499a8936200143cdbce9dd84f628c77ed25c7cd.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fDMitmNblyjJCyntHbaSP9PIccSl9SLW0%2BiLY2b2f1uY%2BsqxO0Vvecze9J5byjx8cF6vkbY5PVuzy1mJfk%2Btjh2%2F0Hv%2BX2Cqs8B33w6cjo%2BLfSc64fT7MI%2FZdQ%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-89b\"\r\ncf-ray: a0c7fc4f1a3a56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2203,"size_decoded":1876,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2453bde6c21392341f27c6d2152db2cd","sha1":"6499a8936200143cdbce9dd84f628c77ed25c7cd","sha256":"5fd26b35cde9423feac2a555312cd5a8e32bc07d934c59e6b750bdbdebac5049","sha512":"8417ad500c4643fcf4333cede2ac6b93051a97d29bea9e731d317156d357c3d8e394dce7a25e213bf07851b2168ab3a982473e298aa4d8ff7b41400e56dfbe35","ssdeep":"","tlshash":"a54181ecb71498bcea9807bfb61420d8361981f93a2740de903e339034219adc414ccf","first_seen":"2025-12-18T09:47:26.931007Z","last_seen":"2026-08-04T01:24:53.111576Z","times_seen":139,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/wallet_solflare.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.421Z","timestamp":1781593730421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /wallet_solflare.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XliinJX%2FUYumydSKvOLStuHkcthnpHAhZJLl3bt75iOArRawFf0%2FdfzE1n1D1M6TWDvfiJMKg2VZ8H9K0Cm7OA5mvb6jWc5TkTKjMLycbpQjYY4UnnQFLWjaMAk%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-3fd\"\r\ncf-ray: a0c7fc4f2a4056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1021,"size_decoded":1529,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d559b3c7bf65f2029dd8c0acf2fbfe9","sha1":"9c7d272dfad966afc017026c7cca308f86824e86","sha256":"3657af4bb3ce6c20f8703d7620cd965a6441d0806121cea9c5d013ff793b298e","sha512":"05a78b75739fd9fc440adff181350371dfce5ab8d6f7b3fdf0ef001654657a142bd52ef228fa3bbb248b159b360eaec26a80291797bf168e4f02133ef46ee357","ssdeep":"","tlshash":"a311125a033c3674d6e64d20a528b0c326b2b0c5825471eceab35b722229af244b0a78","first_seen":"2025-09-23T12:59:34.155422Z","last_seen":"2026-08-04T01:24:53.138853Z","times_seen":133,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/stream-video.mp4","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.784Z","timestamp":1781593731784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=2686976-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-2c6b4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 30145\r\ncontent-range: bytes 2686976-2911051/2911052\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m2KWFk3YoGH9WQhFGmgD2EafB%2BrwFGYyGSBY3RbL0IThgrx4RiUcFxL7v%2FV1hClZWxrJWSUxcs0W27aK50pwD7HbCZtQb2ENv6rrbYt1SwBGP3QHy0djyzu1j2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 224076\r\ncf-ray: a0c7fc57aaa856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224076,"size_decoded":225032,"mime_type":"video/mp4","magic":"data","md5":"50be76425bd97896c6ca5ce8b47e0344","sha1":"a1eef451690ac6aa0a5931d9baa34adb398f1bb3","sha256":"fd6873b4eff5bc8529370dc61c4f50d5191fc0539427a8bbaa74fb234724f459","sha512":"7ad7130ef487ae590125bfd488cf30814f34f73b6538cda43272c9bc9befcd95c11ef235415f71fc7727466e1eb6f04ce80172471ae9ed3b40ce6ebff3cea5c9","ssdeep":"3072:iHVTKivHN7GBDZpBX6SoWOpTthBM6GlyXFKDVF6vK3OgZBrncJwnRCf5R8Fd1xTr:WTKi17wDBE5+Qrt61QFF8l","tlshash":"eb248f9dbb04803bd6a15372e8f107243372d4a817d7034f4aaca73d4e993a86eb6dd5","first_seen":"2026-04-12T23:10:39.54337Z","last_seen":"2026-08-04T01:24:53.100217Z","times_seen":26,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://puump.sbs/index_2.html","date":"2026-06-16T07:08:52.957Z","timestamp":1781593732957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js? HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=yh3khR1oeldPb2ifuc_9YXJ_K3pseriupRcMQguJKDo-1781593732-1.2.1.1-XacEGBUJzyMMnJKo81sUhpaLs7HwKvaBlEJJ3hhdeT.p2LBEpXKbXJ4PV9zLwKSav9kdkV6tK5cL59wFuLEpvU5G2RnIvMZ4CE221lJnESoH7FD7QzZ_cZ1R0SCPc3lj8NluaWcKTlgwvNAfOOwtRMSl5R.PabFvFPSfk0abU6h3IL9JNpVMA8Mw.QQQqYdkh8S76F46TnL8uWVM5FM9iKs9QUUes27KulP4s7IUgxRUBN2ZT52fuGeUXlyHzsn3ahktV7JzujQJElLhVhqY0jOlrTwHfrN8vwcs6jYuSOMiDdMevzqW7or5pK_c29U8tfPbeaH870FsPQR7Lc8iUA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: zstd\r\ndate: Tue, 16 Jun 2026 07:08:52 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc5efafd56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24545,"size_decoded":11385,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (24545), with no line terminators","md5":"eb0b9c3abb3363e32c34271180bbb7e8","sha1":"c62633af6faabe37c0f8b8f4af9296251f076ea3","sha256":"8a8267e7b93c5c9bcb5f621ad3c59ccbcc8977e97f9007750ab6c3138774f7ea","sha512":"936e64f618444dcf6035f47130ac267914e76e52b01ac0b08934386f04d9fe8b5a3d31fe469839dbe7308a8a0e1e0032448ab4bcaeb2bb3b0fbbb3508ca388e5","ssdeep":"384:SuwYlXwNTjJXO7Z1s4JAHP//5yhS37T02BhUSO1rJ6UTyIXDPQ3bB/ep3jZ/:SylXwNvlqQPHJ7dA1V6H2DPQ3bB/E","tlshash":"bcb2f9afbce5702c7325a9b414777cc7766f6c04206a042cc150d9bebcb372989e6da8","first_seen":"2026-06-16T07:09:33.863918Z","last_seen":"2026-06-16T07:17:19.893724Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc557a8956b7","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://puump.sbs/index_4.html","date":"2026-06-16T07:08:53.493Z","timestamp":1781593733493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.21354786912931023:1781590223:eYxrlq3f765Wv5aYQpwQ5l0-_dcIxZPeAxSwgQi23YU/a0c7fc557a8956b7 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 13250\r\nOrigin: https://puump.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/index_4.html\r\nCookie: cf_clearance=aXrLlAkrO6czH6hb9ifWqkjz.Gm9egBZtZOUtvKWHxw-1781593733-1.2.1.1-QwycdpCcoPHnmyURkvCUrcyp0xZsj.bgphWF0HMZdnOICUKklI1ft7ghqcOzwg93zKyhdtps0CBRUnF_rGxX49EAZMD4zk_pmxGaIPGUeJCUWLSy8c.r1e2TJvXc_2Q5tPLXjjMNkfN1OVBiVlYPI1mu.TGMc.gDcUJX51J3O5Sk60N68PswHVPL6t3pKQDHV4qyNPyuDlupdZXSnG4O9_pBOBRy7j.YPvkWPHaG50fERI31qG8WIdnMuyfN2dGHFfKKHYQkGaATxgxD7EsBy8hylTU9w.AJYS.o6tv8WkJzWWglcJqYbJd1XMq24Z3SBMuNCmIbQMhUUYQoNRB97A\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: hIfjFNda7HQ6GzpWmChjzusRLkulvL0V5c2eSyB3yzGVD3wpTdajQve6H6j+JyBlQvXpCKZUzzqFl8mTxIG2ZOGnFiHQ3+H277HD7pO5kNjbYWzUbTAp/9QbIm0TmnOOIX8VbeRicbfdXJ/aWytqUYn4pte2b2H1jigpgdWLcMfHkXQorGt3ICwqlVAyZX5EEsA0nbKPqcNuHt32LROKPgoSTEUQ6mLv+NPFItjmvYXmQjGfVgf5BJpx4oqNIHfT2OkRSVbRoHzU6CUWPTK32A==$4e5Gnn0lh0RTa0Xl2l8wYw==\r\nset-cookie: cf_clearance=u9BTsuz4Q9p7O_CMfdznDhhofUiEeWZcVzZ2tLATW.g-1781593733-1.2.1.1-t5ZHcqkAya1LbV4oK.yyvKObWiowDZ_gz.togIQVi8h.AWr3t_CabnFl_NLsrZjZOSq0TK96E1tH7hYiUI.E4kmddazVrtiUyU_92qQbZVXo_0HfIhl7_YFnKrMPnpUzrXvwZlr_DHCWvEuJMTTt6kt9Q1Lqz4aqk3jx7vn_BNf8QHW0oQTcV4RnbkdO69xK.k6VIlFiWYtXnJx5oFvO3u4UNb1VyDtFgzhzrB0pcwgBva8z7EBA5DFvndqdS_kAwtbIzr0t7gms_eqHJXJeJfLTbytLqnCJJYDfWfkJpJBnKMdYClgx_3pwuLjAKzaXWvixsUJLZo1W.hCsGHgnIA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=puump.sbs; Expires=Wed, 16 Jun 2027 07:08:53 GMT\r\ntiming-allow-origin: https://puump.sbs\r\ndate: Tue, 16 Jun 2026 07:08:53 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a0c7fc625b2456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":15449,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T05:49:09.859766Z","times_seen":17794170,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/QmeSzchzEPqCU1jwTnsipwcBAeH7S4bmVvFGfF65iA1BY1.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.409Z","timestamp":1781593730409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /QmeSzchzEPqCU1jwTnsipwcBAeH7S4bmVvFGfF65iA1BY1.html HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 30143\r\npriority: u=5,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9WVOTUakrOm6VqDg14qySDuzOKUD21B%2BmhWjbWEVMv9HzWY3SAzrRmI%2BAP8NIcwCUr0MzcFS%2BdI2o2Lf8vI3hKKhENLsdt3%2Fw%2F1wK3dOYKU2U3Kkr%2FHBgRsThA%3D\"}]}\r\ncf-ray: a0c7fc4f0a3756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"C3.js","description":"D3 based reusable chart library","website":"https://c3js.org/","common_platform_enumeration":"","icon":"C3.js.png","categories":["JavaScript libraries"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4340905,"size_decoded":101433,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4092)","md5":"9da31dc01aaf095bc452f89427dfc4ee","sha1":"a735efc9a0c3010cadca7c5b6f16a8ab1b274746","sha256":"5dc41b29f7ef85ce6f89956473de5a1b10dc9b7ac5bb71220e077159f0c8a676","sha512":"09d41adf357a8d9a43d52750f54e1d50055c206f4cbcdaf334af95c0c10233ee6cf5beac20a4b2581e22e70254bd5f8f05ccb1414ff7efa2c0a750a9ca90280c","ssdeep":"1536:7/r+ahw0txluWyXcLo+TVXYODMfciGSJBAcqj3L3FRuo5nSX/7RzVgqqVu/YFenE:7T+aK0n3/IZbAFR9GlzGDbaYZYgSFM","tlshash":"ec25aaf26364d69500cbcd78fa32ee5aa2d7e5b7f827620873dce6811f4a4a28d53054","first_seen":"2026-05-02T21:27:14.142981Z","last_seen":"2026-08-04T01:24:53.110306Z","times_seen":17,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/image_4bedd7a8bb870242463c32dd6514110998619883.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.412Z","timestamp":1781593730412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /image_4bedd7a8bb870242463c32dd6514110998619883.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8rIm26igjKnAXjYJkN4YpBN%2FyDQVTpR3n7phJySpTm5D9zGgjJurfDbTLvK3cLlkziOLadu6nkjUgYDrSjGavCaX36TWrCXfqkH6RdvrgcCzmH34a0k%2Byrtk%2Fg%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-115\"\r\ncf-ray: a0c7fc4f1a3956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277,"size_decoded":1096,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84e69edfdc5f95304ca09ecdb8b4470a","sha1":"4bedd7a8bb870242463c32dd6514110998619883","sha256":"99dfaae864d697c0c85271501b1c9d3fa055bbcd5891ff143412e482ddd05226","sha512":"b92795a66c3d7f0691604f8448fa2a68bd1e8627148b5d22b55de5805fe9524246d3130e9f69d5613cf42b4f25b34edee62992238ee14cb56599f268fa367469","ssdeep":"","tlshash":"53d02b15530cad1cfe228510c35c723950ea62521b5e054ce9622235751c59f7d3fadd","first_seen":"2025-12-18T09:47:26.941018Z","last_seen":"2026-08-04T01:24:53.099554Z","times_seen":143,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/wallet_tokenpocket.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.423Z","timestamp":1781593730423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /wallet_tokenpocket.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fvq8NsdVtJ2tw4x023DHY5of1i3nWUV3D9dTN6imPIs%2BBCNVMAlve%2B0pPnggYBMl6AJ%2BSB7vIli6N7dhXGkBk1Wt61AmkGfA86j21uXHzOBZ3L58j2law9fp3Z0%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-8ac\"\r\ncf-ray: a0c7fc4f2a4456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2220,"size_decoded":1937,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8b05a7db1289009d5b1cff1fce3c318","sha1":"2960c5887c4fc46e03b54edd9c3a814930adae58","sha256":"8639f1b554805fc4f701a8629deddd603c18f622b60d35f63ad686032b91b549","sha512":"adef4da670e5e225fefa46f3f37dd92a6d92a7414b71b07a208c218bdfbfe349ed4cd022884da8caddf62bdb55aabf6f42b5578fc5f492c2961057833ef552ab","ssdeep":"","tlshash":"a84111e93b94d4505114979b7f7874bcc42bc2c6a98588d1d0517f1f64981fe2d2efc1","first_seen":"2025-12-31T12:24:56.570544Z","last_seen":"2026-08-04T01:24:53.112784Z","times_seen":130,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/stream-video.mp4","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.377Z","timestamp":1781593731377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /stream-video.mp4 HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-2c6b4c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 30145\r\ncontent-range: bytes 0-2911051/2911052\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c0gtZfay3ha%2BWoPIQXuCaAX9MOTLbimEUxkkXErugpnBShnFPvSCK3jjR3JbvJWjXIHIZE8pm8MjM8p6obHMCEuicXOpKD%2BgZ%2BQnL6VznVMN44ocMtdjrw89IoU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2911052\r\ncf-ray: a0c7fc551a8256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2132490,"size_decoded":2133443,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"7d0cf68fe3a5186fba5097615532eae2","sha1":"1bce7c232f8f012e8c31f4bd291c541e762c4986","sha256":"225c37f087287ae6c320d2e76a5739426574a2ef6dbd527b94a4ba2e8aabd0fa","sha512":"3bbc1e75c348fd8e8e9b9e1bf149ec6deea5d974c9359f0cd8b1a6c3858a308715f1e32ec3a6b04b5d58d6e11c668f3ef1b776e6b8e0cd312072e57b9fef55ff","ssdeep":"24576:IWeJxcPJMQohgp507DxGhuFBz1I/3C2bJDAeDqNaZ:pbhmIPuFF1I/3KeWNaZ","tlshash":"9625128960f53330ca69277b21ec6d03a7c7f526cafe1b2b554c44a691874c3edda943","first_seen":"2026-04-12T23:10:39.531445Z","last_seen":"2026-08-04T01:24:53.136088Z","times_seen":23,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":382,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/QmTbWsPMUHRbCarGWtsGaP2bcynNMvzWMQw5MgVYP9vprW.gif","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.384Z","timestamp":1781593731384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /QmTbWsPMUHRbCarGWtsGaP2bcynNMvzWMQw5MgVYP9vprW.gif HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: image/gif\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-22b27\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 30145\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HozfRMwQQQBu32cQ0ObJemn%2BXn3x%2Bz4zU3NvFSWz4Qr9zJK3M0%2BVuT4XsCO0jBn2e%2ByNXrGoT96giOJqSMxcrijIIgQWe7YM8Zm3OwP4ny7xDXOiK1jt5IFRT6Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 142119\r\ncf-ray: a0c7fc552a8456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142119,"size_decoded":143051,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"5a2e6c28f5368cb6e21828050b00f59b","sha1":"cf8c655b5bd0a2e593b15f09e688e02c33df1fbf","sha256":"1dc36240e6ef1014a5674165a37be6cb521d57563e77f6d8240fc09617995a44","sha512":"55e87c1f5e6072fb29dea2c177f42b1a1b0e6c1f110d559d052ffd1032d1b55b283f4a474be9e3c60b345c5cef6a4b25b571e8f20ffda7966eb6222dbecdd88b","ssdeep":"3072:n+MntJ7StAkJYLBXiaHePMOeKb0yQjpYZOIMey:+MtJ7StDYLBXrHjOeKb0hjpY1Ly","tlshash":"67d3024eec690ad0fc162431596ddfae162e6289cc10fb06ec6007e875e506b92f67f9","first_seen":"2025-12-20T19:39:47.743294Z","last_seen":"2026-08-04T01:24:53.113952Z","times_seen":120,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/index_1.html","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.398Z","timestamp":1781593731398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55S9DYgUN%2F5z4RJli9vw%2F%2F0%2FoDYGS%2BL9DJg%2FLsS3HYNQtn8r7ufIvZoMx7S%2Fc6Ies6HU4a9U1RtKQ%2FuLSiJYhPlHGpRmO887fw5Uep4Gps8SUJc84BvA34MkHMQ%3D\"}]}\r\ncf-ray: a0c7fc554a8656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1061,"size_decoded":1468,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (1061), with no line terminators","md5":"f8d2989bf37e683950eec9e3246f9b83","sha1":"162f0b987ede955093455b0f626cb857bf2f91c1","sha256":"00bfd6f36b570a7023f9efc7f640cc8cd9f80eead8d72b08bc6c3483d1171e3c","sha512":"a8064dbf0afb24d7aa25236994bad49040812cf502877df41b08204e6cf4541471f4ef02aa535a710fb16f52fbe90627d59ce4b229bb062029dfae8232f85d2d","ssdeep":"","tlshash":"bb1112753e1545349ac54187227ef7e83d3260347a129044d2accc289d18e93049fcae","first_seen":"2026-06-16T07:09:33.875152Z","last_seen":"2026-06-16T07:09:33.875152Z","times_seen":1,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/wallet_metamask.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.419Z","timestamp":1781593730419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /wallet_metamask.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2FFFEHAnsXrF%2F6hLPfxt4m8P5DYYFtcMbEt2v6Jf8FAzppPZGsOOgFB%2B5E0XNDu6GEP5wV%2BGjSubNw0FHLDev2X6PvNvp9l7W0P0B53EkFfUhwzQgvAhl4KvUU8%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-676\"\r\ncf-ray: a0c7fc4f1a3e56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1654,"size_decoded":1696,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1515717ec860410450bca1a8ff648326","sha1":"d3add77c919057501b4dcc619a2178c3be401b85","sha256":"fe9211cd30dbcbbbf40bc3dab22c8f29e5e8c9159085c524e93ff0d555a4f7e0","sha512":"f51d8d0d53db239f3d0317bfc6e4405a657e6f406764355a29900c8a05b9726b344e2167fcffefe463a99c700d4b115a2fe16bb1b0d5ffcf6b0ff8f72524f545","ssdeep":"","tlshash":"3d311284e1b90bbd180357f0c528b5e375677cae6b6483e8248843b02107befc4d466c","first_seen":"2025-09-28T19:09:38.680842Z","last_seen":"2026-08-04T01:24:53.105862Z","times_seen":133,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/wallet_coinbase.svg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.422Z","timestamp":1781593730422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /wallet_coinbase.svg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H6Tk9UvGxGuM9CxOocPFdMMDcZAl2pqy0bew%2F56ZC7VWD%2FLWAH4O%2F4BmuwbtFpggJ3LjyuNGJ72Zkgb7Qc%2BTGLYVrT5CPTMhMxvSQa5tD6Y2f5pYYLMoFnL7vVk%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a2daffe-206\"\r\ncf-ray: a0c7fc4f2a4156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":1218,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"03d813a0c0c8a475559c8cec40f5d1b3","sha1":"ea4813335e225371c30a56027e2f7e54e247e5d5","sha256":"eb728f9afa3b934f43dc77e99914c2fe62124c056fa6b1c3d00c8b80c917acf4","sha512":"9444c473e807bbc985a03cf74ad5b06cab25237d848c1fbdb6a1b2622a6dfdfc1271adc19df88b0b503d60b5004c54dcbe4c357b9929e735bc112a4d8e61af5c","ssdeep":"","tlshash":"e6f0246f7438a191093cdf786e3ae6c8cc07db4886c5c6ddd3202f055202f851909a86","first_seen":"2024-09-19T20:57:03.484662Z","last_seen":"2026-08-04T01:24:53.115228Z","times_seen":158,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/math_wallet.jpg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:50.424Z","timestamp":1781593730424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /math_wallet.jpg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:50 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-3c20\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTMvTq3nY4ANBS8bpnC1Z%2BgZRoDEF3%2FQYhGdnkfigP%2BtBePASqNbZTFtCdj7SPhQ9%2Fn69S4rvb7SKKYGTAxU8nE4BGIcgj3jsjaYSBwng0qm85XA9YodI%2Bzmv0Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 15392\r\ncf-ray: a0c7fc4f2a4556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15392,"size_decoded":16314,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"ca7e678bdcb1c57f6507b027a35460b3","sha1":"391a4acca26995c78698b6aebfe613f76bf96504","sha256":"318c8ec85c792f74dbd1c9e0e0c6d2bf0444b72f72cef6ce0d9233b8ec89bd22","sha512":"84de1b6bdfbd89f0057876ae93c05a993ffa57695603e78f3f790e67ca47a0083a919adf01295a93e77ccbc65dbcf4b888f4acbfa634363fb68fd4122b88f451","ssdeep":"384:siQPzejPLrRJmPO12SVCcqxvm/A/gofuW8+iN:50SdMm12YCVxwA/goWVrN","tlshash":"8362c01383603802cd3fb67076c0e722db753a2a445d2da5121fe937af4d8a15d5d1f9","first_seen":"2026-01-13T00:13:53.398076Z","last_seen":"2026-08-04T01:24:53.140861Z","times_seen":118,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"puump.sbs/QmRNZ8dzk34RhMMyoSiR4QzHCbSB4Fo9utMMsLG1mtqaua.jpg","fqdn":"puump.sbs","domain":"puump.sbs","tld":"sbs"},"ip":{"addr":"172.67.217.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://puump.sbs/","date":"2026-06-16T07:08:51.386Z","timestamp":1781593731386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"puump.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 16:50:07 GMT","end":"Sun, 06 Sep 2026 17:50:02 GMT"},"fingerprint":{"sha1":"5B:FF:16:9F:77:1B:3F:82:E0:E7:FE:B1:50:EC:8B:C3:E7:56:E6:5D","sha256":"13:4D:15:8C:95:C8:5D:A2:7C:1F:0B:C9:48:DA:9B:69:7D:95:F6:68:17:D0:E9:FD:15:10:70:A9:A0:32:8B:0D"}}},"request":{"raw":"GET /QmRNZ8dzk34RhMMyoSiR4QzHCbSB4Fo9utMMsLG1mtqaua.jpg HTTP/1.1\r\nHost: puump.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://puump.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 16 Jun 2026 07:08:51 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Sat, 13 Jun 2026 19:31:10 GMT\r\netag: \"6a2daffe-533\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 30145\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKSA2e58EoAaReF%2B%2FiOyM314FY0Q4NQwTEaICswveh2O%2FI0%2Bwkzz6g0skAq49pxYVgjFAzqp0JCo7Yo9SWENL319aaG098yIaIQUTstfBc55r1BktHuTX%2FqNrog%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1331\r\ncf-ray: a0c7fc552a8556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1331,"size_decoded":2262,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3","md5":"2f4e2ec11d224287a3012da780a67ff9","sha1":"4394b071e38e95205a7c1d42e34003a0321d6700","sha256":"7fa8737433a619abe632d305306e6b00201e5a16159ee8ce3b92262081790341","sha512":"e485cac6ec1478e9d874e96fa1f716989b178e8ec17810a3b5a1e99ecb0d50562d71320b74dc7b72e2d4b1699105be6ddd9d31d9d292b554cbe5dbb17c28a384","ssdeep":"","tlshash":"d721c5aebf38e4a3edcea3b407950d326803b9c3105d870a9141ecd510ff042479274a","first_seen":"2025-12-20T19:39:47.628849Z","last_seen":"2026-08-04T01:24:53.11221Z","times_seen":124,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-16","alert":"Sinkholed","trigger":"puump.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
