{"report_id":"7ffa09d7-1d7d-4bd5-8b95-8e484fe18b87","version":0,"status":"done","tags":[],"date":"2026-06-18T11:37:22Z","url":{"schema":"http","addr":"protection-pump.fun","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"104.21.49.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"protection-pump.fun/","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"title":"pump · cashback","dom":{"size":19645,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15907)","md5":"d16e8741baf1258302a88ed00cea9fb9","sha1":"71875b196872d24ad90c03bc3952f9241f446b02","sha256":"d1d13f128bc228e819c500c398e49dc95e54e3abfed2bfa4be577d897782cc3d","sha512":"2dbece4b2c844d61b7c86e8959f2441243a8d1c1c5512841547e0dd69101446610e016973a18d5f007d522d633fb62ede8458da93e989baa8e9cadd99c74de7a","ssdeep":"384:+LCbv5v4wMWivNuUXvBAgcylMr0ydGEihQharsvI:+2Fv4wMWANuUfBACluG1Char/","tlshash":"3492773113141d7e721b4ba8f125b379606aa34ad92f5428f2bd13716bc9dc8ec739a8","dom_hash":"domhash5a11fd01fa30942276315fed8f396e85","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"protection-pump.fun","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"104.21.49.127","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-23T11:37:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"protection-pump.fun","ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-15","domain_rank":0,"first_seen":"2026-06-18T11:36:11.669329Z","last_seen":"2026-06-18T11:36:11.669329Z","alert_count":24,"request_count":8,"received_data":719736,"sent_data":4048,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"protection-pump.fun/","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0fb06e7993d07a547f0d44e329e84d82","sha1":"7888b659e87634d61ddc8789056ca88eb9c8c3e5","sha256":"9699913d046aae8cc7b665cb96592cc7211d062d4a32c9c9d7cc78416f17236e","sha512":"5005e44a0b63121c7fd0e9509d225852ea0a134dcbf6d2bb8fc5f346decce7c960b6e1d4aa4d05988d72b3dfd5fa2388ef3e8c0d194fa05016ca8fd54743fb8a","ssdeep":"","tlshash":"85c08040c5705d704d2c14e75078e2c6bc509e5d509260ded6fd9dce6c8cf4216c8518","size":180,"data":"","first_seen":"2026-06-17T14:29:22.322364Z","last_seen":"2026-06-18T11:37:23.82878Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protection-pump.fun/secureproxy?s=%2Fipfs%2Fl0PzV36Ate5UdBChy_yN5w3bdd8c36bb20d34b036f427640a31f7c%3Ft%3D1781782610507","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a32c699717d04135a9960dac50708e65","sha1":"c66eecff31237ae58607bf7dbe27df11dc331c50","sha256":"784842349849eda8cc4f46226219402c33dcff8a6f55f1023a7a0483a7994032","sha512":"8a1a784acf08bad93e2839c2ffaec6e7e1e1c44b4a4ffa8f34df81b4dda887c3c5336a460ddafe5da1a6bde9126227f61e37f4d2c4797890c58fca8e714d6edf","ssdeep":"6144:Bh5gDbQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsbQDC6m7hFqa/J/","tlshash":"04d4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","size":619155,"data":"","first_seen":"2026-06-18T11:37:23.823967Z","last_seen":"2026-06-18T11:37:23.823967Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"protection-pump.fun/css2.css","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protection-pump.fun/","date":"2026-06-18T11:36:50.573Z","timestamp":1781782610573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protection-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 16:05:54 GMT","end":"Sun, 13 Sep 2026 17:04:20 GMT"},"fingerprint":{"sha1":"56:2D:FB:93:ED:2F:CE:48:8C:9F:D0:91:48:54:B3:73:A3:B3:78:E4","sha256":"64:22:9B:25:76:0B:16:96:99:16:32:63:C5:85:9C:15:C5:61:83:72:53:93:05:B9:12:13:87:54:29:53:CB:29"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: protection-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://protection-pump.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:36:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 15 Jun 2026 17:41:40 GMT\r\netag: W/\"6a303954-1dcc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJ%2BlaPeYrMg4cNbk%2F2enV7gu19w61XNe%2BL0ASVz%2B3eNbQlX0HdOV4muh%2FJKV7k73vpxs%2FauvXILZ3xxY5ZgeVkMcnfPvpRz2s3NEIlTguuE6GKp4j4%2BjHOqiCfTe1gsmlxdej7vS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0d9ffa419f0712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7628,"size_decoded":1615,"mime_type":"text/css","magic":"ASCII text","md5":"a945690afba190bdf35bdbc8dca91152","sha1":"d93d79ba5c4ff541fb62d683c5d6b488b9f53ba8","sha256":"e3588f89e8f3d36d7befdcd1ad777d37963acce98132704f84f1d7ab2d5e1b4b","sha512":"72a22e14d311d595ee72e60b3ae2692c0cf6745594fab8f6f60c522f0f91a227d67e0dbbbc34e4fdfae78e152a29498981398ad2f56e511e7abe26664268a393","ssdeep":"192:9/NAPt34yaDD/OnIt3/ha8G/rKht3iIall/E5yt3RPaGc:JwSfyGKVm","tlshash":"ebf14490046b9400eb872cd277cf7f376d9da148a045c9795ffd1898acded2613a1b4d","first_seen":"2024-12-17T11:31:53.647668Z","last_seen":"2026-06-20T23:46:59.40203Z","times_seen":536,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protection-pump.fun/secureproxy?s=%2Fipfs%2Fl0PzV36Ate5UdBChy_yN5w3bdd8c36bb20d34b036f427640a31f7c%3Ft%3D1781782610507","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://protection-pump.fun/","date":"2026-06-18T11:36:50.575Z","timestamp":1781782610575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protection-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 16:05:54 GMT","end":"Sun, 13 Sep 2026 17:04:20 GMT"},"fingerprint":{"sha1":"56:2D:FB:93:ED:2F:CE:48:8C:9F:D0:91:48:54:B3:73:A3:B3:78:E4","sha256":"64:22:9B:25:76:0B:16:96:99:16:32:63:C5:85:9C:15:C5:61:83:72:53:93:05:B9:12:13:87:54:29:53:CB:29"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2Fl0PzV36Ate5UdBChy_yN5w3bdd8c36bb20d34b036f427640a31f7c%3Ft%3D1781782610507 HTTP/1.1\r\nHost: protection-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://protection-pump.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:36:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"97293-xm7s/zEjeuWGB799viffEdwzHFA\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=V7UU9dFEyURn9vr2n8cx9A.js\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/18/2026 11:36:51\r\ncdn-edgestorageid: 879\r\ncdn-requestid: 68e1224e95740511b193c60c279e8734\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hPRrMd1ObJuLh%2FTJ7lkzltLRHG66DiZEzC%2FDXSmAQ5nim6lJQdngTbTlqut0m1OSxgWwfyYDU6xafeHU5CQA3nZk0GbEPUIedLTDahCMZoGFfdY62wCRt%2FwpMNTMMTFzSf730%2Fdd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d9ffa419f1712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":619155,"size_decoded":136724,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a32c699717d04135a9960dac50708e65","sha1":"c66eecff31237ae58607bf7dbe27df11dc331c50","sha256":"784842349849eda8cc4f46226219402c33dcff8a6f55f1023a7a0483a7994032","sha512":"8a1a784acf08bad93e2839c2ffaec6e7e1e1c44b4a4ffa8f34df81b4dda887c3c5336a460ddafe5da1a6bde9126227f61e37f4d2c4797890c58fca8e714d6edf","ssdeep":"6144:Bh5gDbQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsbQDC6m7hFqa/J/","tlshash":"04d4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","first_seen":"2026-06-18T11:37:23.823967Z","last_seen":"2026-06-18T11:37:23.823967Z","times_seen":1,"resource_available":true,"data":null}},"time_used":924,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protection-pump.fun/favicon.ico","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://protection-pump.fun/","date":"2026-06-18T11:36:50.582Z","timestamp":1781782610582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protection-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 16:05:54 GMT","end":"Sun, 13 Sep 2026 17:04:20 GMT"},"fingerprint":{"sha1":"56:2D:FB:93:ED:2F:CE:48:8C:9F:D0:91:48:54:B3:73:A3:B3:78:E4","sha256":"64:22:9B:25:76:0B:16:96:99:16:32:63:C5:85:9C:15:C5:61:83:72:53:93:05:B9:12:13:87:54:29:53:CB:29"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: protection-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://protection-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:36:50 GMT\r\ncontent-type: image/x-icon\r\npriority: u=5,i\r\nlast-modified: Mon, 15 Jun 2026 17:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bc%2B2eJ66slz3lP%2F%2B3y%2BQj3hYebaHbJSHIYdIKp3U4ZPlNXj%2Bt248boyev9uaNM312uBRNeFTeqox409I2siClfOKE38Jp8lmVQG97%2Bhs%2BaAzhC2I1gxID0ATtAhMJJJ4xA22zkhf\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a303954-3d49\"\r\ncf-ray: a0d9ffa429f2712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15689,"size_decoded":16597,"mime_type":"image/x-icon","magic":"PNG image data, 475 x 475, 8-bit/color RGBA, non-interlaced","md5":"1f0f65e2788a9785479d354d9d8981f7","sha1":"413af43076e6b305fd4becc1a406fcf033945d55","sha256":"760c155758f9ed317e91affdaec817a47e3567a0852ab0bb1db27ff65825a00b","sha512":"1763b66a2017105d870910ae282b0d9e2e4b0fa2ae2b9e18806009fb2691e461224ace9ff168eef25671e76eb0d2ba778c0ad7cba169c4e16c91d1ef58f2f134","ssdeep":"384:95sBkBfKq706HvMmI962xZaS1iGoup1X54I/dde00fyrtbesxI:8BqfK16HpW6gr03uzB/pwyrVesxI","tlshash":"2662d1acf98e2440ea6854781058c9a25e930ee02d15cf3b793c3c758ac6f8b1e837e4","first_seen":"2025-03-05T20:42:39.911763Z","last_seen":"2026-06-19T04:53:26.212758Z","times_seen":255,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protection-pump.fun/pump-logomark.svg","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://protection-pump.fun/","date":"2026-06-18T11:36:50.890Z","timestamp":1781782610890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protection-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 16:05:54 GMT","end":"Sun, 13 Sep 2026 17:04:20 GMT"},"fingerprint":{"sha1":"56:2D:FB:93:ED:2F:CE:48:8C:9F:D0:91:48:54:B3:73:A3:B3:78:E4","sha256":"64:22:9B:25:76:0B:16:96:99:16:32:63:C5:85:9C:15:C5:61:83:72:53:93:05:B9:12:13:87:54:29:53:CB:29"}}},"request":{"raw":"GET /pump-logomark.svg HTTP/1.1\r\nHost: protection-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://protection-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:36:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 15 Jun 2026 17:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7FoQz2qrYcZW%2F5UA62TDG3qy1IFiKGVRTjwmS8ClZ5eFayxJNr6kWOiTEDfJYWiD8R%2FdlsejKiDcgCtLrbu06WjnOI1%2FQHu%2BUpmHV8o9DuDY%2FB3iWdXTGwzFJYn%2FuxF8DiIyhAR\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\netag: W/\"6a303954-a5d\"\r\ncf-ray: a0d9ffa61a05712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2653,"size_decoded":2022,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ac045d44726d3ecd7d70cc10fd98c72","sha1":"d3e2dbb1530f6a00a41c9467e977fb61048ed08d","sha256":"2c72b8e06bbd7be8823c2cce4bbe652ba7a36e35074b8a1b27fd668304816379","sha512":"488d3da62f6ba30a36f8bb106262c3342583a719402680e34ce6d99ba26db1aea5d14496d7427aa39544527a3d5f63a0030d6e32d48e4366e07aacd5db5d12a8","ssdeep":"","tlshash":"395171ff7b5448e5de86c2f8eb2a2adb782a24d97120464193d42f29780176c4d8ac93","first_seen":"2025-11-15T00:25:53.758655Z","last_seen":"2026-06-20T13:37:24.826245Z","times_seen":396,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protection-pump.fun/pump-logomark.svg","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://protection-pump.fun/","date":"2026-06-18T11:36:50.893Z","timestamp":1781782610893,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protection-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 16:05:54 GMT","end":"Sun, 13 Sep 2026 17:04:20 GMT"},"fingerprint":{"sha1":"56:2D:FB:93:ED:2F:CE:48:8C:9F:D0:91:48:54:B3:73:A3:B3:78:E4","sha256":"64:22:9B:25:76:0B:16:96:99:16:32:63:C5:85:9C:15:C5:61:83:72:53:93:05:B9:12:13:87:54:29:53:CB:29"}}},"request":{"raw":"GET /pump-logomark.svg HTTP/1.1\r\nHost: protection-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://protection-pump.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:36:50 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 15 Jun 2026 17:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EqZVz2NLpJM0QBU4xTOVDOyv%2FNRsZ8JiK4ckQQMeiC1LLw39ZVHHb8htsyQSv77PgV%2BjLkpS23EEClt4D8Vc1q8NwiqQKtQgD315SmxjqdEYkQ6mSX8vTyFJh62GhS%2F5Lx%2BF8MZ5\"}]}\r\nage: 0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a303954-a5d\"\r\ncf-ray: a0d9ffa61a06712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2653,"size_decoded":2025,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ac045d44726d3ecd7d70cc10fd98c72","sha1":"d3e2dbb1530f6a00a41c9467e977fb61048ed08d","sha256":"2c72b8e06bbd7be8823c2cce4bbe652ba7a36e35074b8a1b27fd668304816379","sha512":"488d3da62f6ba30a36f8bb106262c3342583a719402680e34ce6d99ba26db1aea5d14496d7427aa39544527a3d5f63a0030d6e32d48e4366e07aacd5db5d12a8","ssdeep":"","tlshash":"395171ff7b5448e5de86c2f8eb2a2adb782a24d97120464193d42f29780176c4d8ac93","first_seen":"2025-11-15T00:25:53.758655Z","last_seen":"2026-06-20T13:37:24.826245Z","times_seen":396,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protection-pump.fun/secureproxy?s=%2Fjmpd%2F","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://protection-pump.fun/","date":"2026-06-18T11:36:52.179Z","timestamp":1781782612179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protection-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 16:05:54 GMT","end":"Sun, 13 Sep 2026 17:04:20 GMT"},"fingerprint":{"sha1":"56:2D:FB:93:ED:2F:CE:48:8C:9F:D0:91:48:54:B3:73:A3:B3:78:E4","sha256":"64:22:9B:25:76:0B:16:96:99:16:32:63:C5:85:9C:15:C5:61:83:72:53:93:05:B9:12:13:87:54:29:53:CB:29"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: protection-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://protection-pump.fun/\r\ncontent-type: application/json\r\nContent-Length: 1410\r\nOrigin: https://protection-pump.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:36:52 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1781782672343\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 06/18/2026 11:36:52\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 9433ee29e791d27ead4f4305a35a2732\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6B%2FFid5p8bdfibNtDrTlEOLw8THZQ0vVtkRs8RLwmpCHg2zCL%2BZgwlB94brDKn8oDdp2yulp8TJkipKKJo7PirfwhUrC4Jpv74Br%2F22oqWndjgnbCYMYgElOMmTKE%2BHaukDNjJs\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d9ffae2a40712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3386,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-21T10:29:49.859728Z","times_seen":16606232,"resource_available":true,"data":null}},"time_used":762,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":762,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protection-pump.fun/","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-18T11:36:50.043Z","timestamp":1781782610043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protection-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 16:05:54 GMT","end":"Sun, 13 Sep 2026 17:04:20 GMT"},"fingerprint":{"sha1":"56:2D:FB:93:ED:2F:CE:48:8C:9F:D0:91:48:54:B3:73:A3:B3:78:E4","sha256":"64:22:9B:25:76:0B:16:96:99:16:32:63:C5:85:9C:15:C5:61:83:72:53:93:05:B9:12:13:87:54:29:53:CB:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: protection-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:36:50 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Mon, 15 Jun 2026 17:41:40 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\npriority: u=0,i\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=STCbfY4EH2l3SSQwOb%2FAevFQo0bK74FaSn1AQjEL1OKajePgUkNikBv7rgXNBQtL%2FveLo7gPb1kG%2FCtgyzLTvpqtF2XXjYV%2FTItO%2BYODhqxnG4r1XT%2BAvtQTcnmeIlSc9Bqna2c6\"}]}\r\ncf-ray: a0d9ffa119cc712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19407,"size_decoded":6015,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15344)","md5":"e35a9fafb35307f32061947e9c7c7ccb","sha1":"59463ea8ac170d66f71269b8c403311112b3c1ef","sha256":"53b52f11fad9f6ad212b0182d7dccfe74c614c2f6c535411b3a0f1b4ce8f1536","sha512":"48a266f7158124a2f6e67cdeaeff5bb92aa4b443eff272eb87b59d915fa72cb89425f53301d3d03f465d4eabe4485c4f0e671d63d992d2f82aca7f7f78d83236","ssdeep":"384:+rlvpv4wMWivNuUXvBAgcylMr0ydGEihQharsvI:+/v4wMWANuUfBACluG1Char/","tlshash":"f892773113141d7e721b4ba8f125b379606aa34add2f5428f2bd13716bc9dc8ec739a8","first_seen":"2026-06-18T11:37:23.827015Z","last_seen":"2026-06-18T11:37:23.827015Z","times_seen":1,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":15,"connect":24,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protection-pump.fun/d12bad996bc59f31.css","fqdn":"protection-pump.fun","domain":"protection-pump.fun","tld":"fun"},"ip":{"addr":"172.67.163.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://protection-pump.fun/","date":"2026-06-18T11:36:50.571Z","timestamp":1781782610571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"protection-pump.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 16:05:54 GMT","end":"Sun, 13 Sep 2026 17:04:20 GMT"},"fingerprint":{"sha1":"56:2D:FB:93:ED:2F:CE:48:8C:9F:D0:91:48:54:B3:73:A3:B3:78:E4","sha256":"64:22:9B:25:76:0B:16:96:99:16:32:63:C5:85:9C:15:C5:61:83:72:53:93:05:B9:12:13:87:54:29:53:CB:29"}}},"request":{"raw":"GET /d12bad996bc59f31.css HTTP/1.1\r\nHost: protection-pump.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://protection-pump.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 18 Jun 2026 11:36:50 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 15 Jun 2026 17:41:40 GMT\r\netag: W/\"6a303954-ac04\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrHjZ7BQgpQznYUDjOMiIAEbe%2FHB5lpqKlTJbC%2F68HDBoGESBn5u0E%2Bo20XFJ1s8dBc8W%2FPMjkfKmIkdb4MXasynDK1%2BvTby1zWm9QJ%2B8suz1WY9IvbO00MLvP9y705uPLArHzRt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0d9ffa419ef712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44036,"size_decoded":11988,"mime_type":"text/css","magic":"ASCII text, with very long lines (41743)","md5":"79370432181599f4a243fb9bde9df8b8","sha1":"515776a2d64118f7b6792ef07610719a82740016","sha256":"4fe57d957e1f221cbc093b546c58a6560e454b62625ce97b984550c35cdc9412","sha512":"897ea0d96a875b2e1d1469c2762427598c81131991d81245969b81d0a87ec4efdf1fc21bf9cd4b12db95de641ed4feac2878485021c5c7192148a081584f584e","ssdeep":"384:GHrwVHllqd71NwlPwMYcRvdAuSZMr0zrGVDQ2IDjy7YL4aYn:GH4lqd77wVpAKr0zrODQ2ijytn","tlshash":"4f13861eab15143f7c2780f6d1d4faaca11bb1c1ee3696eafe8215019bd12f72c63604","first_seen":"2026-04-15T00:20:32.381435Z","last_seen":"2026-06-19T04:53:26.200658Z","times_seen":26,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-18","alert":"Sinkholed","trigger":"protection-pump.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}