{"report_id":"8ef6d3ed-c155-457a-8b51-459bd5875bb6","version":0,"status":"done","tags":[],"date":"2026-06-17T21:25:18Z","url":{"schema":"https","addr":"mumu-claim.info/","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"104.21.55.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mumu-claim.info/","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"title":"Mumu the Bull is migrating to Pumpfun","dom":{"size":49093,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1115)","md5":"0b2f9898f2bf44910ea1cc01b2f6756b","sha1":"4ddfe1e1c992b7a79d6ee26eb25542a8b012a819","sha256":"e44d8cdd8dc1e9a8c9560577db3df454f537ecb9d19dffacdba1cf4f06e5fa61","sha512":"3adf4c3e67cd26b3b143bbeaa66590ad3dfde056ee1ac6acd38fed77c177ab2655d4c7ec9793decbc2b7e5fdb398eb3e365885f5912f90a57fea25aeebeb9880","ssdeep":"384:WMWSMX5t/LKg15vIcmHL734ILv0uw+9cWDnrdqoopIyODVRYpr:WMspog15vIcmS+9toFODVRgr","tlshash":"2a23951056f18572514281d2fbd59b28e66cc3a3c1720cddf3ed09a3bf4eca9998f266","dom_hash":"domhash5c4441addd264cdd37f99542b55f783d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mumu-claim.info/","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"104.21.55.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-22T21:25:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mumu-claim.info","ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-17T16:48:20.579063Z","last_seen":"2026-06-17T16:48:20.579063Z","alert_count":72,"request_count":36,"received_data":4412344,"sent_data":18323,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mumu-claim.info/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-22T18:32:09.270989Z","times_seen":375920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/secureproxy?s=%2Fipfs%2FKJt_wPM790bV7-Idzd8jJQ38618447fbafa6eea0a5e53e2a2fd22e%3Ft%3D1781731494965","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e4574d9f7e2c6a69b41c22fc020df19","sha1":"29d1030da46ea7efbbb03324fddc3a3f095aaa0d","sha256":"6907580ce72f9a911e1c4a2d7cb466393a46a41153134933701def347f5910a0","sha512":"971491d18426415cdf7ce4ec3bc1dc11ef0b4f4cc81bfb224c44a41c1226093c89c171235ebcfe2ebb168e6b84bf75a183af7efb679051b135c391373d5b4a51","ssdeep":"6144:Bh5gDDQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsDQDC6m7hFqa/J/","tlshash":"fbd4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","size":619274,"data":"","first_seen":"2026-06-17T21:25:21.572312Z","last_seen":"2026-06-17T21:25:21.572312Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2387b202fbfedf52a5f3fb8a0fb8be16","sha1":"eb20b6b233c19832beff0cd55ef184381adbdb2e","sha256":"6e76959b83f9aa7fd122b3b2fcdce60464e8260f46a47321073a6feeb03e6f0e","sha512":"27e90151cd6844855e7c77f94b6d79e612c62ce3de2a7ed25710c919bfaf485abae29a86071299788fbcc3157434c748b413389f90595f3476c13c828183036c","ssdeep":"","tlshash":"4dc080808260cdf4552c54f7127c56dc33513dbc015354d9c7fd5a5e985cd801d4c810","size":180,"data":"","first_seen":"2026-06-16T07:09:01.405101Z","last_seen":"2026-06-17T21:40:37.97594Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mumu-claim.info/secureproxy?s=%2Fipfs%2FKJt_wPM790bV7-Idzd8jJQ38618447fbafa6eea0a5e53e2a2fd22e%3Ft%3D1781731494965","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:55.013Z","timestamp":1781731495013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /secureproxy?s=%2Fipfs%2FKJt_wPM790bV7-Idzd8jJQ38618447fbafa6eea0a5e53e2a2fd22e%3Ft%3D1781731494965 HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: max-age=2592000\r\netag: W/\"9730a-KdEDDaRup++7sDMk/dw6Pwlaqg0\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=EOFAXs3rHe-maG4cLKRalw.js\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 06/17/2026 21:24:55\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 2d5a23361b3f14694866612dc97c4858\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7jI0fEJyAQSY2wXyCkSI3eD7nHvU2HthAaNsu3ARCkC22HTXzkJkn0vcsJTiAafJEIppZuTe0GiTztP%2FccOopGNgXzpny2NFEnxBzmB%2BzfGr4lpfwtBbA9XuQHnXu%2FIFFro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d51fb3cf700b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":619274,"size_decoded":137901,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0e4574d9f7e2c6a69b41c22fc020df19","sha1":"29d1030da46ea7efbbb03324fddc3a3f095aaa0d","sha256":"6907580ce72f9a911e1c4a2d7cb466393a46a41153134933701def347f5910a0","sha512":"971491d18426415cdf7ce4ec3bc1dc11ef0b4f4cc81bfb224c44a41c1226093c89c171235ebcfe2ebb168e6b84bf75a183af7efb679051b135c391373d5b4a51","ssdeep":"6144:Bh5gDDQDCMEWm7ECNF0gct3VyBKbMboOeC2PYqxQWNahLYzO5WuS2KImDnyJnUCL:JsDQDC6m7hFqa/J/","tlshash":"fbd4becaa73d377f5ae01aab0c2b413fefc80d1e216b09c852d1b8d9527970693d915e","first_seen":"2026-06-17T21:25:21.572312Z","last_seen":"2026-06-17T21:25:21.572312Z","times_seen":1,"resource_available":true,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":685,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/gallery-bg.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:55.021Z","timestamp":1781731495021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /gallery-bg.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:55 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-81f24\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16621\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5xN9f%2FpPvKdqI8To1ADHPcSCUzsJ1s%2BnXVz%2BJ0%2BkYPs7WEBI9aHn8Ie8hQUXz08X6%2BE6sDe9j12dzBNrAm6ZUqALD5AV0987bpDmuNkWWGmUASxYSj%2BDOAIniwsFF7LJJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 532260\r\ncf-ray: a0d51fb3df760b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":532260,"size_decoded":533204,"mime_type":"image/png","magic":"PNG image data, 1512 x 982, 8-bit/color RGBA, non-interlaced","md5":"5450f51445f1ac343292397832606a69","sha1":"7a4f0f9ae60095a57d694b3e8f696740aa10b4d7","sha256":"9b31f0b46a662f10954eab355c5329ee8f124519755e5b82528f31c8e7bd6741","sha512":"2e9a52a3cd991ccd1a28b747b375d71b9e7327eb6c73ba5c5ca6ad8b998998cdca2123a0487dc96119d04d904dcb7d7aeba1f3ce8087418a18b492f765f100a5","ssdeep":"12288:VShicdF6a7wEf3XXr7l9tUTg1Vj5uYfeh6h1ytUQjXAwpRVF20:VSk86ow1g1VVjeh6hzSXAwrVw0","tlshash":"8db423c4789b2b7afa93c117cb93d710c9cd7e8901d3d54d99f2f315d9aa0233aa4066","first_seen":"2026-06-17T16:48:29.129595Z","last_seen":"2026-06-17T21:25:21.573145Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/tiktok.svg","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.926Z","timestamp":1781731494926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /tiktok.svg HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2%2BkqMomHgtHA%2BeOxWx%2BEyX3RxVYOjZN3xYnJjtWEPzYCE3P%2Fd5P4leuK9gw2Ae08tzKut4IC2Sko%2F4t9efI375c28R79R1oKOkte5IAQMbRpAK0V93chzSAr0RIV9vfJuc%3D\"}]}\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2c2eae-27e\"\r\ncf-ray: a0d51fb34f6a0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":638,"size_decoded":1303,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f993511bac7254590aa8d68cc666096c","sha1":"e5b1dfadd0432752cb6af0b7226f99e3093d7f9e","sha256":"82da8b2fa13425ddb7f1d29115248d3660f916e450f7dc60380a50901b204d66","sha512":"161e3b88baacd975457edc890c33e0e50331e970796442e87e860d0a9a75b19d24ebd2f82b0068086585b27682de5baf39988ae2434693e41bc114586d535158","ssdeep":"","tlshash":"43f0dd9bdd4cb6306004ebf41531227678b710ea5f60efa68686e871e6254ad49c98c4","first_seen":"2026-06-17T16:48:29.180617Z","last_seen":"2026-06-17T21:25:21.574088Z","times_seen":4,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-17T21:24:50.629Z","timestamp":1781731490629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pwd%2BQOsJCKN6iErrtZwe%2FXv3vfYM06ijRwsY5zTLtUhWAxAYJVnCFf4vAVAqw7qyEpJftmIm6O9rTC7jBi9FRAi8BgDaC6sdsrYv3hLNdyb2gheYpAuE%2BVnxzWTEGep42oI%3D\"}]}\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: zstd\r\ncf-ray: a0d51fb18ab0569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49103,"size_decoded":9150,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1115)","md5":"c55bdf64fd96baf410a44734508d5689","sha1":"6fd4b680cbad43f7b430b02d5f34b69e10c30f60","sha256":"5967b844acca231a57f5854cd0d90605e3f9abd68aa3e0d73472b97a47b395cb","sha512":"62fecb664e5ffc751a32454c5bdfbb5507520e8450c738bd4d131a317ab586a0e759f7b78f6e57ddf8f60471502aad9dca1e9e24ccdcd026a0dd3ebf39bec187","ssdeep":"384:S4SMX5t/LKg15vIcmHL734IX/v0uw+9cWDnrdqoopIyODVRYpvz4:Supog15vIcmK+9toFODVRg8","tlshash":"b723951056f18672514281d2fbd59b24e66cc3a3c1720cddf3ed09a3bf4eca9998f266","first_seen":"2026-06-17T21:25:21.574641Z","last_seen":"2026-06-17T21:25:21.574641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4046,"timings":{"blocked":-1,"dns":4004,"connect":1,"send":0,"wait":26,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/index-WQZwbYwY.css","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.886Z","timestamp":1781731494886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /index-WQZwbYwY.css HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: W/\"6a2c2eae-1cfb4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 16622\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJpTXFbUfGRg7BWmY9gGIFclHriQJqrluVSi77VKO4N%2FCOkHdbHqokZ1CsGX6U%2FJmwpeeliGJi1qsYZNC%2BgiihfrkJRm4NRHQIOiSNxoQP%2FRkQt332Vth%2Bn8eIyR3iTFgOM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0d51fb30f510b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118708,"size_decoded":24577,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5b76132c9909a0da8c7467be647acba0","sha1":"c4919d424917e46284872f94f8e52d7473dd7258","sha256":"ba844b96fbb300a17400656b3bfecc400f522f17eda9ac9334317b3c49b682b4","sha512":"ca2d4e284362c5bbb278c0febaa81212742716746c423b81d45088bd0019a4e22fe5ed07d2f7e0482b18ee638c800eabfe6217c7e0a2a3a70e774d3e03e95d1c","ssdeep":"3072:F095QVh+vTHhpE5nJE9+SBkLJPcyAu6c6Tb1VG8TMno+WxFAFbv8p73TIs:F095QVh+vTHhpE5nJE9+SBkLJPcyAu6j","tlshash":"35c3b6a0b229d53fbc3764f993ccf84c5109b0c1dd2946e8ff16602256c77f6ada6628","first_seen":"2026-06-17T16:48:29.130733Z","last_seen":"2026-06-17T21:25:21.575593Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.891Z","timestamp":1781731494891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 19 Jun 2026 21:24:54 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bo5cV1YdljGoGdqF1PkR1S8NE4zX4r15P1CvKC8qYBjYeZYFfPDiTtWuobl7C7uqCS6%2BKQgCo3MZixyqJSIyNAV8ZWA8h3zeFcpmVAD%2FKnKCHscl7WcrlKfougBQOuQ%2BP8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\nserver: cloudflare\r\ncf-ray: a0d51fb30f520b41-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1290,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-22T18:32:09.270989Z","times_seen":375920,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/ms-paint.cur","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:55.017Z","timestamp":1781731495017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /ms-paint.cur HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/index-WQZwbYwY.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:55 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-10be\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 16621\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rs7VGEM%2FpdqYtqmA4jfy1yIclBMMCMaOz7oEAJLD2O4hHT%2B3xKctIQLaOwB0bdaToQGp8M%2FRwx2tDnMt1aWZ2ELKGYl95sghjzNJNJouJR02WD1vvYgkQrimqOfRX9RzsTU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 4286\r\ncf-ray: a0d51fb3df710b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":5216,"mime_type":"application/octet-stream","magic":"MS Windows cursor resource - 1 icon, 32x32, hotspot @8x1","md5":"e0d80e966b9704814215d15a8f2b9bff","sha1":"0b70adc377fbbb8cdcb7f5f922fb785401cf479a","sha256":"29db6898913c736cc060e40b452f1c5ee1cf8eee849db6ef06e30478890d1133","sha512":"331d1694e83046d8df85512428bf5e7983f32cdcdc1273c1a9ef58f9277f500011caa93758e0cf5e7b2123c204d2088a92974d544fc84ce80d1113dca3aff683","ssdeep":"6:Gl/8ylnSSS/SSSSfSvbPWye6SSSCjS5My/tBSS6EwkEwYyRwV7HSSSSSSSS7HvSc:CRc5GataoooJm","tlshash":"fc9139812e239c8df3461631043ac5f902a72fd05430115132bb396aea3ef15b8251e3","first_seen":"2026-06-17T16:48:29.19399Z","last_seen":"2026-06-17T21:25:21.576868Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-bg.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:55.018Z","timestamp":1781731495018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-bg.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:55 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-b01c3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16621\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjAzE5xPSMGZYRNLYW6hN4%2BU88qDdZ5Bnw4IjsZRnXnFaKjW8knXvLIl%2BkBRGrPquafOpY7X2y889Nibv37jzVsgCLPRdTMEiarfaKniVHYcN1%2BhzwV0T2Yxdi1E9qFGBzE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 721347\r\ncf-ray: a0d51fb3df730b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":721347,"size_decoded":722285,"mime_type":"image/png","magic":"PNG image data, 1512 x 1143, 8-bit/color RGBA, non-interlaced","md5":"0ccfbb55ed84706433f37b55e471d57a","sha1":"6a8af2e44ae05eae8f751786bdf8256ea20c8930","sha256":"f382217c69f0ac4e0436f50b8f1c5f62452ef25caef0a26907d560ade29948b3","sha512":"77c63591470801efc2baa18ad9966fa33e838157aa611522d992e20c8c03a485b2f305ad20420a7b6e2dfcfd23ad3126297b7efbe1837be9d0ab96ac3ddaa9da","ssdeep":"12288:eLLOduAf2pzYRPd+2s3WsBng3SbO2CCR4JW+AI3HyXrwbX9vknjBsFsFbfiiVd:eLLOduW2pzY99atng3Si27R2BXOKuiqd","tlshash":"35e423b750bd9d7075e299148ba6597b786293c718488bdec462f08602f7c73b6e0c3e","first_seen":"2026-06-17T16:48:29.169948Z","last_seen":"2026-06-17T21:25:21.577719Z","times_seen":4,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/logo.svg","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.903Z","timestamp":1781731494903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McWdsXi6a5r%2Fqj5f4LBUiLr7AodeXFR1SfwdM2Z56YSBQLpUglkkk10Q8VzdVEkIvXMe5AuPqtv%2Bdkj5bbAPxLV6q9Ol6bCzlSxbLdApqBt2%2Bts0OpbTRowtEu4Z%2F3rOtsk%3D\"}]}\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2c2eae-105ee\"\r\ncf-ray: a0d51fb31f570b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67054,"size_decoded":28722,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bcddffcead45517baa9dd5347f4cb853","sha1":"b4a9b67e095b7885e30210fa4fc09222b5534470","sha256":"b2288d4ce0b36f4637219e0c33186065a1bf343dfeff44ff935a5d71ae57d56f","sha512":"8b34549f7ab45f8df20f5db8bdbeba7b74aa7c43fddb195ea3de81050ce5f48d28c48c5b8fd9fdb4df2572a75eabfaa7fc2ca1df784c62ad40939ac34f529c3c","ssdeep":"768:Pjtj7yYj4av4By4toWY0Q/GX1OX5XMfR45+8qgQmf9lUrmrUQCUES0Bw+SdiHZIe:Pjtj7tMbBhuz2IX5+8qg7CmraS0PSdS3","tlshash":"8763c6ca77a5a3f4f105f3fa8712a4747a0338fa3d12caa8c7a82d55e60145c8d99cd7","first_seen":"2026-06-17T16:48:29.167078Z","last_seen":"2026-06-17T21:25:21.578597Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.904Z","timestamp":1781731494904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-4003b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YQaENhpwdywONEKDWQOx%2FOdexQaOMtzvD9nJsH083rhsOZiiHNveWZkKklNu%2Fi8lUMRyE0EyZCI3Tzdw4HsA651xMwVfU%2FpRjjL9Htxa7v2H%2BAY0LfSVwPg148mWnWLggrM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 262203\r\ncf-ray: a0d51fb32f590b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262203,"size_decoded":263143,"mime_type":"image/png","magic":"PNG image data, 545 x 583, 8-bit/color RGBA, non-interlaced","md5":"51025e0ccee7864a7e0f0c0740796091","sha1":"1eb79582185489a54e654cd9a2a46d9622ce486f","sha256":"9c8db97a725aa44de1aea24157f7db763edaacbca3a229e124f50418b9264ba5","sha512":"cb5a121b4dc6e686fb0d22536cc7a55a696b9bece156e30587c936f7feb5e46fded26cbe1c1472aece7ffdd46c6fd7f8a48fe4bbc063ba34ea617e838de22161","ssdeep":"6144:PJGpY83lOCY5x/7HJ/MW5I3q6mAL80JpGOoYJFP:UQVRpq3mAL9GOosP","tlshash":"a54423883e1fb69b18b615c049ba764c4137044b92bb78f4d7ae1b227fb065c7e9c4c9","first_seen":"2026-06-17T16:48:29.14799Z","last_seen":"2026-06-17T21:25:21.579463Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-3.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.908Z","timestamp":1781731494908,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-3.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-9976\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVUXfjlzamVV9dtTeepWwjG5pKr0NZJiH0Nu8LDC5U87X1Jyrp%2FQnCw55N1bc%2Bb5PZzh26rikxw%2FWmtKmHbVuSThoP8c29isM3RYWwO9d91fb2CThEPXtqApbdCtNIiB7Dg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 39286\r\ncf-ray: a0d51fb32f5c0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39286,"size_decoded":40222,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"4c82c9c54aa7c210908864e5b0ca9d0a","sha1":"fbbb9a77474560692a260f441113245e42c27ea8","sha256":"8fcfa5c2d273f0d9c9d3926dba8a0543a1865539b2d9c55fda4cc511bb6686ac","sha512":"88ab34fe6b53c03c70d7e4e653682eb2438d98408c22dc9f46f1507777a5636c47d1ba3dd75a0729750947cb755357648c6ace2e2947e67c718d969b17f661fa","ssdeep":"768:2C5x478uSDomxFtaEkEk5+9zGY/Z7pa+Kd/JEiB9q4+/yjAFip:2C5x478uHmxFQhQRFaHJFqxnk","tlshash":"c803e15ec9b5ceab1d932db54229cf03240f63d0ede76520dc60396ec184e2d5aa5b2f","first_seen":"2026-06-17T16:48:29.184493Z","last_seen":"2026-06-17T21:25:21.580821Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-9.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.916Z","timestamp":1781731494916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-9.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-4434\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77mRstyaqzjeG7X0tYMJQqUib1X5wGbGzqfENjT6mmflEHaq9Z7uXKkdncIdG4RqVt%2BVpE8Knf%2B6a8eSDgSMOElB3PSBY2Y0BfMpcFEicxGzYoNDJvcftBRAoeu8zK%2BRx4U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 17460\r\ncf-ray: a0d51fb33f620b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17460,"size_decoded":18396,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"e7668beb5e7d2fe76c55506a475e31d6","sha1":"4125dcfbfe0adda22d101c9ea5adf079f3b770f5","sha256":"cd8cc19af396b82c8a012763f17b463d3bc46d29437d32473bf8f80b9d796435","sha512":"b7f3847a592c4cf31bdc0882722acef8531b15094d732733b1cb925263b0079747af9bf267ed9fe47a8169d813bb2fb2089c2b5d0d311333651bd1ca48581f7c","ssdeep":"384:iStw6HlSOa17+WE9n/BFEMDJd5DZB6jKNXJa3bzDFC4eHogN+Gmzc:jVlSOU+WE5Qgv5SIXaNC4eHZmo","tlshash":"ac72c08f0ec3a47e4fc3f814d04705e47a4ad39ee702d493b956e2ec74ba2d467a1268","first_seen":"2026-06-17T16:48:29.186019Z","last_seen":"2026-06-17T21:25:21.582018Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-10.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.917Z","timestamp":1781731494917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-10.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-858b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vpdLNq%2BY%2FzbwZ8CQWYweaFpMkN9Sj8WeFuA9z56spHAoaUllG36r%2BoQXuTEFSTir%2BNuTSsK4i8cOPWdmDDFQhhb6o4UdpCktnzzyTc46bC%2B%2Bct7cHP3IHCpGL8AXbgmyWls%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 34187\r\ncf-ray: a0d51fb33f630b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34187,"size_decoded":35129,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"47d6caa1cd9e76469a28ad3ffea157cd","sha1":"c9f62d4beaf8fbb7cba011d1c00730611416e322","sha256":"e29e40808a9e2186f910e4e54897eef1d6df3e7d41ecc3d0d622f166cd3bdb11","sha512":"2a4c0dbca59028cd01f2efee08d314739370c5d4c4ab797bfe7258520458ae86dbae3eabfd19ae5cac0f955920461d17c5e47c2e1e79f16278a344662ce8670e","ssdeep":"768:rwGOHAZtjiCHr3CoKeIjgRW/4cv2/dI53xWT/YPUtY:AOiC7CoK5gRW/4l/dTrYPU+","tlshash":"68e2e1e93ac8c3d27f1ca15e4db1c3bf2a018d4b90ab299c5771da9cd4c984be018a1d","first_seen":"2026-06-17T16:48:29.191356Z","last_seen":"2026-06-17T21:25:21.582607Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/lore-planet.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.921Z","timestamp":1781731494921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /lore-planet.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-49e00\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FZcAOzjgQJ2MmF1tgNEEEsMQ9P2Mv0CGDtIwUR6wGEsisogBxMPF%2FoPMYpe%2BFGXAbFxNM3BM48hHOQJcsUTteo%2BagYJYEX5uZ4vE%2B8vPUK7d4E%2BVuEqFT2V9YqoajF2P0I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 302592\r\ncf-ray: a0d51fb34f650b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":302592,"size_decoded":303536,"mime_type":"image/png","magic":"PNG image data, 1180 x 625, 8-bit/color RGBA, non-interlaced","md5":"ade7a0cc362e1e5c4e581f3344b95206","sha1":"d021f9d211a283f531baf7795177160384285aac","sha256":"4bcabb0936d97229251255bf439061ccf8940e6185ba799a0c07768d0b6436b3","sha512":"07c9e7ec66f91ddc9bfbc9b1564fdc8f30ffc259e5023178539db146cb8844802174b67a5201d55be80a7f2228027f472654bd96e527a1400ea96119092d6555","ssdeep":"6144:Ribn6gvEH3OopmfYKVtSYdTQYJbpaJYCQJlWZ6:0xvh6mfYKVNdTLwYxx","tlshash":"0f5423d4a4d18d45c2251432233d3772e017f239b99b50eab66012cac2d77ceffa6a38","first_seen":"2026-06-17T16:48:29.17915Z","last_seen":"2026-06-17T21:25:21.58318Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/secureproxy?s=%2Fjmpd%2F","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:56.543Z","timestamp":1781731496543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"POST /secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://mumu-claim.info/\r\ncontent-type: application/json\r\nContent-Length: 1368\r\nOrigin: https://mumu-claim.info\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:57 GMT\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"a-bAsFyilMr4Ra1hIU5PyoyFRunpI\"\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 1781731556715\r\ncdn-proxyver: 1.57\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 204\r\ncdn-cachedat: 06/17/2026 21:24:57\r\ncdn-edgestorageid: 879\r\ncdn-requestid: a48f3fac3b46d49b247a27ebbeb00089\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMezufkQWV8Sb2A1INlvHFSDN9uDyyHILbv8VE%2BNMlRpwdGfOMbvCYZdzBscUBEIrDmeohL28pc%2BX%2F2XG%2F9HB2t33e7tGWltM70rEvC0bRxKYfZsudK54LDJtkRGUP%2BHDBU%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a0d51fbd58970b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":3331,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-22T18:29:52.493373Z","times_seen":16643904,"resource_available":true,"data":null}},"time_used":735,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":735,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/dexscreener.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.901Z","timestamp":1781731494901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /dexscreener.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-b4df\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xreZvXQpXf5AdtxTkJEWlRVgAXp4yHGlLaWLe3l7T3jKAarJoa2D5GFVKsj4A2niXLzAA8TpeLVl7oDsQf7nuTA2vpUscBvaIDtgoKZjy1EQ6YRLOmctcWCc3jXCGSid1cs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 46303\r\ncf-ray: a0d51fb31f560b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46303,"size_decoded":47233,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGB, non-interlaced","md5":"5f9f6dedffe5937846ee0d610df4ff2f","sha1":"6a1cbe3aabca7947dcf84a0d55be25a22f772056","sha256":"97fa3d7ed81bb3f6989811d741510f01260f6d77421b8a1b93e2bdef678d7f83","sha512":"987f1226a58866e34f4e22d9cbcc0360b1965319f7541c16b120c4c965ad123a612faa93a32fbbf2c165f278f4b45e85470e08c08ad1807bea081cf5041a19a1","ssdeep":"768:OMPCQJH+Lf6pmJNYyt27xVrN8MKGC8+7l2Nl9bcOPVlc/CfWMz6PdKCNww730boS:OYCQ8Lf6puNYyt27p8FGCZ7wNrcO0/Cd","tlshash":"6223f252d2285d8305c1db9953435efd2b47024982acff08ccdd86c6abfaa3758cf5a1","first_seen":"2026-06-17T16:48:29.133334Z","last_seen":"2026-06-17T21:25:21.584323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-8.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.914Z","timestamp":1781731494914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-8.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-1416e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucouGFEcMk1aiKCJ6zWbW%2BvzxOSo695LNytcIIXiGPJI1E0QxDZUKOLdaFQGQOwqpBH98hG1qT1xUcmB3%2BwFInK2Om4zraMZkIHjRSsi4%2Bk%2BTqwf4F7VyFWy7bUDrwP6XY4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 82286\r\ncf-ray: a0d51fb33f610b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82286,"size_decoded":83225,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"ac1f6bd98cb5de8c4ae05e17d81ddcad","sha1":"388594eee593f6ebd8b7882a358b1d52ca05412d","sha256":"b73c15ba84fb1967758b70510d571bb8acd7dc15245e40b4e99250113c953d59","sha512":"53f632a9d5bdb4c79c98b37a7c9cf5a617f5443634136f0e8a5cb3f1220af13baef25f5b2914a35c029ff5ccedfc1e30a08c9af8b420afc225cca5a07566d915","ssdeep":"1536:REDkEnRZztjwo1zCX+wZmsQbaao/mAkLskrq6NvRQtvn8uYx:ugyRZ5jwCnwZ2UmAcsk+6xRQiuYx","tlshash":"f983f02ee09bc80c74d7197d5724497acb03f1abf4549901da76220d8e6a8e2cf4ed2f","first_seen":"2026-06-17T16:48:29.151042Z","last_seen":"2026-06-17T21:25:21.585234Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/lore-mumu.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.920Z","timestamp":1781731494920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /lore-mumu.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-ddca\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4YwAUTARHysLJz3s%2F7LbULsR%2BlOk2JmMSBa0pARs%2BKqBjVp66aXFUXvFtRQcqSfhBWtzHPqnhp9SLZw4%2FOxdnMLk71smGziBLxKEqVNUrfuJTJgY3UwwcDRcP6Mc30MkYk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 56778\r\ncf-ray: a0d51fb34f680b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56778,"size_decoded":57716,"mime_type":"image/png","magic":"PNG image data, 304 x 273, 8-bit/color RGBA, non-interlaced","md5":"92e78a95c9caf2ceb0d04facb49d3f6d","sha1":"d5c9fba73de8a9f1bfb408b1417e35e71f65c613","sha256":"903f4550bb0d6a330816602d960f472e0f958414e61903dc0f642380ef8e0b5e","sha512":"1c6093a1ee596d33a6bc9d1ce8dfba963793a1772edda9194c742dd9854dcf96d06317cd440aee15d4fbff48f7f2de1039bbd296e1dbba174256311b948cb8e4","ssdeep":"1536:/3mCc5G5t04iu0bvxNjT+7VPDQ+hhgOLlucMtLTLbSRNYS:/mCcct04wjx1iFLatXLAYS","tlshash":"424301951b18c35873469cbe611a6eaa3a8779943d107aca0f3c3571a074c5f4a37fe2","first_seen":"2026-06-17T16:48:29.177927Z","last_seen":"2026-06-17T21:25:21.586106Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/instagram.svg","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.925Z","timestamp":1781731494925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /instagram.svg HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLt%2B%2Bh0iYuOxWMLtg2t4iVlQpH8dZ0qFjZ6LtfbajS8A2jkAusyYLsKVUV%2FQy4Bq%2BjWg3N7p3JFoCPhYM99DzpOs4aHK5LrJqlo%2BpQ5Ef2GjepbS%2FNdxD7KkBKmKlOLJDvY%3D\"}]}\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2c2eae-37d\"\r\ncf-ray: a0d51fb34f690b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":893,"size_decoded":1305,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bbeb573cf15de63af0f5b8e2f2f39961","sha1":"77e22484f24b19caabbe70e0d40fc8948b823d62","sha256":"a6410c13287aa34a881651c0970b077fcedf67ea847a54785da075be0d4c1c63","sha512":"adb314cd2ef00e426c7092be0936c10a8dc1a432b280038cb3294a2d193405ce641bc2da774784da343574a805443bf94ea731aad7db1b9c85d6cc3120d41b01","ssdeep":"","tlshash":"45114cf58b04041c60154761b6103938442a61f43fcedf83c766bfb7176649eea6f492","first_seen":"2026-06-17T16:48:29.143971Z","last_seen":"2026-06-17T21:25:21.58673Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-6.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.911Z","timestamp":1781731494911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-6.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-8cec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeqlnyKbIBdwXhjJ3JRp5ij%2Bv5Zcs3kZfmtU364ZCGczkY6CXe7%2BPFpBA1kb%2B7qX9mXTSL7ngPrJ4PDA41Oreg3zahnFXYYJDVYes%2BY8cCROJuZ5jvwOTqb7qaC%2FArM5p08%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 36076\r\ncf-ray: a0d51fb32f5f0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36076,"size_decoded":37016,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"d8836c41e4636c65522f7b535bee5a07","sha1":"6da726cdebeaa82cfc7c6ce9c0fa19750951c0a7","sha256":"ed32f40c9e23638f8fe63254694fe6403136e9a348e10333901b8142573a841a","sha512":"b0941896369db9b5e3d311cfc24b04aba4d94305d51d3ac2a8db22e2e35c4bfaaa8a0182012789d6ac266824648c04e974706b573c800e590ddfa2b6e80f3c71","ssdeep":"768:IZC9LkL5wZtnSotVO5yUFXvTLXevmSRkBb+G0zJo5BH3:3LO5wjn5VO5flTSvmSRSeQ3","tlshash":"62f2e1165939e6943cc37775402a4f279383dd30b2d48a64e2b286bdedd8d0998b0bdd","first_seen":"2026-06-17T16:48:29.14953Z","last_seen":"2026-06-17T21:25:21.587345Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/mumu-pumpfun-rocket.jpg","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.923Z","timestamp":1781731494923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /mumu-pumpfun-rocket.jpg HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-29383\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFSV2lJLAOkrO1VAp0WUhGJ7fEzUf6slhx3WWHAvcVvckRUux%2BKg31SNRRlZb9T%2BX3fbQz%2BsizDMy9Lb3YnO4Bk%2FdURIowt9yt0CLtFWLpeazOy4AHMw%2Bz5xP8n5o7Ku%2F8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 168835\r\ncf-ray: a0d51fb34f670b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":168835,"size_decoded":169780,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 1280x853, components 3","md5":"2c1b7b97aa17edaa928fef9b15c29f1c","sha1":"4a4d552c9d080a35448411fc5bffe41100e0844c","sha256":"0d479c339cc93382b00bf95ccae1ba163a3915051ba74689ecac6b5798e9034b","sha512":"0db57234a0f68c33f5dd175d27456fd37ed36cbb8053557609a64645150df2ae1b4ae03c1299b1dc3873c18da7ed7e688610fe1fddef8f9b7cde46be3a1ea126","ssdeep":"3072:4o3eOesZUcJqjICNWxkQ8s2SJW+57SsC7sF+1blRwzHP24VYuT17rAaB+Pfpv:4o3ksZPJFC4Oss+57ST7sFEw7P24FT1A","tlshash":"e6f312ccad68d488c0bf22f95d1b6fda1f639874998d1b3b1532cf091881bb525417ba","first_seen":"2026-06-17T16:48:29.141603Z","last_seen":"2026-06-17T21:25:21.588172Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/gyByhwUxId8gMEwcGFWNOITd.woff2","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:55.022Z","timestamp":1781731495022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /gyByhwUxId8gMEwcGFWNOITd.woff2 HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:55 GMT\r\ncontent-type: application/octet-stream\r\npriority: u=3,i=?0\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-7268\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16621\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7i4m%2FofPMF4hMFNgO4lStLrUXChbcN7b4XinJWVClDaUtpM2DaK48X8CzSvn9GfjW%2B1cUyPaPLOMqOk2AwrvvkKNafuhs38uwEAuU9NpEuVoFBy0mbxxT5%2F9U9qox7smgE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 29288\r\ncf-ray: a0d51fb3df770b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29288,"size_decoded":30242,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 29288, version 1.0","md5":"f4634c3bc1fa7cb53247e1f2872adb5a","sha1":"9d846db84c501327431670fe23b1a8ea1d2a5349","sha256":"9b6f5ff45b278c744b5f379a2c4ecbaf858a842b8eaf82ac8d21b699ca16c608","sha512":"e480a1ca3a52fdfd2f59daf185b56c9f203c4b0daa7a36537410ccefee9bfab229308145026aeea53a49d02cd7f0e89de8d4c05ec15fe80a2b09e754197afa49","ssdeep":"768:ePXLNqwQ5RnlpBAyv/2+NR6C36OojNMUp06QIhgXZY2Ko1K:e/LNHQtpBAQO+NR6k/eFp06zE0","tlshash":"27d2f155036f442269023b6a0619a9a0c172469fa9bd73c2407a6a931f67fd7d37dc8c","first_seen":"2026-05-13T23:24:18.838523Z","last_seen":"2026-06-22T18:06:41.276287Z","times_seen":4434,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/favicon.ico","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:55.160Z","timestamp":1781731495160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:55 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoERTCOnDju1pYHN%2FOk5Q4Zi%2F3RYBhfLJ47pHIp0O9fl5tCucrbT7VTsCyKIEkw9BDljlhgpvyfOFd%2B8B5YsRY%2BMw2AICcPi%2FThkPmx8RV8lWW78cqyPEziRBos8euka2ho%3D\"}]}\r\nage: 16621\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2c2eae-a08\"\r\ncf-ray: a0d51fb4bf820b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2568,"size_decoded":3483,"mime_type":"image/x-icon","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"d5324298dda50baa23c6a5e432ddff2a","sha1":"aa75fec01e954ac1be884f2a011bfc2d5f18f0f8","sha256":"746bfe48ff3713278749f2f90e5910df9429ee2d27a6fbf638581aeea2db1230","sha512":"a1725da379d3ca16036379ca24b15167bbc0e44a0d062fbd5ef82fbe74ad9f686ed31bbad127497004a09dc78b2886e56aa8a3a2507f96048a5adff00cf1e126","ssdeep":"","tlshash":"b1516c40fa5c0bbc062180332320ab33dd5ee1949eae5827509935cfad26d737f19ea3","first_seen":"2026-06-17T16:48:29.196911Z","last_seen":"2026-06-17T21:25:21.590094Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-5.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.910Z","timestamp":1781731494910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-5.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-d94e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ei9dGAL6EgUucP17gfvQbhr6hCUpRUqiiO7JEDpRmbKDkzkXwW6LkHktf%2BlD5Jk27Qp5RLTU8%2Fv6Z0JwwCW2H3ckvASOzxlHckUyPwsnFUr8h0rjM8HmG5E5iq4%2FADgUxDw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 55630\r\ncf-ray: a0d51fb32f5e0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55630,"size_decoded":56566,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"76c34ddd434a3319ead0c9a9a52510b3","sha1":"101790f359dd4c1daedb2005240e36242d822767","sha256":"e823dfac137bf6d1d18b396481aebf8718254020c8fa7b6ee96d5ff8abc8ed76","sha512":"901f86c46e8963f9bee736a7a35038e9ecf249a82472fef77c64bc8fe91a93bb22b453cc32cf28e24a32e5c90a8b6544b6da7e9ff48deeca5ded69ff5a4e1f06","ssdeep":"1536:VDZQG/4S3+Hz0TiP+buGmRd22K+jprHkhGV/:RZQG93bbwrN","tlshash":"1e43f18dc7e83282ecf51b3b022115ce031b27a3651a4860637c49593d56ffe7a729af","first_seen":"2026-06-17T16:48:29.181852Z","last_seen":"2026-06-17T21:25:21.590886Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/css2.css","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.885Z","timestamp":1781731494885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: W/\"6a2c2eae-1c90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 16622\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QDGnZRJJaCLeYcvbx%2Fmbej3vHp2iFbV9oFFNo8p1fBtSgle1pWO2K39zhemEnHodOyCpwoS4uvo%2FTEWV6ny5s%2BgDID%2FZyMGt6r0qq0ZkR2sCdDBY%2BGKSIy72Q%2BGrO46chj8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a0d51fb30f500b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7312,"size_decoded":1631,"mime_type":"text/css","magic":"ASCII text","md5":"213a4551ef4149ca6714c33c2417ef32","sha1":"399d0db20b89a5db7c2ec149a726c51625881e6d","sha256":"94ff2fe27c768ffde21cf9e164b3c12ceb943f9b51d12a4a58686697f63654bd","sha512":"86f6226f9a77310fa6f5c0e94a9f4aafd1c75b571abef36b38db4a875218cbeba876a422ef685b0268e09070de1bee9bcdcc343aea4414d38aad556728ab8d4d","ssdeep":"192:bCr4qHeZUCE4ZgeqdCN4gZeHeCO4Hqeg3a4c:2cVvDWZBf","tlshash":"afe1ae90086a9100e7971cc127cf3f725e8d61027045ca3a7ffe04a9bcaed7963a6b5d","first_seen":"2026-06-17T16:48:29.171467Z","last_seen":"2026-06-17T21:25:21.592039Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/telegram.svg","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.895Z","timestamp":1781731494895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /telegram.svg HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITGAROK%2B0i24fyrrXL8leDKVFDaimrgEyDKPT5awrzPy2%2BWNFbdQNBed7LKjtHE4Q9Dvhf9Glyi2BwXkpPHTNL92p8HzgaZTtXK%2FtVYmtZJrqQzRgp1iD%2FayP%2BHf%2FSEPwT4%3D\"}]}\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2c2eae-33e\"\r\ncf-ray: a0d51fb31f540b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":830,"size_decoded":1427,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8cf9a3ffaf9ceb127be3547e85bf003","sha1":"ac1e78ca33cfeb64a0515617a345179fdd5e90ff","sha256":"b6ddfbe7d756f1af0b21d1b5b7a36a4099ce5243578ca666e3edd702d57c4a02","sha512":"ed61180b8606f4583797c7558587fe2e74e64b489ac30cdc0428a6ce9d7d3b6e98ab038639be85ec743bbab9956251a226e4ee97d057cd55b805361c7a685af9","ssdeep":"","tlshash":"4a01f1e427887692904dfbb8c12425a53df338b86e49d25e47fe2a34f5034adc4d4dd1","first_seen":"2026-06-17T16:48:29.19918Z","last_seen":"2026-06-17T21:25:21.592655Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/twitter.svg","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.897Z","timestamp":1781731494897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /twitter.svg HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAiEsD5r2CrkkH0fGmipxuB15AezbwG4PgroZ9H%2FZXjK7EEf7z9WErxBl49jpQ%2BprWLvu3qQhK8nemNWaqSAUjveYlz0Q8es6HZQpypEG0LP7bT86gsWu%2FAk1YZ9yteZ56A%3D\"}]}\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2c2eae-26b\"\r\ncf-ray: a0d51fb31f550b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":619,"size_decoded":1327,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0be92189256e301226ea799f6fbdda62","sha1":"762e2408b1dda4b11b9eba0c7b49767cd8e01a43","sha256":"1bd306a2a8b3015be0a66b63739609fa7f8121725a6f0cebd895b640ca524b81","sha512":"c5377e178d849575cd219a44cfc98c36beec943010ea6021214c4c8f1bb7872c1d28e20599646dc575d1b18be4c664a4d26082f9b7a2219c98ecf14df3a0ce8e","ssdeep":"","tlshash":"4cf00278aa646346915c931c7ea85852547723fbfecc41948d91683178548d6386c3d5","first_seen":"2026-06-17T16:48:29.146983Z","last_seen":"2026-06-17T21:25:21.593395Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-7.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.912Z","timestamp":1781731494912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-7.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-755a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvsNFcYslEw4bZ1zzxOFOpG04%2F6Wgw6pHt7TWFrhkAiIdXQMHpsQWvX6h5D00kwT7UmDY5HdgLsnF0IJa2brCBd6PiTuHj9NbjYxk8e0rqH%2BJVhvJjJo2RTgGDJBfetpofA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 30042\r\ncf-ray: a0d51fb32f600b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30042,"size_decoded":30976,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"b10cd1937e6021753482e205f7180435","sha1":"b21bd66502ec0af44278b9e57eecdbb9dbc2e9eb","sha256":"03d4776d2b964be5f536e2af74cf9ff9c9dcaf23c3c30be906fc8aeb9b6b9b10","sha512":"6bae8b06d664f808befac9946b6ce4276372fe241bdb330731cbf33d3ccf4b46ce9c24ebc35f07132a74b5f7d0bf0491639b2a1748d865cd372d0000e22b4b6f","ssdeep":"768:8C0JaZAXcde80LcsmMgLn3nEaaYNtVR1Hnk0jOw1Kfk6l:FY20LVEXEaXTR1HnNjM1l","tlshash":"28d2e1da1adb1d3daed720b6234967caf13a056052754c32970bc2c9cc9abcd0a52967","first_seen":"2026-06-17T16:48:29.168665Z","last_seen":"2026-06-17T21:25:21.594068Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-2.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.907Z","timestamp":1781731494907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-2.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-f4f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iFOH5Slz6YpWwU7XCkGHk9x7G7hSil78oSVuE8y9YHeXLXLJRDl8DbPJfSjGdmkeurQTVFxbMY2XVQaMEuj%2BwxVrZswvwtOcA0EVN7I8xvzxUmJ2ig23J7%2BY2NoNQ6Quprc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 62711\r\ncf-ray: a0d51fb32f5b0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62711,"size_decoded":63645,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"0831f91ea5b0c2ccafd1af5d1a52b04a","sha1":"0a00eebb9ddbb83137e470be465fbc77fa1203b0","sha256":"f78be8b443f2c739e34173c4beb9e6abf62066b1c76f9906a2c24570dc84f9ff","sha512":"a7ed9557a253c74abdb7134a7615233f389acf0f84e66c7305b192cf11051066a06010395d29d307bd89c1b7ae62282990a7ed4d6a0a359f65c0be88425a3744","ssdeep":"1536:DJ2dYCXOb90HQRz/g4c9LExFBSG1kpy5h7ju6nwEQT3bSJ:DJjCXCFRLl0G3acVu6qTrSJ","tlshash":"9853021db0b74401f985d93f421afa0ca931d3ba4b51ebad0956d9f8b806cd91902dff","first_seen":"2026-06-17T16:48:29.13651Z","last_seen":"2026-06-17T21:25:21.594855Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-title.svg","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.919Z","timestamp":1781731494919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-title.svg HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHtjLlRVrfwyubI5Xq92kmm2%2Bcv2cpAHAyDJrgfsGvKflv7pC7KkJh5UWvvYd5CVno6pHEyf9MufXLc2Lool76sgQ638gSj8v1UJYhQrzq6BEqA%2BboPsn8mMVIRIqJDlQhc%3D\"}]}\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a2c2eae-5fe6\"\r\ncf-ray: a0d51fb33f640b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24550,"size_decoded":10384,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"798dc3c5fb46a811f61555bed296e273","sha1":"59f16171415bb23195f17629f53a4593f362be40","sha256":"d1e1e824bdbece87e34dd10dd973627b61c6eab083fcb3e87bb8dc03fabb692b","sha512":"d74a49bf313c10392e13ca61a5adcebebc14645f31817a84f3f035a6cdafa2ee8f3c6a85c581c265249e4d5d8fa2ab7e26f67df91a4092f9e0b37f279a8a7a10","ssdeep":"384:mC8DP5PHIea0rvrIhCz7PndWx73tsOB0vwibLV8QaRur56:mC8DRQ63YCz7fdE79X0pHqurc","tlshash":"62b2a4cd3f718dd91ac88bebbf2250ec9d57d4b7ad4a8c05d06c8f89508182dea49d93","first_seen":"2026-06-17T16:48:29.200559Z","last_seen":"2026-06-17T21:25:21.595591Z","times_seen":4,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/bg-pattern-black.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:55.019Z","timestamp":1781731495019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /bg-pattern-black.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:55 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-192db\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3It7piwQJ7oS5JOzusv4b8LexLZtjn7HiRgtS3xIJdZE24XWYQS%2BNR3dhJi3dlKWvgj7fNe028yyKKRk7J%2FanzWtAuyZzezn7Qn94NB5VWUHr1VS0t5k%2BkClUc0WnUZ7aY0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 103131\r\ncf-ray: a0d51fb3df740b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103131,"size_decoded":104069,"mime_type":"image/png","magic":"PNG image data, 1566 x 982, 8-bit/color RGBA, non-interlaced","md5":"cd1cbea95aae9647d5801fafb1281fc4","sha1":"c837ccca370d859aa3e609cb39fe79eb65497e42","sha256":"edc6fda0c8baf89ed48b1d4405ae4c90e572e20798d844b5c748433cb7fa755e","sha512":"fd990241b93bbc5d2e3702d9cb6975d01d97941839f7a211a2888af192a8bbb884777f7f74170813c9f91d1cbe5c7e7315badd4c94d544e31ed9d0cf36abe2f5","ssdeep":"3072:sNPDBEeO8kXfGCdlHhvsE6CkBTcKU6d8vu:sTxKPRPBUE6CkRc5u","tlshash":"e3a31271785939a9eb2f7473967c730c52f1269cccac3a93029df0ac328175d3665ba2","first_seen":"2026-06-17T16:48:29.195621Z","last_seen":"2026-06-17T21:25:21.596266Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/bg-pattern-white.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:55.020Z","timestamp":1781731495020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /bg-pattern-white.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:55 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-26439\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dMOa7jnWfKS12OPCiFPNJgMGwwbf9dqhZlN0EkUTXioyZBGyUbvUSGPI4iwZK3KKsQP3aFMmOED0GhJlJ93xYFlLiQmzLkFnot5xjbfOiq0yrDnOLpj5Dex7pHhbnyi0ez8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 156729\r\ncf-ray: a0d51fb3df750b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156729,"size_decoded":157661,"mime_type":"image/png","magic":"PNG image data, 1566 x 982, 8-bit/color RGBA, non-interlaced","md5":"4c0789e1cd19bfe9bf53b8f980e70a70","sha1":"726a89cf33243b016d7a88673eb13ccc7217d725","sha256":"ce756c21fd4b4182738cf85b210fa2b749a7e11137c44c3e4e00e1dc88f0ec5f","sha512":"931535d8607b7e5e67aad47002501eb64bd549ee0441d91864c8a9116656a083e3010a5be07913c9bbd8dc64db9e5e76d329550bc5d65b356e45d59e2f440e9c","ssdeep":"3072:q1WS/OqtlI4kwvxSj0gVrbIHsRcxVHla6EpnY1WcYBqu6hBCOXaExotAkruD:q15dtlIByoj5gsSVFvEK1WcUAVxoluD","tlshash":"c7e322cc6a8f709ec6d165ba553033247e326a59818161f29efdcebfef81e2424c1c94","first_seen":"2026-06-17T16:48:29.183217Z","last_seen":"2026-06-17T21:25:21.59698Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-4.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.909Z","timestamp":1781731494909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-4.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-c0db\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFEoQvMsPPABTG%2BWdKpDUQqhS9a8sC7QF0j7g3Zn2bVntOQvVuASLpJr48NTfhMp7gMllCK4GjvKP36K%2BoCUdkunF3MkrJUxjd8q%2FjHc1IXf00GRwTRreWjwwgf2jFIw1xY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 49371\r\ncf-ray: a0d51fb32f5d0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49371,"size_decoded":50307,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"7c2b7447b96dcbec8743a0805c1cbd1a","sha1":"8637707e8d4a817c17db0d992eeb7e62adf91146","sha256":"e13470789977994b133e4e8af4f8ee468c38e6ca3bceab1d7ea745af68cd26f4","sha512":"ce6cf937286e203028cc4ec630f5624f029d97683625ddd872d74c4d035bc095166a03f5c265fcc39487b8cb28f36cc90ba15c5f588527df41a60b75f29d4194","ssdeep":"768:Em6M2DRqtitfNlSk7qJ4iMsCnDnomKcG18WQTcXiMZReq+5Ua83SRHMk8sgkfi:j2QitfDX7qJ455KnCyr+d83sD8Ii","tlshash":"6f23e1adf2c3b66dcfd36cb413e6006adc43f60d798519a9df0b255da917be20124227","first_seen":"2026-06-17T16:48:29.17696Z","last_seen":"2026-06-17T21:25:21.597823Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/hero-mumu-de-1.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.905Z","timestamp":1781731494905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /hero-mumu-de-1.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-84c2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BGwp3fZ7F02EYink5qpd8Edr8xXagBgqmYot2T9XbNfUd8FFGQhznsvAUFgGA1kaO6rW4HI8ApThE66w4zohx3BOxKXk387zP8NIE9XSchPDqJIRJYyERuh4HBxGEb4eX3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 33986\r\ncf-ray: a0d51fb32f5a0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33986,"size_decoded":34918,"mime_type":"image/png","magic":"PNG image data, 470 x 470, 8-bit/color RGBA, non-interlaced","md5":"21a5e7b21a9b94c6a501bf49d3fad3d1","sha1":"63f4c162b9e10bc4c7b8311b6ce1e2e2fe37a98f","sha256":"3e470692a3ae4837f123932d067dde94e97f799c8f99c1eac52d114ed838d2b6","sha512":"73b5dba8ef072337594fa450fb13de79910c7f13579200fad5d8b8ab2ec93444cb0e2d2016a2b4e10aa2480fe42b8e6458d94b1b3b814ba247a83445847d6b46","ssdeep":"768:D1vx7mpb3I42bsUbyVjZoTXkMaX5dgGtXewbkgJ:D1spbS+V+gMaX5dhPkgJ","tlshash":"48e2e1eab28c603df18497f09c1dddb2a57742d034224a8c4dcaed16b9b46e0987bbd5","first_seen":"2026-06-17T16:48:29.172444Z","last_seen":"2026-06-17T21:25:21.598706Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/herd-hero.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.924Z","timestamp":1781731494924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /herd-hero.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-21d3d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BeopeiqYTMSo6YOPRKKEA6Of8mr%2F%2FF5ZJM3CR0wDm3spXLZggDNenWbjReWdyp5GtWQ6y1l%2Fd5ruDF2eI6yc99kzRa%2BXI8vYFRDQ3TbnR3K2Y9hMta787C1Xx9s5D8zWl4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 138557\r\ncf-ray: a0d51fb34f660b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138557,"size_decoded":139499,"mime_type":"image/png","magic":"PNG image data, 470 x 252, 8-bit/color RGBA, non-interlaced","md5":"c354be962942fb73aaa89e4af926d908","sha1":"0494231c85127abe4eacedb66d14d7a075522cc1","sha256":"343046a1ebef7ac466aadd857d2db72d520cf77c97fc2dda65edb78a0f36fcf4","sha512":"611bf0247d1fa5cb8e60829b3db21ce1f2732d3fbc38cda72dc31ff9974702c53a62866e563febb05f759c1d10135c532b61c351781c2ec6050d057451933449","ssdeep":"3072:lavy2QAxQTNZon+49GY61YXDPMaEa9fjGeHkem:lGXQGmW+49lDkwlkem","tlshash":"bfd3128bb8f01d76598bac6d0facdb6706ce7c77c153bb48f508901e57a78a16f24841","first_seen":"2026-06-17T16:48:29.152739Z","last_seen":"2026-06-17T21:25:21.599615Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mumu-claim.info/footer.png","fqdn":"mumu-claim.info","domain":"mumu-claim.info","tld":"info"},"ip":{"addr":"172.67.170.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mumu-claim.info/","date":"2026-06-17T21:24:54.927Z","timestamp":1781731494927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mumu-claim.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 15:22:42 GMT","end":"Thu, 10 Sep 2026 16:21:17 GMT"},"fingerprint":{"sha1":"26:83:61:C5:3A:9F:D3:FE:2B:BC:03:C3:90:40:57:40:8A:B1:78:BC","sha256":"5D:69:87:A8:37:96:C1:25:83:68:26:E9:35:1F:65:B1:5A:6F:6A:14:A7:30:28:A9:E0:97:96:A0:BE:1F:24:C2"}}},"request":{"raw":"GET /footer.png HTTP/1.1\r\nHost: mumu-claim.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mumu-claim.info/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 17 Jun 2026 21:24:54 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncast-mode: default\r\nlast-modified: Fri, 12 Jun 2026 16:07:10 GMT\r\netag: \"6a2c2eae-7f63f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 16622\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5el8ZE7hgmSZ8bJwOiGrz0tOJbyaMrJ%2FoyKLtg83S4eIB2twkCUW9e7WSp%2FmZ%2FqHGLj0yX0p%2BKaMQMPilwlabbtvNkHWRW46ZctHZxqO%2B50SZ7aArEYn18nzv8Xg0Dcsrc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 521791\r\ncf-ray: a0d51fb34f6b0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":521791,"size_decoded":522733,"mime_type":"image/png","magic":"PNG image data, 1973 x 452, 8-bit/color RGBA, non-interlaced","md5":"2d8a4797bc37a94ab19764b1c8c90b7a","sha1":"eee65944354362ad025bdcc9c79b96a9bd665091","sha256":"71e7bc49f3193dda7069637e8daf5c9cd1fac5288af0aa3aed4edb1bac4e73f5","sha512":"a480f31a689fb2c6663d863cae20e5f0c9a57c9f74811c3a22276f4196e97287e5f456efa7c8e5fb999562b9221765f38a0def5fcc7b6a0e5cd46c04036a8329","ssdeep":"12288:Y/if+uiC79nCMQRmml4f6lEpOaDDCL9XuTNCxhLgQP:Y/Q+upBCMkfW0a3CJXu87EQP","tlshash":"a6b423436018de5cf3d4fe76149b0073e3863182d41a195a8aaa32b396c9c7e7b5d1fe","first_seen":"2026-06-17T16:48:29.145876Z","last_seen":"2026-06-17T21:25:21.600238Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-17","alert":"Sinkholed","trigger":"mumu-claim.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}