{"report_id":"990470d0-fe1c-4b8c-92f7-c6eb2eded400","version":6,"status":"done","tags":[],"date":"2026-01-18T23:35:27Z","url":{"schema":"http","addr":"v2-puffer-flnance.xyz","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"title":"Puffer Finance: Secure Ethereum Staking \u0026 Native Liquid Restaking Protocol | Low-Barrier Validator Solutions","dom":{"size":27340,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (564)","md5":"d6ab9cf1ebde0c0267200eae0eaf5d40","sha1":"ba2ab193a426566d925ba3c632ea3c76af593f2a","sha256":"b0aecc8180736490370b5975ed2dba950833f2b94f18f46084ede334a091beb0","sha512":"aac986568d4547ff4cc64f9b166d3d889e2293fc11591107270ca21d1932e82010e45320a36a00c73bbe507528463d7c7653703454c110c5eed56d0de69f6fc4","ssdeep":"768:B0efZCJALbLM4tiRici62vp+j+CAzyYTe:uecyx4kJ62vU4yYTe","tlshash":"07c232215f45113b0a9321c4b3325f9fa1e98d24eb2361267afe43dc53c2e87cab7599","dom_hash":"domhash68347a1b72585e18717abba1a0a8abab","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"v2-puffer-flnance.xyz","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-22T23:35:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"leostop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"leostop.com","ip":{"addr":"172.237.146.38","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"domain_registered":"2014-05-22","domain_rank":463898,"first_seen":"2014-12-29T02:04:51Z","last_seen":"2026-01-18T01:20:50.320963Z","alert_count":1,"request_count":1,"received_data":5408,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-18T22:17:29.309663Z","alert_count":0,"request_count":4,"received_data":57709,"sent_data":1937,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":41692,"first_seen":"2012-09-07T15:11:00Z","last_seen":"2026-01-12T03:20:20.078252Z","alert_count":0,"request_count":2,"received_data":67906,"sent_data":1036,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"v2-puffer-flnance.xyz","ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":40,"request_count":40,"received_data":2536943,"sent_data":18241,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-18T22:14:28.232245Z","alert_count":0,"request_count":4,"received_data":35452,"sent_data":2174,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bd3bc9176a02a99fb1020a90e80dc5e","sha1":"6984df45f18046669c894053ba4e2be5050a1fa2","sha256":"25189cc70c65001bf35526118897d615bf732ad04a7145dfa62ecbdee4fd8cc4","sha512":"5c5da74e49c86acbebc64bec2a3b3af71ae9d8b6034a72c81c9ceacc76657520c05dfd2abd1c6e7587efa98122addde20285a3b42a6e10e3d8f557722e876805","ssdeep":"","tlshash":"01800000b0030c222032008e03020000200208032220800030ac00880f008882220088","size":28,"data":"","first_seen":"2023-03-08T14:34:59Z","last_seen":"2026-06-05T06:52:31.576081Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T22:13:29.276808Z","times_seen":364233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/js/custom.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dd49989a4916b45c161ec4482812e6f","sha1":"8d80c95e36401849b29485135dd1c7ae68dec260","sha256":"f3a8ccdd5084b2f37f4cfa745d5e5a59ba10c0a58a5a6db2b6574c626b53fb6b","sha512":"78e972e5851e28508f8e3924b2558abe90cc49d82e72cc3051be13f4f7d936da5a91a6b58a3c08ee350b13ba286ed1c3db39708e0e39c395284381975fe4f3df","ssdeep":"","tlshash":"3171dd4bbc0625751af7e336327e6c04ee6968174e0152243cfe01e81f357a4525edad","size":3777,"data":"","first_seen":"2023-10-23T15:07:51Z","last_seen":"2026-01-18T23:35:33.815789Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/js/jquery.min.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbde2a48700724f03cee8c63d5911fbb","sha1":"c867c50e43b7f62a4238b84e9f7fd2fffc0c6da5","sha256":"c90c190b73facc126891f2f132ec481e9d65f0eb550e34610e244adfaec23492","sha512":"75ba12d306b7d61f5dcefc6056c5f63f6126dcb2f657640a15b1d4f90b412dcca8819b6bf1e49d791f1d6f8bb71116c650e33393bb6c9c361e900914338b5b9d","ssdeep":"1536:hLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:nkn6x2xe9NK6nC69","tlshash":"368319dd72c6b06247abb1ba007f550bf2361999684d4410f129e4eabc74b4e823bf7d","size":87088,"data":"","first_seen":"2023-03-07T12:01:49Z","last_seen":"2026-06-08T07:51:18.014633Z","times_seen":779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/js/bootstrap.bundle.min.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62e633210885066c625c46081cc2b339","sha1":"8709e629eeefeb122c09d1d5f902854845a0b496","sha256":"efcad26419c1257989e551ae58bf2692e9ef872f7883df51c39ddbb2c8c74949","sha512":"ce4c8ee6fc281bb65d76755d3c97eff21b6007c1dd81096260463e3047a11e6d45cd1c290a3875958457a95818366144be97e0e40904d10a70dfb71472072f4b","ssdeep":"1536:DgrNwplwAQDQd3cHtxjbVYBiINyC9OyiM:wwcu+bVu","tlshash":"6a63d649725074a202dfa166903f420bb3376899a60b816cba5de8ed1d7cd99317bf3c","size":70808,"data":"","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-06-08T07:51:18.031569Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/js/jquery-3.0.0.min.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68c83ed206a2b972d61a89dfb6d250d0","sha1":"1d310c0931fd748d904facfead4deaf7ad5739d1","sha256":"263eb1915970b23889768338a7e7c82a23908b944100e50443183905636de4ff","sha512":"501597b1ce70eae90d68e97f2bec64490263fcc6d9c3da2e2b32c085f28c0e6c66caa4a83af453330f4b572433674e7957cfc5af5bf90351bb485cb71c61bd5b","ssdeep":"192:ZxlfqrbhUlgvxOCy/ZLhZtA8D/cU+qOh7vLQ3aCmZLBVRCt:ZxFqdpOnZK8bL+qYE3DmZW","tlshash":"0932209db6f3257598b7f038a72fde567172089b2289de10355c82941f1c838c2b9be8","size":11324,"data":"","first_seen":"2023-03-07T12:01:49Z","last_seen":"2026-06-08T07:51:18.01556Z","times_seen":415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/class1.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/class1.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 2506\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:38 GMT\r\netag: \"9ca-63349b126c080\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QladLkVVOOONVwdy3Dp2XFdIlRP33kOEDhGTQamD5oFsKsUVDnV%2F1BDQX%2BDzYC3Zz9g82ZJFjlIXKlTHKWsVI1AJ8ydQrnrtr%2BbkLAoAZQVlyeA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 74 x 72, 8-bit/color RGBA, non-interlaced","md5":"b31833fbb163dc7d6e9a2f8e68cfa840","sha1":"45ebcf2ef0bceca5ad94e54788ac086a3dc34a5c","sha256":"e7f3b6ed9a741b9fe4dd34667deb691bfd9305ab8652d5aad61a4b494705cb32","sha512":"0bbebf34f4fb013095ada46b6f5c729ac3d75d5e7130f826a28d127166c2862defc3b047e272d4644d402c05d572630f3d36d40a0d58197793984cc7c2e60381","ssdeep":"","tlshash":"3e514ca4f3e04a823d0beac034d210675516cd94d4e5fdd82485e80299b26b6046ffcb","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.76553Z","times_seen":13,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/js/jquery-3.0.0.min.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /js/jquery-3.0.0.min.js HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 3423\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:56 GMT\r\netag: \"2c3c-63349b2396900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFrvW5BGO2GVEpNhCMHtVqYdLlaE6JlrTNENk44pYdgDYzB7hwB%2FxOU8NCaqj%2BQDMfxaxNXNgXnWFth5e16R6Z%2FY4c2BiLIKPAPhs5hnm%2BPAWCw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8265b7056c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11324,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"68c83ed206a2b972d61a89dfb6d250d0","sha1":"1d310c0931fd748d904facfead4deaf7ad5739d1","sha256":"263eb1915970b23889768338a7e7c82a23908b944100e50443183905636de4ff","sha512":"501597b1ce70eae90d68e97f2bec64490263fcc6d9c3da2e2b32c085f28c0e6c66caa4a83af453330f4b572433674e7957cfc5af5bf90351bb485cb71c61bd5b","ssdeep":"192:ZxlfqrbhUlgvxOCy/ZLhZtA8D/cU+qOh7vLQ3aCmZLBVRCt:ZxFqdpOnZK8bL+qYE3DmZW","tlshash":"0932209db6f3257598b7f038a72fde567172089b2289de10355c82941f1c838c2b9be8","first_seen":"2023-03-07T12:01:49Z","last_seen":"2026-06-08T07:51:18.01556Z","times_seen":415,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/normalize.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h2M9bTRysBE0UceTxF2wxKG2FkYnrPHpLP0vprU1TznLAFlo%2FJDnQnJwQVN4ooN5ltz7GcJgZyx%2FHX%2B5%2BmKT5lSQtt2TlK9jPwkQt%2B%2BUpj6Bk7s%3D\"}]}\r\ncf-ray: 9c01e8279b8556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"76d705a17485ca6faa6484e63bba448e","sha1":"f25f2e027b74558474985ce2204e0c80bb9976ae","sha256":"5ca2800deb47172cd7bf78f2ddec7e84f477515cf6382a4b006b5b3beb9bc629","sha512":"4fedfb898052144121ea32d05a77f36926451b3ef55e0548318fb0b13d23f1ae87976e6cd15c443d16dfee3df13328339d547b225e12e9f1109686c564ff348c","ssdeep":"","tlshash":"c4d0ebdf9043728b080220a039c215c6268c13faa43a81e82d82d483139c43ecdca9c8","first_seen":"2026-01-18T23:35:33.770843Z","last_seen":"2026-01-18T23:35:33.770843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://v2-puffer-flnance.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:39:47 GMT\r\nexpires: Sun, 17 Jan 2027 18:39:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104119\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-08T22:15:44.932718Z","times_seen":258840,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":117,"dns":1,"connect":8,"send":0,"wait":9,"receive":1,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leostop.com/tracking/tracking.js?_=1768779306514","fqdn":"leostop.com","domain":"leostop.com","tld":"com"},"ip":{"addr":"172.237.146.38","port":443,"asn":20940,"as":"Akamai International B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"leostop.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Dec 2025 03:23:53 GMT","end":"Tue, 03 Mar 2026 03:23:52 GMT"},"fingerprint":{"sha1":"D1:48:DB:50:9E:CD:71:43:60:26:74:FC:EB:8A:8F:AB:84:6B:E4:F7","sha256":"37:9A:2E:A3:85:AC:FC:37:E6:7D:8D:4A:FC:38:E9:55:1A:FD:18:66:FD:C9:6E:47:D5:63:39:36:58:AC:30:70"}}},"request":{"raw":"GET /tracking/tracking.js?_=1768779306514 HTTP/1.1\r\nHost: leostop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Sun, 18 Jan 2026 23:35:07 GMT\r\ncontent-type: application/javascript\r\ncache-control: no-store, max-age=0\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64\r\npermissions-policy: ch-ua=(self \"https://*.parklogic.com\"), ch-ua-arch=(self \"https://*.parklogic.com\"), ch-ua-bitness=(self \"https://*.parklogic.com\"), ch-ua-full-version=(self \"https://*.parklogic.com\"), ch-ua-full-version-list=(self \"https://*.parklogic.com\"), ch-ua-mobile=(self \"https://*.parklogic.com\"), ch-ua-model=(self \"https://*.parklogic.com\"), ch-ua-platform=(self \"https://*.parklogic.com\"), ch-ua-platform-version=(self \"https://*.parklogic.com\"), ch-ua-wow64=(self \"https://*.parklogic.com\")\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4522,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4522), with no line terminators","md5":"7d5b1621665ac2c02b4f83694ab6cef2","sha1":"b6e9ddfc6ee783a5fa571f3bd84554bdd37602e0","sha256":"a9e5197494b6c970afe703019a1c0b027dbde4faf163133ec3824dd4e181a109","sha512":"b2bb684e09e09ab6e9eb948faa29cb00509e46e6035d6af8c56460838d7217f43ea29ace5788e0849bb4588759ddc5bf1033720a3b54f46e77e878ece744528f","ssdeep":"96:nItDJYtoAJS8ffKH1NPIX4rDIcQ0ucq4o5nZOetbdjI7BmaL:IVJYtoA1ffqzr/IcQ0ybDbmoaL","tlshash":"87911a3173c530399fe114eaa53fa758b63e9206340b4073e7adf8d23d60a5b8096f96","first_seen":"2026-01-18T23:35:33.774837Z","last_seen":"2026-01-18T23:35:33.774837Z","times_seen":1,"resource_available":false,"data":null}},"time_used":815,"timings":{"blocked":354,"dns":135,"connect":105,"send":0,"wait":106,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"leostop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/about.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/about.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 705458\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:49 GMT\r\netag: \"ac3b2-63349b1ce9940\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8AnZs8XRYAkwAOhl3Hb9Y0cGembGyWdJX1bL2EO4mPIYCeqjOaupaSFvldQxNtQR0fseC%2BiEAlnHwD6j1Zzwtb9VboTx1HBuWfaObTyvCHEibg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6356c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705458,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 853 x 748, 8-bit/color RGBA, non-interlaced","md5":"f749d7cadcfe23437cf5bd60b2f99d1d","sha1":"4b98ed5f94b64b7975dbf6811305955e7ba6a26f","sha256":"43c2b312b0cbc1631cf65afb233d1764d7f292ed6e2d5fdeeec5b163299f2096","sha512":"25d88362d02bb2a18fc5ccc1de140e23271302f00be0a505bf1569457579d195c783f2a9868421f480a54a595e812eac68064f092444f268a95b2e95a3ce84b4","ssdeep":"12288:kpdggqUI2vFn5CFnblgP3jo5q6ebgAuYS6ASn2KwQwiWVLFp+8m2sv+b+:GdD84Fn5CK3jACbiEn2K4V+8G+b+","tlshash":"10e433118064c3d1dc5b09e4a5aa584e6038cbefffd3250f2198abed6bbc3b11919776","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.777526Z","times_seen":16,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/top_icon.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/top_icon.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1413\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:37 GMT\r\netag: \"585-63349b1177e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Zb7CrOFvcJJozl2zTVTdecGVp5oUMY9%2B0BMh9SVTW8M2eEpPrKIJP3Lbnh8SaZAnkmvC6UnL2c7hesrwp%2BHp2X8qqA3KrBgU21RcuZMgidnVaY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b5e56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1413,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 137 x 42, 8-bit/color RGBA, non-interlaced","md5":"a9a5da24af0ee0729b4f9039b8b758c9","sha1":"4c877aa7145d65029c0883c0cff395e25abfc012","sha256":"3c374b21a2925674bf88351bd076b8026f7cbef11e9925595aaf910938aeb288","sha512":"e84e67010ce73c12433bb84cf8ee122febfdab19fb164c30ba39f09a019d9b0809c91de72674b7554f229c258b04794be2f989a3c7edb9aa76bbc6cb08d65ef6","ssdeep":"","tlshash":"5821db9efc029540958df85118e7c037df131c84d5d0fe76ade9e0630e050b59d699d7","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.779979Z","times_seen":17,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/class3.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/class3.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 3056\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:47 GMT\r\netag: \"bf0-63349b1b014c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DUsIj6jD%2BVR1GCSG8Q23EJ1ffgm5k9zafzMMvKFbzH%2BiRskXgOWmvRVdCcyJgPF0m%2FXXUQnOrH9ap5gIpvZK0qSg%2B3R%2Bi9S5sHuXQUZTkzWK%2BOc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 78 x 74, 8-bit/color RGBA, non-interlaced","md5":"0382f10193e38f365e0ffd28e76ccf02","sha1":"7ee1e7f405a1058641c0a32247f517e90b0fcf96","sha256":"366fbfff325f28e8f2404df97a802a27f2467209e1d817d633d379a163f6022c","sha512":"4cc65066b994ceeac7e6e309922c3fe3b1df3f7fc40154b3f11b2ac46022fa9a5ef54e59661b8b342558498a240b0d47163b5177dda7486cd11da793ace6c606","ssdeep":"","tlshash":"9251090ff6b26883209fa88134e350630a6347966ae9d6be74ce8c0e4dd7971c90d7c7","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.781029Z","times_seen":13,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/js/bootstrap.bundle.min.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 20692\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:56 GMT\r\netag: \"11498-63349b2396900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g5k4HxOjrcvpp%2FWUFszUAaUwqstxzkJ9M0M%2Fo7vcZugtgHy4ii%2F3Ug62rzqSFGGJXYoLKlR2hUhgmwRx3%2FsiolRXaAfdiGp4OQdoZrbE%2Br%2BXIzA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8265b6f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70808,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"62e633210885066c625c46081cc2b339","sha1":"8709e629eeefeb122c09d1d5f902854845a0b496","sha256":"efcad26419c1257989e551ae58bf2692e9ef872f7883df51c39ddbb2c8c74949","sha512":"ce4c8ee6fc281bb65d76755d3c97eff21b6007c1dd81096260463e3047a11e6d45cd1c290a3875958457a95818366144be97e0e40904d10a70dfb71472072f4b","ssdeep":"1536:DgrNwplwAQDQd3cHtxjbVYBiINyC9OyiM:wwcu+bVu","tlshash":"6a63d649725074a202dfa166903f420bb3376899a60b816cba5de8ed1d7cd99317bf3c","first_seen":"2023-03-07T01:02:38Z","last_seen":"2026-06-08T07:51:18.031569Z","times_seen":625,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Poppins:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 18 Jan 2026 23:35:06 GMT\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20471,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"126c2fc4d51084b7607d8e4d1ad1e11e","sha1":"1f269e16f4b33f0760d8b74541c91a6bba61c09b","sha256":"f26b1f3582bfa913f3e65b95a622e11815eceab0c07e3d70e41fcb62736cfc49","sha512":"1c00caa1d2f217e72b86bb841bf2d5e8003579517c3c336b9007881a5bb560d1148eb4961efe6eb7dc802f6bf352089bbf3446976f005482e3046917fd583acb","ssdeep":"384:H3q323Hz3bAE42YsNB10A0Wq2rvDMYJQCx:XqG1QCx","tlshash":"12928ca2083ae11867831dc122cf7c36ef4ea254b444a974abfd1cdcada7c66537172d","first_seen":"2025-09-18T00:19:00.272205Z","last_seen":"2026-06-08T17:53:57.26498Z","times_seen":5089,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":95,"dns":1,"connect":22,"send":0,"wait":23,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://v2-puffer-flnance.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 09:12:18 GMT\r\nexpires: Sun, 17 Jan 2027 09:12:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 138168\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-08T22:17:04.905299Z","times_seen":242419,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":90,"dns":4,"connect":8,"send":0,"wait":11,"receive":2,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eoRq24ewiRN8ZwTw7BJtlGaH3yyLoIMugUSRQCTxnAXgPdLfokirBUYTL1oaWw40f7mzHQgWwJmPayrAgDKMh43rKCkiS%2Bau8Bc9RHWa0fJmFa8%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e82a1bc256c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":27936,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (564), with CRLF line terminators","md5":"fce4c76261cc03a88e906349a90af58a","sha1":"9d44f1bce6a0df6db30acce435ddd751114b3760","sha256":"c64444e1b2388184b6011ff4f289d1bbe6b20bfecde40c61e6b2183e47fae6ea","sha512":"ee81502f1c4decab7342d3f63e9eb806713ed38c3679816ec6de4e0d1f061d5ebf767f1b134c1b9378dcae19c81ec47bfd3dfc7dde0aa1bdb1416eb319795bd8","ssdeep":"384:xdY/pK+0nKGNBCsgbB7Zs7DWnTJ+IgicWQx1xmxstAv/iIdR6MvMGMxA:PyKzrCvd27DcvQx1xmxstAvaId/MxA","tlshash":"c5c240315f522d3f0af311b861125b9ee2e88610eb23912576ff178b93c2d4786f7589","first_seen":"2026-01-18T23:35:33.786594Z","last_seen":"2026-01-18T23:35:33.786594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/logo.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 3821\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:46 GMT\r\netag: \"eed-63349b1a0d280\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L5Of5%2FSzYOQdhG8YC%2FL87XF8jLN%2BK6KIuCuFnZZ4cBIJRQpsx7Ikqx6i2WmDDLqWKXpW5Fte8cduW4VlT6Mxxu8Vzs9DO23Z2pGNy9WX20UTrJA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8263b5d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3821,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 119 x 53, 8-bit/color RGBA, non-interlaced","md5":"bbbcaafde534e305bcbe86fa94756ffc","sha1":"71a694d94dfea388f9d16a1ad8b3e7fd5a1d4221","sha256":"22d591822307c7c5e4a1712fab0fe0af91b880201336287e1c5ed8b2dcc63189","sha512":"5e835c80a664205748986cfc8ed6de3a4bf39f69d68f83baa13417f56e60ffe3446d4b8ae76c3cde86c19f3de1532caf83bf3bcea904d29e7d056ad5d3f2c0b7","ssdeep":"","tlshash":"16717b8cb6c03e11848ca58db4aa8a224426a8d0f0e0d8d5b588dd132c76eb7d475df7","first_seen":"2024-02-09T10:48:59Z","last_seen":"2026-01-18T23:35:33.788577Z","times_seen":16,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/meanmenu.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/meanmenu.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8dF9tKuikLPasxg%2B0Vrxj5o5OpwSL%2Fk4sjNpK8inH86jIqlfWAcZM0RYCewN5kGvkH1Fp7f7%2Bums%2FMgZR%2BrddCcHk62l1znvOW4UDytVVMk1CE%3D\"}]}\r\ncf-ray: 9c01e8279b8856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"76d705a17485ca6faa6484e63bba448e","sha1":"f25f2e027b74558474985ce2204e0c80bb9976ae","sha256":"5ca2800deb47172cd7bf78f2ddec7e84f477515cf6382a4b006b5b3beb9bc629","sha512":"4fedfb898052144121ea32d05a77f36926451b3ef55e0548318fb0b13d23f1ae87976e6cd15c443d16dfee3df13328339d547b225e12e9f1109686c564ff348c","ssdeep":"","tlshash":"c4d0ebdf9043728b080220a039c215c6268c13faa43a81e82d82d483139c43ecdca9c8","first_seen":"2026-01-18T23:35:33.770843Z","last_seen":"2026-01-18T23:35:33.770843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/te2.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/te2.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1379\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:37 GMT\r\netag: \"563-63349b1177e40\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SK8w4SuVry3g4csUVL%2FhGzk%2FlN1leTRdyIQ%2F3%2FsQFgerJPaUd5aMuvptUyOHouWMnmL0q%2BstkpQ8FGxtKjuXLdauJDTAait5iPUYtEVaBXTLwo4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1379,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 41 x 34, 8-bit/color RGBA, non-interlaced","md5":"a46bfcfdc1adbee970d236557a2f7384","sha1":"26ca9db98ce34f938787cf0b961288c0d5f609b3","sha256":"4217a9d4a76f0cea9c3742006a6ce0a846685d28a52679aa7313b4c039be827a","sha512":"6d328701998a7aa1241626b52cabea48eb62910bcba37dad998a019f5266731958d925fe9f7e9be35b2defe0c8b6b465f08b30c82b63bac6ed80dbc6580ff28d","ssdeep":"","tlshash":"832183c9e99559428384a8c220f64036c86b5c81e0b1f16b69c9d81e84a19f5d2defcf","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.790403Z","times_seen":16,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-18T23:35:05.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 23:35:05 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tg0FUiv3RKktlwMUL8MyrsVaRLoA8WJmKlSWO14Nw4ErKAkWmDtbESBgFQl%2B0X0Zkdw8rzTeZKd7Nq01OEGZpOJk8QTNcSYYog3rTHgFRYuTTWulgQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c01e8249c124e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.0.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":28132,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (564), with CRLF line terminators","md5":"e768d09246237b799eb4ef78dce9be2b","sha1":"c8b97bce55d9b5da6b687272fcb0e727b14b8226","sha256":"263e941c27a5df11c20afc26f792480bf4a955436c50137af15b296766ef97fb","sha512":"23be4ef0bce25ed68a891b8cb76f40b2a0545cceb581d8336c9efcde89b458fd93498e353f53414817e90fe9118a50dbe864dceaf25cb03138290d5fea1bfc5b","ssdeep":"384:xdY/pK+0nKGNBCsgbB7Zs7DWnTJ+IgicWQx1xmxstAv/iIdR5MvMGMxO3:PyKzrCvd27DcvQx1xmxstAvaIdAMxk","tlshash":"f8c240215f522d3f0af311b861125b9ee2e88610eb23912576ff178b93c2e4786f7589","first_seen":"2026-01-18T23:35:33.791321Z","last_seen":"2026-01-18T23:35:33.791321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":85,"dns":64,"connect":1,"send":0,"wait":101,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.0.3/css/font-awesome.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 04:32:06 GMT","end":"Sun, 05 Apr 2026 05:31:55 GMT"},"fingerprint":{"sha1":"E4:3E:65:D3:05:EF:8F:3A:11:69:6A:52:FE:6B:BB:A4:DF:73:4E:E5","sha256":"B9:7B:F7:C7:4B:6E:66:E0:D7:DA:7A:8B:0D:2E:8F:2F:E9:28:B4:AB:91:95:86:14:DF:44:15:CB:39:DC:EA:41"}}},"request":{"raw":"GET /font-awesome/4.0.3/css/font-awesome.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 18 Jan 2026 23:35:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9c01e826582edfec-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"1f9e9d1a5a1d347d945ef4b7727f2ea0\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:53 GMT\r\ncdn-cachedat: 03/18/2025 13:26:45\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 755\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 853f5ce0e3f7fc65f52092891c944c54\r\ncdn-cache: HIT\r\nage: 2138024\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21658,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with very long lines (305)","md5":"1f9e9d1a5a1d347d945ef4b7727f2ea0","sha1":"2a8eccf4ac288eb99979b62dcc1cc1036d8ff8fa","sha256":"3083e8d3b21ddc3f0e6d65ec3580aa6edfaadca5d9737d9caa27e6a233e1ccf3","sha512":"c67c0c483bfb36fe499976f8f20283e44c553a75c06cda415950174e8f41256449472806f27c1023cd68e5b61ef26c9cf6488417faa13063e3912b05d3a8721c","ssdeep":"192:bq+lW/OvbgA6f20Mc2SBvipVZ6AFatEUISIDLvnkvMa+0k9YT/nod1B2RNbYImDu:Jv3Sd81wEVSIDLvnkDyYTQBrlk","tlshash":"76a242ece5bf18809395e0c17386a330bb3db72d9c4a6d9cd2a2799cb5c1654c6863cd","first_seen":"2023-04-05T09:47:25Z","last_seen":"2026-06-08T19:31:44.878184Z","times_seen":4113,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":7,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/loading.gif","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/loading.gif HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/gif\r\ncontent-length: 35499\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:49 GMT\r\netag: \"8aab-63349b1ce9940\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZysBa7ujSd%2B7eKr4lb5FJpyRYTRDubkXuyGDr4l3ioH6Ppiv%2FSXIVa%2BwDV1SQ7AzNFUI0ksxEuWS9QkkMEEOF4HgNbhpJiUXZGXMaX8Cx5%2BnD8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8263b5c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35499,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 498 x 498","md5":"556e9ff845b7dd0c62dcdbbb00babb4b","sha1":"c7359ebc8f832b145abe7b62edb9f0d7bc6dd7ed","sha256":"f5e268852fdbbafbf00b7135099e5e6ec041be4be023f864aebf6c291176e91b","sha512":"04ce9454d075666776dfe6032964473660de83801be5854890f7834fdebc69a3a00096b491c41c434a3cbcbdd898b125b8b5ff1e2f0b9a68fe66b869255431f7","ssdeep":"768:uGZdG4LM3Sjwwj9XcTNrojggVh10opx1l3b2zE5jZUYICnFODfB5:FXXMCj9mFabz11H3qzENutCnFOV5","tlshash":"f6f29e6e52f85bb97e062874340e21ca4dcf581c4db7bf275c70b8ab8a55f39284cc46","first_seen":"2023-05-04T18:08:47Z","last_seen":"2026-06-07T06:13:56.014746Z","times_seen":194,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/banner_img.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/banner_img.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 505977\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:41 GMT\r\netag: \"7b879-63349b1548740\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spbXhxCPT4nKzu0AyYDnfJWampjl533eVdMQoEdI5J%2B4gmAi%2B8d6HH3Vkd7X8HRO1oJnUdculFKtwEgOnfSYpFtJixYxut%2FXjVtba%2Fzue7yg7G8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b5f56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1013 x 867, 8-bit/color RGBA, non-interlaced","md5":"2c9e7895854ccec318f6f007889168ba","sha1":"75aa12ae66ff1fca72b2f2592eea2d1b9e96fd5f","sha256":"55bcc18188edde1f1a35c6d9ba14cb0174d38e7409d19103158a4733d427458f","sha512":"027aa85d07242241f727d97beb21b16a475715205474087b15dec7ad6ed9c5206927e0961015a34bfb6dd231f5965035020bbd2e70398627b688b40af7f63199","ssdeep":"12288:frwmUk2V/XunBeVwtBIKQDM+IeyRz814aZUSxinxnWIM:fEmQXuxPITDMN7lkqeSWIM","tlshash":"f1b4238af0af5ae44ae6071abd10f22587e03a4e3e13a27003d5559af539a5f434fd7c","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.794755Z","times_seen":13,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/sakt2.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/sakt2.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 148348\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:44 GMT\r\netag: \"2437c-63349b1824e00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Blot2I%2FZyRSEQiD1EQoSBPe7eufn%2FVn1GQ13HcsD5WYlCwj1lU88MOIeqJnQYOtkcM830mSGt1qB5V%2B6Zs0nHd3CxMDTI%2FQ0tcvChx1FH9n2v04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6556c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148348,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 362 x 595, 8-bit/color RGBA, non-interlaced","md5":"849d09ed796b1c0c444caa5f084e77f4","sha1":"53c7676c3c6262f29a071ad078390faee1d1153f","sha256":"11ac563f8c69eecfc545ce624967a6b53d7d9ddb9fb54db21979f74ff8559955","sha512":"d062076a38f7f498debc555d75157fc9cf74fd610fa597ef8c4e6bb87f7dd46cf4b5c8923d92ccdaee95523540000111e131533668acb13eaa12af43f95d3cad","ssdeep":"3072:DlYZAAtS1KOIemLfVmwit49YyAfnthQ2M1nt0yVawJXTLya8utoz1VP:D+ZRtMJ5mDVmuDAFhQhnCyVawh/8utoP","tlshash":"52e312d6bd286314289b87f1999f04bcaeb350a74e5af801dbc609b29bed17107e05f4","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.797384Z","times_seen":13,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/sakt3.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/sakt3.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 139827\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:43 GMT\r\netag: \"22233-63349b1730bc0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNMqt1Z5JQ%2BFGY4JQAGd6re9CxJisINTT9qmyzCrwGN0DHEJYmeFAlEUQj%2BeRt4gqCug%2BZw5hVwEy4F6Z5y824ADJkYpaBcknfKO67xqnM2rOrI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 387 x 595, 8-bit/color RGBA, non-interlaced","md5":"bf0833fc95e8e7603395bd2707a9d09e","sha1":"6390911136b4060efe43c392d992806a1b2720a8","sha256":"44bc5db5811f947e78f140a7bf8d6374d91b6314039b6ecdbc8ad028e3b48297","sha512":"1af805a643dbf40c5b1b08a519fba46ce78382b47bdf34150012074fc84355e6a51635bc6fff3693ef45243fce810e2f9ae92731e0f4ca9b15d3306d1d20f283","ssdeep":"3072:1OxA4oM85DCHjv4YH2x70I9M8elm+8hTfel7:A78wjv4YH+078Tfex","tlshash":"2bd30235144bdec7accc20356fa259a47642f6c91990af3c979e0faf041e11176c9baf","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.800575Z","times_seen":13,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/swiper.min.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/swiper.min.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybC6eGtbMgtj3fE5Zp6jC8uZvIiLQfW9LMjjXLWvR%2F6FS5d2FWYxE6JvE26%2Ff8y51aEuiUUyRHFXvfFlXcSDhmau1%2FHu10yEFemUTiqKOAU5Bm4%3D\"}]}\r\ncf-ray: 9c01e827ab8956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"76d705a17485ca6faa6484e63bba448e","sha1":"f25f2e027b74558474985ce2204e0c80bb9976ae","sha256":"5ca2800deb47172cd7bf78f2ddec7e84f477515cf6382a4b006b5b3beb9bc629","sha512":"4fedfb898052144121ea32d05a77f36926451b3ef55e0548318fb0b13d23f1ae87976e6cd15c443d16dfee3df13328339d547b225e12e9f1109686c564ff348c","ssdeep":"","tlshash":"c4d0ebdf9043728b080220a039c215c6268c13faa43a81e82d82d483139c43ecdca9c8","first_seen":"2026-01-18T23:35:33.770843Z","last_seen":"2026-01-18T23:35:33.770843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/responsive.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/responsive.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 1256\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:09 GMT\r\netag: \"1d4d-63349af6c3f40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNnQL%2FkmmwkfV4%2F%2Bpf%2BIb5A7%2BoB7KnQGsgggkgryIBzW14xO7HtWILbnotL5uQ%2FN0Nv6xvE5Jb9TgBaEN5sjUg84SrG4AyVsGW2UDRxv3TCI24I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8263b5b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7501,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"bd28ad2f52473a842c7c6183886436c6","sha1":"bce57ca54578394ed449bbade1f8777cbc1e5a86","sha256":"caaef4d632c6fe7d97d1c6851872dec3cbfd9b5b262723b7a05d5c07750014e0","sha512":"238ab5c9a0c6bf9d1a25c7a0d4e73dd33180e06e6fb1ac541768bad396172dced2b4ca661c034faa7c66097490b2f175951d569b5b5ac230338bdf2225dab07c","ssdeep":"96:4JkZt/Ks349t/xF3AdRIE+a0NDh/UomuFmbt/L0/SOc9K3AK/ULKtFr9xLt/l+:4Mof9JiGNDhMUmb9/9KvMsxLX+","tlshash":"5ff1691bae002048183bf379e7b30255fe2b08b3d3859166bdef62518f76554466ef9c","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.801957Z","times_seen":15,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/font-awesome.min.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/font-awesome.min.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 7053\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:10 GMT\r\netag: \"7918-63349af7b8180-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYDO87zTqn5OyjNZ6Waccs6hZGPgODnczCYDoKCfbK15ii09B54Akml28uc25kWj5Mx3vnc7yTzkzHQm5YBOrnfRNhB2vyYuLG2Q7AiIb3owqbE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8279b8656c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31000,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-06-08T22:05:10.91161Z","times_seen":284024,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/slick.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/slick.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gT5RnTJr5b7vVE6iV0gBqAocicjI4l5Y2trSkrAmdHRr0%2BrKtM9Fz08uPI0lcfZ2bsyF5yGAMdBgBfaK1QifU2xPucbB%2FrY%2BOQNu7u6MKfV1eP8%3D\"}]}\r\ncf-ray: 9c01e827ab8b56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"76d705a17485ca6faa6484e63bba448e","sha1":"f25f2e027b74558474985ce2204e0c80bb9976ae","sha256":"5ca2800deb47172cd7bf78f2ddec7e84f477515cf6382a4b006b5b3beb9bc629","sha512":"4fedfb898052144121ea32d05a77f36926451b3ef55e0548318fb0b13d23f1ae87976e6cd15c443d16dfee3df13328339d547b225e12e9f1109686c564ff348c","ssdeep":"","tlshash":"c4d0ebdf9043728b080220a039c215c6268c13faa43a81e82d82d483139c43ecdca9c8","first_seen":"2026-01-18T23:35:33.770843Z","last_seen":"2026-01-18T23:35:33.770843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/nice-select.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/nice-select.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70BmK5%2FbYzT7dTEzuTO4VGmMq8q%2B1zwQd80jw8Xjy4xYKlOjUXqU7tDrYk0vzdfJ5GjP%2BBVEDeQHCJWzWPUxlB7HR8qeivfEsn%2Bn9Ivm7LFrANg%3D\"}]}\r\ncf-ray: 9c01e827ab8e56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"76d705a17485ca6faa6484e63bba448e","sha1":"f25f2e027b74558474985ce2204e0c80bb9976ae","sha256":"5ca2800deb47172cd7bf78f2ddec7e84f477515cf6382a4b006b5b3beb9bc629","sha512":"4fedfb898052144121ea32d05a77f36926451b3ef55e0548318fb0b13d23f1ae87976e6cd15c443d16dfee3df13328339d547b225e12e9f1109686c564ff348c","ssdeep":"","tlshash":"c4d0ebdf9043728b080220a039c215c6268c13faa43a81e82d82d483139c43ecdca9c8","first_seen":"2026-01-18T23:35:33.770843Z","last_seen":"2026-01-18T23:35:33.770843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://v2-puffer-flnance.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 15 Jan 2026 10:07:55 GMT\r\nexpires: Fri, 15 Jan 2027 10:07:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 307631\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-08T22:15:44.897379Z","times_seen":353471,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":116,"dns":0,"connect":7,"send":0,"wait":8,"receive":4,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiGyp8kv8JHgFVrJJLucHtA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiGyp8kv8JHgFVrJJLucHtA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://v2-puffer-flnance.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8668\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 17 Jan 2026 18:37:30 GMT\r\nexpires: Sun, 17 Jan 2027 18:37:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104256\r\nlast-modified: Mon, 15 Sep 2025 16:34:16 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8668,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8668, version 1.0","md5":"a242ba0df3a128a2cab929a8c45d5056","sha1":"d70e2c70b21cbb66cd883ae56e2dedacefd81c7c","sha256":"50d0c1742d80ac71f4cde20e8c04d41a24806af342831f479938b527fbff0972","sha512":"fc85567dd0270a60d684f9e7fe8788006b2a4985a683334294c5b2b8e1dd9d268a787c232c91087fa25d8fbf81c73894c3846e3d4deb97a1722575cc9c93b541","ssdeep":"192:mnQ9l6zvmoW1McErCT/IHf11y41NSUVZVdH9aTbMlcE:mQ9l6CoW4+rIH7y41QUVZXcT9E","tlshash":"e102af8a951b1eced41769b184abc61fd78894199bf2708fe05d34c15dfbcacc707421","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-06-08T21:41:04.982954Z","times_seen":26851,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":111,"dns":1,"connect":21,"send":0,"wait":9,"receive":1,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/favicon.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1602\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Sun, 25 May 2025 20:11:23 GMT\r\netag: \"642-635fb6f70f0c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIxsWNVkTSftYlZ4PRjgESdGH%2BLn%2BcaMc5sHV0AsPCC7xl7ZbSuPjO5X4GRkQsLO27mQmLXi1RMbMaG9f4ZC87nE9j%2FpQw5Nr%2FS818Db8FNYlM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e82aabc956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"fe09c56ea6ae8194f5e942c339519cac","sha1":"08b4ccb5f884e78584b5c6af1068d7aa26e366ea","sha256":"d0f8d70dd0ff6c42347af140d7bea6a0ddf4f25894037dad7351f0af6b66502e","sha512":"69a57cf378ea3aaaf8de1cf00b105942691ca067333974919a597b48d255f0aaa9c3beac2f0dcc3b435c39750ec16431292cead7a2a0cce1f2fe54256b94c61c","ssdeep":"","tlshash":"2631eaeb4b38ba81dc28245ee073327dae34b716b4436ed67436a4495715e920b95213","first_seen":"2026-01-18T23:35:33.805587Z","last_seen":"2026-01-18T23:35:33.805587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/style.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 3719\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:09 GMT\r\netag: \"4bbd-63349af6c3f40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=44W4ZpdSkFMp2kx%2B1RfOVD3YjHSzQLEyBKRXno6bWiWJNe81DfZRvlfx05WDY2ndsy6UBSZTA5bXfX6iT%2B4a%2Bax%2Fd9qvlJv7pUV%2BR9mrpCtjo8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8263b5a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19389,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"014b282dcef6f4c2b083d35339d4f588","sha1":"8b7634bfbcaea2bdc33b0aa087f00071abe8b402","sha256":"3bf25c5d1c04eada1ea8c75608604fd96ae4b00aa2ad218349c8e3f4500ed1fd","sha512":"2cc6811100ec3a5b46c3b3c420cf7c3ad5510f919abec14e35154cab83cb6dd082de0756c5e261ee68266385a1c85866693a27f23995931a7440a3af8ee99563","ssdeep":"192:9HVYoGC32g0qGUQ2UBVqFkaUmhi1eXTvz7q6PHn+ov12PhOnVGfGgU/0SHugyJaJ:Sa9k1C/+otWiuiPN","tlshash":"fe92ec58ef1221476233dab8b7a20751fb1854539b020179bbee62548ff54b8963efcc","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.807478Z","times_seen":16,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/class2.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/class2.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 2386\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:38 GMT\r\netag: \"952-63349b126c080\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcMrd%2FopKz%2BbgqlLNoiJFP39XBof%2FF%2FlrSsVlOobXpGsj9q1v3PAOKpKpZgHXHbd018Y16TmG9Qdywe%2BNSMp7l0rV4RrxFy0fES85EXTpJTeV9c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 66 x 74, 8-bit/color RGBA, non-interlaced","md5":"6a89e26217556cc26b695b531a158964","sha1":"a2790e9ab0b402d2b0ab25b9c978a6d43159c70f","sha256":"05afef606941bc99b6aee74104ad01fb1d0696f13953ef0dd7454bcb26ccd78a","sha512":"53e0e9a903b03a8e9d6a93481601aaaf0ec5312ad3b47a592547bcbfc45a8459058b77365f171bff4a1e3ce795bd0db50f4d36d9dc01a6ac2374d5bf26cf4af6","ssdeep":"","tlshash":"ee410a5bb5926c83a90df18118fae90749404553b190e86e72ceed130aa12efe51d4db","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.808431Z","times_seen":13,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/test3.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/test3.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 3393\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:42 GMT\r\netag: \"d41-63349b163c980\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpNpxo8d2fYzjrwae%2FW21zTY0b7tJj8938LhIxLb4DIn0KXlshwqiJsCEypUeoc2MLE6q5LvPgOaGIt5afAjlUJMpVMaHoPARekPcPrJ%2BoXQdMw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8265b6d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 49, 8-bit/color RGBA, non-interlaced","md5":"f4062808ea9ca0d6b8e1048c394615f3","sha1":"64037cb923f95393f8f756e014cba79892d7a5c1","sha256":"ccb113fd6ab8ffcd08c39d9d4c272a96d6e28d3b7edc4b40a49210bd2c4a9222","sha512":"4653e081a58cb72cc2a6ec7530249207c351d4159355a571098da29c04e538905dbd1eaf866276b00f797198eeb38d0c0e25f77125534ca78d9ec316ee82a65b","ssdeep":"","tlshash":"99613938d48014382638b482a4e154759d03dc8aa9eae8a33548c43e9df07ebc6f6ec7","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.809307Z","times_seen":16,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/js/jquery.min.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30329\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:58 GMT\r\netag: \"15430-63349b257ed80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1YXtOTd1wdWccfq0UyTED7yIyuMBoQC1Zh5crYUfGpDjrVKfAaVGKq%2BwPbM7%2BYpGzfiEWOogsIk9T2bC9RcjOR5ifFoU33F4Qmyk6Ij8reP6v0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8265b6e56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87088,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65290)","md5":"cbde2a48700724f03cee8c63d5911fbb","sha1":"c867c50e43b7f62a4238b84e9f7fd2fffc0c6da5","sha256":"c90c190b73facc126891f2f132ec481e9d65f0eb550e34610e244adfaec23492","sha512":"75ba12d306b7d61f5dcefc6056c5f63f6126dcb2f657640a15b1d4f90b412dcca8819b6bf1e49d791f1d6f8bb71116c650e33393bb6c9c361e900914338b5b9d","ssdeep":"1536:hLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:nkn6x2xe9NK6nC69","tlshash":"368319dd72c6b06247abb1ba007f550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T12:01:49Z","last_seen":"2026-06-08T07:51:18.014633Z","times_seen":779,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/animate.min.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/animate.min.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QO%2FG9kxr%2BVOi54kyMB0Hnlh3MsjW9uTcKLvQ4UhQYNWZTOmUZ3sw8uEJTjl%2BEam9lEX7eZElh0Y2UWHnYgeHadliTXCy8dfZBpOoKDDeA%2BO1PKY%3D\"}]}\r\ncf-ray: 9c01e8278b8456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"76d705a17485ca6faa6484e63bba448e","sha1":"f25f2e027b74558474985ce2204e0c80bb9976ae","sha256":"5ca2800deb47172cd7bf78f2ddec7e84f477515cf6382a4b006b5b3beb9bc629","sha512":"4fedfb898052144121ea32d05a77f36926451b3ef55e0548318fb0b13d23f1ae87976e6cd15c443d16dfee3df13328339d547b225e12e9f1109686c564ff348c","ssdeep":"","tlshash":"c4d0ebdf9043728b080220a039c215c6268c13faa43a81e82d82d483139c43ecdca9c8","first_seen":"2026-01-18T23:35:33.770843Z","last_seen":"2026-01-18T23:35:33.770843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/jquery-ui.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/jquery-ui.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BwBTTzsDtXTVxFRM6Nce7cdkCKd0GPAMVSZ5iA%2B2y01NQ81wOMMdDSTDZKepTQGLswjOLT548n2Jt0mN5cm3p2fp5e7O6OJB%2BQxrXJb7BNGA%2FI%3D\"}]}\r\ncf-ray: 9c01e827ab8d56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"76d705a17485ca6faa6484e63bba448e","sha1":"f25f2e027b74558474985ce2204e0c80bb9976ae","sha256":"5ca2800deb47172cd7bf78f2ddec7e84f477515cf6382a4b006b5b3beb9bc629","sha512":"4fedfb898052144121ea32d05a77f36926451b3ef55e0548318fb0b13d23f1ae87976e6cd15c443d16dfee3df13328339d547b225e12e9f1109686c564ff348c","ssdeep":"","tlshash":"c4d0ebdf9043728b080220a039c215c6268c13faa43a81e82d82d483139c43ecdca9c8","first_seen":"2026-01-18T23:35:33.770843Z","last_seen":"2026-01-18T23:35:33.770843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.0.3/fonts/fontawesome-webfont.woff?v=4.0.3","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 04:32:06 GMT","end":"Sun, 05 Apr 2026 05:31:55 GMT"},"fingerprint":{"sha1":"E4:3E:65:D3:05:EF:8F:3A:11:69:6A:52:FE:6B:BB:A4:DF:73:4E:E5","sha256":"B9:7B:F7:C7:4B:6E:66:E0:D7:DA:7A:8B:0D:2E:8F:2F:E9:28:B4:AB:91:95:86:14:DF:44:15:CB:39:DC:EA:41"}}},"request":{"raw":"GET /font-awesome/4.0.3/fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://v2-puffer-flnance.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netdna.bootstrapcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: font/woff\r\ncf-ray: 9c01e8298d860b55-OSL\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: W/\"3293616ec0c605c7c2db25829a0a509e\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:53 GMT\r\ncdn-cachedat: 05/16/2025 11:33:53\r\ncdn-proxyver: 1.27\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 756\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f02a010b48eb08e278353e2bb013dd7f\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44432,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 44432, version 1.0","md5":"3293616ec0c605c7c2db25829a0a509e","sha1":"04c3bf56d87a0828935bd6b4aee859995f321693","sha256":"0fd28fece9ebd606b8b071460ebd3fc2ed7bc7a66ef91c8834f11dfacab4a849","sha512":"72ac7f041eff447e156e2716a43d8d2e124669efc410c0ddf235d7df0627fd9f98d6a3269f94efcbbadb1cffe3641cd594a8420614e62b04ba9aff0fe7a906a5","ssdeep":"768:i6VzVymSbSDcPi1iyD9m9ySj+H2fmwsTtxNIZOcMmMfSXHJlAhAZnZiBzu6CHqKv:bVyW6i1iyD9Epj+umwsSZOcMm9XzAhaf","tlshash":"e813f1d16f11f170921bc1760e683f7c8733276e6ac249abcd52dab0db2e5dc960e242","first_seen":"2023-04-06T21:16:19Z","last_seen":"2026-06-08T21:14:06.899841Z","times_seen":8726,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":33,"dns":1,"connect":0,"send":0,"wait":70,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 19 Jan 2026 00:23:05 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VyCjkwa7fMidSqkX3p6%2BQbHt0NiUjEnBcQqTlpZORPQVhoSqdzx0gqa%2B4jlhoy%2FYSU2rF9oNkHm%2BC6JKlgTx%2B%2Bi2jt4m%2FNbkD39t9ksptllSgik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:05 GMT\r\ncf-ray: 9c01e8265b6c56c7-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T22:13:29.276808Z","times_seen":364233,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/sakt1.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/sakt1.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 138516\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:44 GMT\r\netag: \"21d14-63349b1824e00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AtPwTi1e0lncB6iZy71IpDY3ZUh%2B5HGPbgZcSfQ%2BRk6hxnPhc%2BTTfyZ%2F0S9CHv7jw6VGXzaTmKZsG2aMCv6Ch8hrOPlKaWaMWQB4UVD%2F4g1f9Yw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138516,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 377 x 595, 8-bit/color RGBA, non-interlaced","md5":"4e62905d656586e41154f2be5f3e1071","sha1":"f65d8092228a3feb81d528b4a054c0cfc894d868","sha256":"3d931606d5d6ec3492930dd60461485fda31848f07dcddc3dd946a0e0e598424","sha512":"148ccc7767a218cfe80461d2ca73de5c56a49bac7f1f7df54137fdfa1b9c4449e38b473ea3e133b15c59e5b84841e62944456731218c934e7cf43d6f58b28b29","ssdeep":"3072:idCoJnT1Dlo+AOL9fibBIntB19Tx23BIKI:UCoJTJS2L9cBytB19TxwBIj","tlshash":"2cd3128bfe2d0330779e94256087c1bcd24271ea8dd55cf338f6c906ba1a68d257b369","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.812969Z","times_seen":13,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/te.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/te.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1151\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:46 GMT\r\netag: \"47f-63349b1a0d280\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=50JEp0g09iw0vl8cAsw0kDpMLZAfQtSApURwRN9nBU3Lme1PC71WfNRxU8%2FvBv3PpkzciS7FlcoqkOEbudF14mxJa3QgBO5qa%2BW5b20xTTIpJTU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 21, 8-bit/color RGBA, non-interlaced","md5":"4e3fa0b417a7000dbe7d31be0c9a2161","sha1":"064e436b971582f7cd0e2b9a0034e84515c26780","sha256":"afc4ac9c6bfdcacabc418c1fc19258109eeabc0969cf3380477be1ef85416fc5","sha512":"34360c30d4824899f708229b395f0d29ae4ff07f1eb6d98d47072bfc2d839e95b85944be383a06082b502270bc8f3120e51cb0a14fa232da0b099e8cdbefc707","ssdeep":"","tlshash":"7d21414efc01ac014658e68534f5813ad6675ea0e794b6a67adfcc266d393b1441a0cf","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.813807Z","times_seen":16,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/js/custom.js","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /js/custom.js HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1209\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:57 GMT\r\netag: \"ec1-63349b248ab40-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k1vDglyQlsJ%2B7iM1vBRDp59intloJm3pVPAtjdpESUVCdyDotoDQJFwO9BBRZqSHLTU%2BETWyytqM6CQUNxig3MXhxw8DcXYNl%2B7xrQzIXzElwh0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8265b7156c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3777,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7dd49989a4916b45c161ec4482812e6f","sha1":"8d80c95e36401849b29485135dd1c7ae68dec260","sha256":"f3a8ccdd5084b2f37f4cfa745d5e5a59ba10c0a58a5a6db2b6574c626b53fb6b","sha512":"78e972e5851e28508f8e3924b2558abe90cc49d82e72cc3051be13f4f7d936da5a91a6b58a3c08ee350b13ba286ed1c3db39708e0e39c395284381975fe4f3df","ssdeep":"","tlshash":"3171dd4bbc0625751af7e336327e6c04ee6968174e0152243cfe01e81f357a4525edad","first_seen":"2023-10-23T15:07:51Z","last_seen":"2026-01-18T23:35:33.815789Z","times_seen":16,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rajdhani:300,400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Rajdhani:300,400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 18 Jan 2026 23:35:06 GMT\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5718,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"890583dacdbc48d3155991cc85838538","sha1":"d3e085d05a0748cad96960e6baaaed03f8953662","sha256":"973829226d0ed346e57f98b2526ed405d47525dea607db0713309058682727c3","sha512":"85ffb88f7bffc2fc22383893315cbf46b10b9fb210290702458a6ab91eeda9c38ab4d193bcf6129ae0210e8daf10a4ee0ca6ec2da7df3c771ddfba41b6f7725d","ssdeep":"96:8OWKOWAJc+uqOWSN/OLmOLcJc+uqOLoN/OgGOgMJc+uqOgr6N/OxTTOxTTJc+uqM:YC0HzToaao49xkH4HUCDL","tlshash":"e3c133a1092bb85067933cc213ce7d36df0e23946854a935affe1c9cac9ac765351b4e","first_seen":"2025-09-19T05:10:02.937666Z","last_seen":"2026-06-08T13:14:11.818528Z","times_seen":429,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":94,"dns":2,"connect":11,"send":0,"wait":19,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 18 Jan 2026 23:35:06 GMT\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27925,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"728f1a937c0a09e894010b346804fd9c","sha1":"1d2f224d5a60e42c958615a23332fda28d0f7ace","sha256":"7b626923503496796048a93aa1203b151a587d20547faf0cd9357522dd7e3bcb","sha512":"9dd60d676878af732782839c3db16b1dd5e13a3130a5d9f08cf28185d63a398107f63fac8a1e730cf061314fe1fe57376c878e262c1f1971af74e2ca27423584","ssdeep":"768:pCJmwBUiRDfMTcfFBhiEymDcTYeBai75tdmtC0BQiVPTnw30CBGiv1BX:SrAwyl","tlshash":"78c200a1041750009b838ce223cebf35fe1f52517142d0b5abfdab6badcbc66526936d","first_seen":"2025-11-19T00:16:18.378968Z","last_seen":"2026-02-19T18:16:49.766746Z","times_seen":838,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":145,"dns":1,"connect":10,"send":0,"wait":19,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Courgette\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Courgette\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 18 Jan 2026 23:35:06 GMT\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":851,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"51341ee4f2a835a623e18824bba0dc49","sha1":"2e291339217f6b0dd03641254d20072a443c4ddb","sha256":"04caaf5f8682a9d9164eca3cf9b4b9d41d263f4c5478a3bbc8ebb604c9709780","sha512":"11b9ef0e71372370980093cd9964f989b2b8a61d37740526073e05b3628c16c9e39e8e69a76b86af83d317a6cc259da19f8836b13862492e4b7a3213fb1db4db","ssdeep":"","tlshash":"4e0141810867a540eb931dc056ce3e32ef6e21512844d978affd18c8fcabc6b535178d","first_seen":"2025-09-26T18:13:15.747979Z","last_seen":"2026-06-06T05:57:13.099589Z","times_seen":211,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":110,"dns":3,"connect":21,"send":0,"wait":19,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/icomoon.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/icomoon.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 4578\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:06 GMT\r\netag: \"6efe-63349af3e7880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dB4d2qeDPXUSmzsLApM6uBcvmZZdassww48G7dKrcnWL19iIidiCJcK9CV0VnmMm5W6%2Bo7FRinGJYgGkMdKyDu8Wzo49HirJyrp9zydOINkFz6Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8279b8756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28414,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e841f7cdec90ebf92272192c8e8bc027","sha1":"adb98f477baaa9e703034dbb04e374f65800124a","sha256":"c009b6d8414d258f737d128b4519be3f3a13fcd81b7b3682753ff06de3b54d13","sha512":"529e0ff0425b347e606f91d55f3c258d9915bd32436772ee6e6d52dcae55d5762205f0f524e46c9fd11be83d70b766432649fa49892f97c6ef5407748ddba762","ssdeep":"384:1vfEmkaDelzw5LSnbng06YyUa6u56RnaiM:D3eBw5L/8aX","tlshash":"7cd280a4d9bd1c811311e4d1625b2600ff19b36a8d8e6d1ef693fa8cbbe2615c5c23dc","first_seen":"2023-04-27T00:13:09Z","last_seen":"2026-06-08T07:51:18.046664Z","times_seen":236,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/test2.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/test2.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 6114\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:48 GMT\r\netag: \"17e2-63349b1bf5700\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UccOpgHmyGwkaJrzqAHlFO6B6Sm%2F5a%2Fazd3DBLqzkqKWNkKzkCT4MYbokrp0pwdcloml03ETR3WdaT8Yq3S7xY3Y7MzIluK0jYo3nhXOlVt%2Bf0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6114,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 63 x 67, 8-bit/color RGBA, non-interlaced","md5":"f89f9a2845ba037a07c7028f182b2919","sha1":"3bd0ec2901e18d0e2dd97bdf9fb0114451a80273","sha256":"de66e5c355b0df3f0d1253a6aa57a8865cd155b897cfa4cd4fb9a05269e8bfe0","sha512":"14cbaa2294d72a54a2a4fde51f811a2586bce425f6031556eb16dd6c0e9442cfbc825cae328feb71065cb1daa0abc1d0934a908189764cf6d8cd2cd076d87e87","ssdeep":"96:V2EDBJernk/OFD836vcOqWGL1wRFLgrz3i0bLFJ9nFeXJWYzbGtkjgl0Qk/Q:tDBJOk/O6qIPZMUr7i0bLFJ9naWYerlB","tlshash":"2bc18e421cd30ad31266168659754875ee547e84cdd4f2e72c8bd934e8260e50f0bedf","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.820311Z","times_seen":16,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/shop.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/shop.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 232339\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:47 GMT\r\netag: \"38b93-63349b1b014c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ngDG0MFnbeIwDOvGH%2BOpqmGCMPvda9vGd8T5klxHKZCFwTdfcnF3kIgP0f0HxR8SbZDyVg2qhig8YhZuM9r2Jj1SWnmUGPjofR8gXlcMZLcg44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6756c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 902 x 989, 8-bit/color RGBA, non-interlaced","md5":"bc2aa794debfa5ff0af7342d5d60a9f2","sha1":"2d04de93d13878d4b38bb1643417a49cd1f9a6f7","sha256":"a4d312426ffee4484fd478b02fdd538fa5671f1f6620aa9866d4e18141e97020","sha512":"c526994429f99496a2430d283585b24a1bf38e89521ca7076e44f80017167dac5efd3857742dd12c75988dd919d03930f39da7e86fce6ac3dd16f6e2da1ab398","ssdeep":"6144:0Cvv4+dfv7/+C2NaxbVQN5XBvt4KA0dnfiUEnzf:fv4+V2rNWiNJBxAEqnz","tlshash":"be3413f811222b8655bd20f1744f1ff52e0a0f94a1c6deb6a4a94dd4bf1b960ec3056f","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.821202Z","times_seen":16,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/test1.png","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/test1.png HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 3869\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:43 GMT\r\netag: \"f1d-63349b1730bc0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvB8cmKl4N8VjGOHiVijlx7Rd4KtT9xJ93Hwg94GLdlpoFQ0O6bAUmvS3nlif3y1NPa89opzZfB%2FI4ZJFPpf3C30na3BAYQpuidJFMyMCM%2B%2FYeY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8264b6856c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 52, 8-bit/color RGBA, non-interlaced","md5":"c7ce675fab227850acf170fe063ca275","sha1":"2e0552878e82fff4c207c1baa6bc72d08296f84e","sha256":"92af3c6a73135538ad278b2e1e6397aafaf703b2405a2d9f839ab7100b0cdfa2","sha512":"631000e504343a417c87e781c2445669dc2cbc0cfa3c92abbc8b8e2c0dcd2cf7d3350610451e564123726568fc2e43d023387964fedb06f74fe70ae6dfd4419a","ssdeep":"","tlshash":"7d814e5ef8404d83d0c5c69118f94175d83b4271eafdf47a359989ab4b30277194daf3","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.823386Z","times_seen":16,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/owl.carousel.min.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/owl.carousel.min.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 1034\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:06 GMT\r\netag: \"cb0-63349af3e7880-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGthxyj1%2FkjW4FJ7YTnp5VjSFQkX9an8apLYpDLPKKgWz13RdkjXDfWRQxI%2BJfTVabyfqaxoBvmQhLOCmsrJj0tuGWzTJyIyTrPSn4hA8DSU%2Fk4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e827ab8a56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3248,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3081)","md5":"351b4e5f569a83790bed10824208390d","sha1":"c20bb4cbb04f19dd2ffc4e8734b96fe06cdc9b48","sha256":"813f1398bf1531b20c365414d810e75f2ae867a70391794ca28eb57e18117c66","sha512":"3ef7171c3f87a2137717b23f3d057a310a38ff5cde2aa1ff78de76b1faa3d8cad5e392703417fbeab184d1260d7e0bce50c42ebfdf173f1e193c92e8ada41c2f","ssdeep":"","tlshash":"da61abe5354a215f480f83221dd85e86393dcc52d8660a5a92bbd71487dae2d113ffcf","first_seen":"2023-04-06T21:44:07Z","last_seen":"2026-06-08T07:51:17.999846Z","times_seen":755,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/jquery.fancybox.min.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/jquery.fancybox.min.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4a55rRpTQ6JTylMMbWasvjUrTW4DdHbvSBZSNk5Lz%2Fiuv6sklDLYpFL%2FbuLsS2heYawFxQrnuoGIujy7rN8G14sAhCz4XX1hkw8DJZbIXDdW59Y%3D\"}]}\r\ncf-ray: 9c01e827ab8c56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"76d705a17485ca6faa6484e63bba448e","sha1":"f25f2e027b74558474985ce2204e0c80bb9976ae","sha256":"5ca2800deb47172cd7bf78f2ddec7e84f477515cf6382a4b006b5b3beb9bc629","sha512":"4fedfb898052144121ea32d05a77f36926451b3ef55e0548318fb0b13d23f1ae87976e6cd15c443d16dfee3df13328339d547b225e12e9f1109686c564ff348c","ssdeep":"","tlshash":"c4d0ebdf9043728b080220a039c215c6268c13faa43a81e82d82d483139c43ecdca9c8","first_seen":"2026-01-18T23:35:33.770843Z","last_seen":"2026-01-18T23:35:33.770843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/images/about_bg.jpg","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:06.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /images/about_bg.jpg HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 110224\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:39 GMT\r\netag: \"1ae90-63349b13602c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8pkcgEb84YTEi7G9R8IU%2BjrWnXFOIe1wN%2FCxHMpw5WyR7AwKO%2B3QZsdpr9GSJpp%2BRsqeNeMvSOljQGHQr447aloWKp3uIbJ8p%2Fa%2FNaHyRoP3uA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c01e8293bb456c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110224,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x836, components 3","md5":"3bd0ae978ab6453081a0fe9d1d2079aa","sha1":"fc1e80c229530bd07ee4076eea430c9f582b324e","sha256":"df27668fccca16a591754f014f45d729cf01238084e50d3507a10a87d9cc31cf","sha512":"af6350e2dc776f65e7132167a8dccbf65c4a9eef0e71cf971836122fdd14a318ad33acbcbf9b82f2e3990ca11f3e192f4fe1fd9fc2b1e2f1060eb03e1a24d97c","ssdeep":"3072:wMYwt+Dpu6V0/vXaCvQOBKzL+lEapCE2Yj4dXn2vDiU:wMAQ6V0/vbIYKf4EmCJYsnhU","tlshash":"0ab312f5986b4c03de11063572fed1e48a4b250477abe91f8723d3abb4a6b1356209f8","first_seen":"2023-10-23T15:07:52Z","last_seen":"2026-01-18T23:35:33.825282Z","times_seen":16,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2-puffer-flnance.xyz/css/bootstrap.min.css","fqdn":"v2-puffer-flnance.xyz","domain":"v2-puffer-flnance.xyz","tld":"xyz"},"ip":{"addr":"172.67.184.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2-puffer-flnance.xyz/","date":"2026-01-18T23:35:05.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"v2-puffer-flnance.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 11:09:01 GMT","end":"Mon, 09 Mar 2026 12:06:44 GMT"},"fingerprint":{"sha1":"D2:86:89:18:ED:24:6B:F2:29:41:12:2F:C4:3B:94:B8:1A:48:DE:9D","sha256":"AB:B6:CB:C7:DD:E8:74:E6:90:C2:02:93:0E:4D:47:63:C1:F6:58:EF:4F:B9:C2:44:12:45:37:90:CF:D4:D5:FA"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: v2-puffer-flnance.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2-puffer-flnance.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 18 Jan 2026 23:35:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 21021\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nlast-modified: Mon, 21 Apr 2025 13:17:08 GMT\r\netag: \"22485-63349af5cfd00-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zc0dA3i1pnrja7h4OrkaGtrIh9GBcSrrv8sxCMlPo2WTfc8GY1t3MCZvJkEaG%2BmgXoubN7XKlTAFFukXI2Tc1fExBVtlIAm4d66msWDU%2FAQfPSE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c01e8263b5956c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140421,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"fee68c0f2f583161134a1fcb5950501d","sha1":"8e52dd818562db0ba0764bba172cb91ce248d8b0","sha256":"34959e43e6ecf368807a84f92ad9aa6e2dcd5f0c5c1e57da55e8f3248d9d9255","sha512":"27a95fcef696926b91a45635982ce6cfc9409b774729d9ad947178a648b018871e5944c3047738a438f102011f93e54c453a8d431da5176d2aa38fb448949429","ssdeep":"1536:sC1wwlUP+1+QYYDnDEBi82NcuSEz/9OO//gIENM6HN26O:d1luPsT/YIENM6HN26O","tlshash":"cfd362a7f5a0312da467c61960d0bafe156f8285d7221ffaf42737644b895cb0a73e0c","first_seen":"2023-04-05T02:48:14Z","last_seen":"2026-06-08T21:57:53.788311Z","times_seen":2044,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-18","alert":"Sinkholed","trigger":"v2-puffer-flnance.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}